last executing test programs: 8m40.692256218s ago: executing program 2 (id=156): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 8m37.23422744s ago: executing program 2 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='Z', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000801) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xf) socket$nl_generic(0x10, 0x3, 0x10) 8m34.495164887s ago: executing program 2 (id=165): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_mptcp(0x2, 0x1, 0x106) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f00000003c0)=0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r5, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x48010) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 8m27.637659609s ago: executing program 2 (id=168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_usb_connect(0x2, 0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 8m25.15970817s ago: executing program 2 (id=169): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r1 = dup(r0) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x20004800) recvmsg$can_bcm(r1, 0x0, 0x2100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019c80)=""/102400, 0x19000) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4040, 0x0, 0x0) preadv(r6, 0x0, 0x0, 0xfffffff9, 0xffffffff) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000020000000240012800c0001006d6163766c616e00140002800800030002000000080001001000000008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 8m23.577237943s ago: executing program 2 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8m7.80266656s ago: executing program 32 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7m57.18289765s ago: executing program 0 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r1, 0x0, &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@RTM_NEWMDB={0x18, 0x54, 0x8, 0x70bd26, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x2400c110}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 7m55.7217172s ago: executing program 0 (id=203): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000000)="ea", 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r4) 7m54.023145036s ago: executing program 0 (id=205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x20001, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x80000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) 7m52.701407293s ago: executing program 0 (id=206): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000500)={0xe, {0x5, 0x5, 0x0, 0xf0, "b9d435d933426a58c9c286c37b1e8c131437e9449d35c0ba8d72a4d8ca09277140ade2a6a94f4eb281ad81d19b56968d29fae2f51d09cd5f910503b21e4e5f0925be40ea94e8fbf399bfc440ca85dd291981a40da08de28bae605e27f6c74edea0d4415fa719dfb7bd42800793a1b0bf0847255d6b728d7e4b464af77de736fcde082ddb16b5b3090f6d81002b0f29f6d60685fbcced3b6cc13aee90657e8b27bcfb64ad9e30c84b6b279e62b2dc6b8e5063f377a44476c00cd4507d293ed09e3293577cacfe5f6dbbc617ab492eb6cccdca1423d5d12eb71a380b70b9ac591a149a1d9bab8dea659c06bec086ca5172"}}, 0xfc) r3 = geteuid() mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x80000, &(0x7f0000000600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{}, {@blksize}, {@max_read={'max_read', 0x3d, 0x7}}]}}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x1, @local}, 0x4a, {0x2, 0x0, @local}}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900250000000005000000", 0x29}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000040)=[{r6, 0x644}], 0x1, 0x7f) r7 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f00000000c0)) 7m49.704312575s ago: executing program 0 (id=210): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r4 = socket(0x1000000000000010, 0x4, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x8000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, &(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="f7", 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 7m47.762968045s ago: executing program 0 (id=212): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x3) r1 = syz_pidfd_open(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() process_madvise(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x18, 0x0) setns(r1, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 7m31.282191597s ago: executing program 33 (id=212): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x3) r1 = syz_pidfd_open(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() process_madvise(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x18, 0x0) setns(r1, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 3m15.724106711s ago: executing program 4 (id=520): r0 = inotify_init() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000540)='\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x36b}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @local}, 0xc) syz_open_procfs(0x0, 0x0) 3m12.164231751s ago: executing program 4 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x9, 0xfe, 0xfff00004}, {0x16, 0x0, 0x3, 0xfffffffe}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0xfff9, 0x3}, 'syz0\x00', 0x38}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r4, 0x5501) write$input_event(r4, &(0x7f00000000c0)={{0x0, 0xea60}, 0x12, 0x6, 0x80}, 0x18) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setaffinity(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000200)=[{0x0}], 0x0, 0x1}, 0x20) 3m8.947477184s ago: executing program 4 (id=527): syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000780)=0xc) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) capset(0x0, &(0x7f0000000040)={0x200004, 0x200004, 0x4, 0x0, 0x9, 0x5}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x6, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) close(r5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2000de, &(0x7f00000007c0)={[], [{@context={'context', 0x3d, 'system_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '-&:'}}, {@uid_gt}, {@subj_role}, {@uid_eq}, {@measure}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x462, &(0x7f0000000300)="$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") 3m4.2310432s ago: executing program 4 (id=529): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380), 0x0, 0x34000, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x2}, 0x28) writev(r4, &(0x7f0000000000)=[{0x0}], 0x1) open$dir(0x0, 0xc0002, 0x80) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3a957000) 3m3.158349254s ago: executing program 4 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$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") r1 = creat(0x0, 0x182) fallocate(r1, 0x0, 0x1, 0x2000402) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r5) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r6, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2d5}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863ed", 0xd6}, {0x0}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x200000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)={0x0, 0xf801, 0x1, [0xa]}, &(0x7f0000005a80)=0xa) 3m1.063766341s ago: executing program 4 (id=534): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20044850) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x1, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000840)=[0x0]) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), 0x0}, 0x20) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2m43.960871286s ago: executing program 34 (id=534): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20044850) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x1, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000840)=[0x0]) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), 0x0}, 0x20) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 25.234151811s ago: executing program 6 (id=672): socket(0x10, 0x80002, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100020c59efc30836df7000000000000", @ANYRES32=0x0, @ANYBLOB="000000001415020008001b00000000001c001a8018000a801400070020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/238, 0x6e}], 0x1) openat$audio(0xffffff9c, 0x0, 0x59d041, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23.014710121s ago: executing program 6 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303030303030303030302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666d61736b3d30303030303030303030303030303030e3a513334f6f9a6a6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c648bb5e16f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c0016a3b6cfc30a6b6ea8fea18cfc48fdd94c0591b42f43fe4be411b5eba2b809955bea57e386f8294c57f39de988284b07250e04596d1625907104c7f7796ae6f91c4a546cb460e8b2c9f6166ae1ff7a5e66800828d764d89a7151af89d574fa143d4284ea55977cb7d4b018aee77791a5e50d85c1613c85812975fd5e3d04fd210f76395f7105bf864c063699d12dd45cc1460e03464dc0d782ea786b15ba648d54b57be073d0eeb56c7d2c5af204a735e18b4d736bf0c43c8c9a9778e1e7952cc6c38049d08f73b01e70c6b5c24fea92b569adeb26efdef668541efc1e32038bd2498b929710e0be39045a86e3f654705943bcaecd1cf6a32d51da0a12de44dd93c1cc98711ac512d7dade70b92f7c4e34d987f0c5af374a9baaa8644fa97bc143ea5a761e234dcf880549870e770adf64caa7cc4cf759c182820600000000"], 0xf5, 0x2f4, &(0x7f0000001000)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1b020ba487bfd163, 0x0, 0x0, {{@in6=@mcast1, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@empty, {0x7, 0x0, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff}, {}, {}, 0x3, 0x0, 0xa}, [@algo_auth={0x56, 0x1, {{'cmac(aes)\x00'}, 0x70, "f76c53a22efbe5b37da0debc7f83"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) 20.697679304s ago: executing program 6 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000090000000400", @ANYRES32, @ANYRES32], 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000600)=ANY=[], 0x18) r6 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x13, 0x400, 0x70bd2c}, 0x14}}, 0x200d4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="87000000000000003e1573d3951242"], 0x8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010002000000f8dbdf25010000005c00088058000080240002007b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf124000100f44da367a88ee6564f020211456727082f5cebee8b1bf5ab1837341b459b39220400018008000300a1dcc10e14000200776730"], 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) epoll_create(0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) 18.134993611s ago: executing program 3 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYRES64=r0, @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 17.502907865s ago: executing program 1 (id=681): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) write(r0, &(0x7f0000000100)="d3f76ed5711d1a90b4a64994feeb0525b5a62c4faba3fbdafde38545312abcebecea155fce80eafafe6de81b328b709c70a4e0c7", 0x34) socket$inet6(0xa, 0x80002, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r2, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) read$FUSE(r0, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0) 16.218225024s ago: executing program 1 (id=683): r0 = syz_io_uring_setup(0xefd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000), &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_ublk_add_dev(r0, r1, 0x0, r2, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r3, 0xc, 0x4) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x2d8, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0xa89}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sendmmsg$sock(r8, 0x0, 0x0, 0x4000051) 14.697808309s ago: executing program 1 (id=684): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4, r3}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd(0x80000001) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000180)=0x7a553352, 0x4) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 14.551218262s ago: executing program 5 (id=685): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 11.97876741s ago: executing program 5 (id=686): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x642100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) 11.97849715s ago: executing program 6 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000001000)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1b020ba487bfd163, 0x0, 0x0, {{@in6=@mcast1, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@empty, {0x7, 0x0, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff}, {}, {}, 0x3, 0x0, 0xa}, [@algo_auth={0x56, 0x1, {{'cmac(aes)\x00'}, 0x70, "f76c53a22efbe5b37da0debc7f83"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) 10.079511613s ago: executing program 5 (id=688): r0 = socket$key(0xf, 0x3, 0x2) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) landlock_restrict_self(r1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r8, 0x4) socket$inet6(0xa, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0) 8.825550321s ago: executing program 6 (id=689): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabb7fc9bb68d1df88a82b008100190008004ebd02f900680000082f9078ac1414bbac1414bb868700000000020f1ad9a4cd3bdbed2faeb6ca28ae0005d46a11634e2c62aedc01037b07101f3462d0fcfe0f647f6c28f4d157000da3e23df9148913333cd499051188f763d72d71cddf89e9be603984f006102784755e41ecd35e59b6d313b83e060b25974a58669da2a4dd0612d2d2d1fb3c6dd4e8eb9ff1ef232c6e64020f3fa96b73c2e7a272a2a3fe3dd044183430000000050000000600000005000000030000000344447bb1e00000010000000be000000200008ad86401010000000000e000000200000fffac141442000000066401010000000004ac1414aa00000008ffffffff0000000c000c21880b00fa00009b2047b600aa02605ba2d4d43ad536c3ead7ecc4c480adbcded174c7e91ced0004c8936012c776402e558872da2b52513290220f56811c8f0d6c4fe271892546669ae20a60d7fe38ac933428f50c85503e657d3ca40dcafb3bfbb37423ae8ffdc4ea9f64a6594bf2c3f7b76c81b92525c50e59300aa2ab958d6b1ffd656b7dd1eebbfc6441b800e7a0377b8fafcd2c7cc5cb8674aac57676cc96cabf92d356c8ed183430e3698919935602bf2ad8e0e85cf6e40a86319fae1029657f6ffd4a8ce88980d3d9daef15a657b15de657d35463966a87f5ca546f9c070075761f0808cdf8eaa9dc067e9a2b30c4f0a3984999a8ed973c94c680f20147040008000001f03291972cf310546effe1f556d9d152d80955de9d24d23fb9bfa475a0e616af1f1f9b6cd0732715dc32d1d89417bd000086dde044262c7deb71f3ad2075f421a376502d21fd380f95c20320016eeb637396877d86bdbfa381a12be1f2a916d96a47f188305bbc11e07e3f513e8e101d800aa43d698e1ddcd56577d52b69"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x126}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000280)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, 0x0, 0x20000011) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r4 = io_uring_setup(0x1781, &(0x7f0000000140)={0x0, 0x5dda, 0x40, 0x0, 0x268}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040), 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 8.824848991s ago: executing program 3 (id=690): socket(0x10, 0x80002, 0x0) socket$alg(0x26, 0x5, 0x0) io_setup(0x3ff, 0x0) io_destroy(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100020c59efc30836df7000000000000", @ANYRES32=0x0, @ANYBLOB="000000001415020008001b00000000001c001a8018000a801400070020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/238, 0x6e}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.720971503s ago: executing program 5 (id=691): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x910406cad9436d97) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 8.667022664s ago: executing program 1 (id=692): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$sock(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40084) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) fanotify_init(0x1, 0x1000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r5}, 0x8) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) close(r4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) 7.386124593s ago: executing program 5 (id=693): socket(0x10, 0x80002, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100020c59efc30836df7000000000000", @ANYRES32=0x0, @ANYBLOB="000000001415020008001b00000000001c001a8018000a801400070020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/238, 0x6e}], 0x1) openat$audio(0xffffff9c, 0x0, 0x59d041, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.612594261s ago: executing program 3 (id=694): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = socket(0x2b, 0x1, 0x1) listen(r3, 0x5) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f00000000c0)=0x5, 0x4) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x8000) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x1, "ee220000000000000006c348a52d1f485cf6ad827da723359d4602397835a388", 0x0, 0x1}) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(r3, r0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000140)='pim6reg0\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.526945508s ago: executing program 3 (id=695): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x845}, 0x24008004) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8020) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 4.525111528s ago: executing program 1 (id=703): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210080, &(0x7f0000000ac0)={[{@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@lazytime}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nombcache}, {@acl}]}, 0x1, 0x5a0, &(0x7f0000000380)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0x0, 0xffff}, {0xffe0, 0xd}}}, 0x24}}, 0x4040) fsopen(&(0x7f0000002380)='ecryptfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000180)={0x0, 0x0, 0x2001}) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x84, @multicast1, 0x4e21, 0x3, 'sed\x00', 0x0, 0x0, 0x4000003f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa050101, 0x4f25, 0x4, 'ovf\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4e23, 0x10003, 0x9, 0x1}}, 0x44) syz_open_procfs(0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./bus\x00', 0x1000004, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESHEX, @ANYBLOB="20c9925d4e1aab1392bab9d35adecf0c12ad6138f42dedfd10207532ff4481b0d9ab4b837a632a2793bb74de151447ba6951c50bbc3fc0e834b3ceec993b8cd2042a2be730b357cd7270f0874664b0012ea5b0ca487349023ca32a46da2712b0598c6e50d604cc3424bfc29046ca904b507ee47b5ecbf3d4fdb092656860ee5c02dca714f8b14b4e2ebbdbad09b9eff3ee6137981614f883ddf57ce2db9cd39b80518dd1121879a471b0fa056a828a1b39", @ANYRESDEC=0x0, @ANYRES16=r0], 0x4, 0x5d9, &(0x7f00000010c0)="$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") 4.524383788s ago: executing program 5 (id=696): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) r2 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='dirsync\x00', &(0x7f0000000100)='./file0/file0\x00', r2) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x13c) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10, 0x0, 0xfffffffffffffff0}]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f0000000000)={&(0x7f000014a000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) 2.358754746s ago: executing program 3 (id=697): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r4, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000300), 0x37db, r7}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r7}, 0x4) 2.267469359s ago: executing program 6 (id=698): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000000000000001) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000019400)={0x8, 0xff, 0x7, 0x6, 0x1}) personality(0xfe47fef9f5ef7379) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) personality(0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x71, &(0x7f0000019440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60000000003b3affac8b2bf17793f13f2ed53d1699fe8000000000000000000000000000aaff0200000000000000000000000000010401907800000001637c364d00062fffff021000000000000000000000000001fc00000000000000000000000000000033001a4066000000fe082f"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f000001b500), 0xb0100, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f000001b4c0), 0x0, 0x0) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f0000000180)=""/104, 0x68}], 0x2}, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) 2.62281ms ago: executing program 3 (id=699): pipe(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0xfffffff7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES32=r5, @ANYRES8, @ANYRES8=r4, @ANYBLOB="3979d9023c2fb08cb17a32658146ec4f61d74831200581cdc05b9e1e973fd9a392dbdf337f6d60488a14297f7bcb09e644bf55a764076c3977b4d0076396929fb2386de2f851d28fea60d76d923975893b1653f586b242c77f24bf2a98a26ffaaa7e961f020fb4883635044ae2ef083449c8ba7b05c183df32673214c5c26095fe8bd0aa8ce81241a81b2eba93d904d8944927b51e8acc4fedb68de25fb73a5f3e5f87cd8445032789e33ef954e7d6ef2813750b9f57c0a0b06f2842c1b0e05c8597488bc732b81ba410"], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getdents(r6, &(0x7f0000000240)=""/48, 0x30) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB='dmask=00000000000000000000000,dmask=00000000000000000000006,errors=remount-ro,iocharset=cp932,fmask=00000000000000000000001,namecase=1,iocharset=iso8859-14,namecase=1,namecase=1,uid=', @ANYRESHEX=0x0, @ANYRESOCT=r7], 0x1, 0x1534, &(0x7f0000002840)="$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") rt_sigpending(0x0, 0x0) 0s ago: executing program 1 (id=700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x7a, 0x0, 0x9}, 0x28) kernel console output (not intermixed with test programs): 80] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.274676][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.285939][ T5784] Bluetooth: hci0: command tx timeout [ 93.298570][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.316318][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.328954][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.341094][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.354009][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.372752][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.398897][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.413892][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.427636][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.436959][ T5784] Bluetooth: hci2: command tx timeout [ 93.437122][ T5784] Bluetooth: hci3: command tx timeout [ 93.449960][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.474250][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484717][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.499895][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.511697][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.523542][ T5085] Bluetooth: hci1: command tx timeout [ 93.607840][ T5777] veth0_macvtap: entered promiscuous mode [ 93.695354][ T5777] veth1_macvtap: entered promiscuous mode [ 94.634647][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.651795][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.668701][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.673893][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.690060][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.702731][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.716867][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.728628][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.743666][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.875975][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.881124][ T5844] syz.1.5[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.890298][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.911212][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.911974][ T5844] process 'syz.1.5' launched '/dev/fd/6' with NULL argv: empty string added [ 94.924040][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.942482][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.954204][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.971994][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.017427][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.040752][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.047350][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.062952][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.074372][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.088983][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.132250][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.154217][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.189014][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.220770][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.356126][ T5085] Bluetooth: hci0: command tx timeout [ 95.366409][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.387043][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.519112][ T5085] Bluetooth: hci3: command tx timeout [ 95.531496][ T5085] Bluetooth: hci2: command tx timeout [ 95.534101][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.564573][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.606554][ T5085] Bluetooth: hci1: command tx timeout [ 96.685056][ T5856] Cannot find add_set index 0 as target [ 102.418011][ T5881] tipc: Can't bind to reserved service type 1 [ 105.819856][ T5898] futex_wake_op: syz.0.15 tries to shift op by 144; fix this program [ 108.284220][ T5909] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 114.704682][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 115.540831][ T5942] loop2: detected capacity change from 0 to 512 [ 115.803282][ T5942] EXT4-fs: Ignoring removed bh option [ 116.902710][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 117.475316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 117.729146][ T5942] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 117.922653][ T5942] EXT4-fs (loop2): 1 truncate cleaned up [ 117.931200][ T5942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.190784][ T5958] loop1: detected capacity change from 0 to 1024 [ 118.207867][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.226436][ T5958] ======================================================= [ 118.226436][ T5958] WARNING: The mand mount option has been deprecated and [ 118.226436][ T5958] and is ignored by this kernel. Remove the mand [ 118.226436][ T5958] option from the mount to silence this warning. [ 118.226436][ T5958] ======================================================= [ 118.373127][ T5958] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.437582][ T5958] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.553271][ T5958] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.719533][ T5958] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 120.902340][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 121.052537][ T5985] syz.1.34: attempt to access beyond end of device [ 121.052537][ T5985] loop1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 121.066809][ T5985] gfs2: error 10 reading superblock [ 125.061002][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 126.408375][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.416323][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.715221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 128.125139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 131.315255][ T6009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.40'. [ 134.125776][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.132461][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.244622][ T6030] loop2: detected capacity change from 0 to 1024 [ 134.272236][ T6030] hfsplus: unable to parse mount options [ 145.591633][ T6074] sched: RT throttling activated [ 145.692863][ T6078] syz.2.57: attempt to access beyond end of device [ 145.692863][ T6078] loop5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.706757][ T6078] SQUASHFS error: Failed to read block 0x0: -5 [ 149.105117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 150.637833][ T6099] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 153.725070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.875292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 158.128525][ T23] IPVS: starting estimator thread 0... [ 158.146353][ T6122] IPVS: ip_vs_add_dest(): server weight less than zero [ 158.226606][ T6125] IPVS: using max 15 ests per chain, 36000 per kthread [ 158.242863][ T6122] IPVS: rr: FWM 3 0x00000003 - no destination available [ 159.086279][ T5865] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 159.324717][ T6133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.69'. [ 159.373754][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.383362][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.016319][ T5865] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.129085][ T5865] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 160.138586][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 160.147040][ T5865] usb 3-1: Product: syz [ 160.151373][ T5865] usb 3-1: Manufacturer: syz [ 160.158156][ T5865] usb 3-1: SerialNumber: syz [ 161.065622][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.205690][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.466454][ T5865] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 161.722071][ T1205] usb 3-1: USB disconnect, device number 2 [ 161.738110][ T1205] usblp0: removed [ 164.884208][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 165.639535][ T6169] loop1: detected capacity change from 0 to 1024 [ 165.649461][ T6169] hfsplus: unable to parse mount options [ 166.115175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 167.197818][ T6015] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.490031][ T6175] loop3: detected capacity change from 0 to 1024 [ 167.969324][ T27] audit: type=1326 audit(1783658324.963:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 168.145342][ T27] audit: type=1326 audit(1783658324.983:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 168.219022][ T27] audit: type=1326 audit(1783658324.983:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 168.275245][ T27] audit: type=1326 audit(1783658324.983:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 168.355137][ T27] audit: type=1326 audit(1783658324.983:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 168.425055][ T27] audit: type=1326 audit(1783658324.983:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 168.616336][ T6175] loop3: detected capacity change from 0 to 512 [ 168.622658][ T27] audit: type=1326 audit(1783658324.983:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 169.292219][ T6175] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 169.396910][ T27] audit: type=1326 audit(1783658324.983:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 169.664290][ T27] audit: type=1326 audit(1783658324.983:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 169.692302][ T27] audit: type=1326 audit(1783658324.983:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 170.356005][ T6175] EXT4-fs: error -4 creating inode table initialization thread [ 170.364359][ T6175] EXT4-fs (loop3): mount failed [ 171.096781][ T6202] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 171.291769][ T6203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 176.630378][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.656096][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.671775][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.684240][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.705196][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.716201][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.729017][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.740142][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.750440][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.762146][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.773389][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.784380][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.891409][ T6203] Zero length message leads to an empty skb [ 177.814627][ T6226] loop0: detected capacity change from 0 to 1024 [ 177.829219][ T6226] hfsplus: unable to parse mount options [ 179.171722][ T6236] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 180.614406][ T6238] loop1: detected capacity change from 0 to 16 [ 180.704471][ T6238] erofs: (device loop1): mounted with root inode @ nid 36. [ 180.723679][ T6237] syz.1.94: attempt to access beyond end of device [ 180.723679][ T6237] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 180.785538][ T6237] syz.1.94: attempt to access beyond end of device [ 180.785538][ T6237] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 180.801814][ T6237] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 180.839964][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 180.840014][ T27] audit: type=1800 audit(1783658593.844:69): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.94" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 180.927969][ T6230] loop3: detected capacity change from 0 to 1024 [ 180.947846][ T6237] syz.1.94 (6237) used greatest stack depth: 19888 bytes left [ 181.158718][ T6230] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.885077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 182.168374][ T6230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.316100][ T6230] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 182.446788][ T6230] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 189.390628][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.397932][ T6279] bridge0: port 2(bridge_slave_1) entered listening state [ 189.405569][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.412770][ T6279] bridge0: port 1(bridge_slave_0) entered listening state [ 189.542131][ T6279] bridge0: entered promiscuous mode [ 189.559551][ T6279] bridge0: entered allmulticast mode [ 189.574072][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'. [ 189.776688][ T6286] qrtr: Invalid version 0 [ 192.443474][ T6299] loop2: detected capacity change from 0 to 512 [ 192.512131][ T6299] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.107: bad orphan inode 11862016 [ 192.538928][ T6299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 192.551696][ T6299] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.480532][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 194.288231][ T6312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.108'. [ 194.301131][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.308994][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.203229][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.209979][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.290114][ T6314] loop2: detected capacity change from 0 to 16 [ 195.308159][ T6314] erofs: (device loop2): mounted with root inode @ nid 36. [ 210.908196][ T6372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.120'. [ 211.050360][ T5782] Bluetooth: hci0: Malformed LE Event: 0x0d [ 211.062645][ T27] audit: type=1326 audit(1783658624.074:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.3.121" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb6639de59 code=0x0 [ 211.115789][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.123764][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.496892][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 212.498726][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.504471][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 212.515037][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 214.429994][ T6396] ipt_REJECT: ECHOREPLY no longer supported. [ 218.138755][ T6416] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 218.171710][ T6416] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 219.675523][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 219.683729][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 222.064590][ T6441] loop2: detected capacity change from 0 to 1024 [ 224.995036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 226.491038][ T6467] loop1: detected capacity change from 0 to 512 [ 227.276518][ T6467] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 227.325269][ T6467] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 227.468141][ T6467] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.142: Invalid inode table block 1 in block_group 0 [ 227.577284][ T6473] loop3: detected capacity change from 0 to 512 [ 227.646437][ T6467] EXT4-fs (loop1): get root inode failed [ 227.652164][ T6467] EXT4-fs (loop1): mount failed [ 227.742076][ T6473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 228.107048][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.525048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 231.901877][ T6496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.149'. [ 235.225220][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.232402][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.285755][ T6498] syz.2.150 (6498) used greatest stack depth: 19752 bytes left [ 235.908961][ T6504] loop0: detected capacity change from 0 to 128 [ 236.856538][ T6504] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.047313][ T6504] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.054768][ T6529] warning: `syz.3.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 240.869496][ T6528] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.876679][ T6528] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 240.931602][ T6528] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.931748][ T6528] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 240.960656][ T6528] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.984274][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.986329][ T6528] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 241.095129][ T6528] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.101153][ T6528] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 241.309096][ T6533] xt_l2tp: v2 sid > 0xffff: 117440512 [ 241.618498][ T6534] loop1: detected capacity change from 0 to 2048 [ 241.838391][ T6534] ext2: Unknown parameter 'appraise' [ 244.099570][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 244.099617][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 244.105772][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 244.111848][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 245.171974][ T6552] sctp: failed to load transform for md5: -2 [ 246.305694][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 246.311934][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 246.313015][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 246.318528][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 253.065787][ T6587] syz.1.164 (6587) used greatest stack depth: 19624 bytes left [ 253.936683][ T6594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.160'. [ 254.954523][ T6596] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 255.079963][ T6597] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.115491][ T6597] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.124361][ T6597] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.133461][ T6597] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.147184][ T6597] bond1: (slave geneve2): making interface the new active one [ 255.173349][ T6597] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 255.428388][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.168'. [ 255.446496][ T6596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.558446][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.572744][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.590754][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.608438][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.619826][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.635086][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.657618][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.670087][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.687374][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.698212][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.709938][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.728929][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.157524][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.163957][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.121379][ T6610] netlink: 'syz.3.171': attribute type 9 has an invalid length. [ 260.853545][ T6632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.175'. [ 261.781748][ T6632] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 261.791206][ T6632] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 261.800891][ T6632] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 261.858270][ T27] audit: type=1800 audit(1783658674.804:71): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 262.450304][ T6635] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 262.472600][ T6635] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 263.303642][ T6640] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 263.317361][ T6640] VFS: Can't find a romfs filesystem on dev nullb0. [ 263.317361][ T6640] [ 270.241524][ T6662] xt_TPROXY: Can be used only with -p tcp or -p udp [ 276.530850][ T5787] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 277.393579][ T6699] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 277.729000][ T6699] binder: 6696:6699 ioctl 4018620d 0 returned -22 [ 278.185969][ T6701] netlink: 96 bytes leftover after parsing attributes in process `syz.3.193'. [ 278.399116][ T6706] loop1: detected capacity change from 0 to 128 [ 278.434232][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.445702][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.454084][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.463293][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.481840][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.490256][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.582259][ T6706] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.618642][ T6706] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 278.822840][ T6707] chnl_net:caif_netlink_parms(): no params data found [ 279.918363][ T2891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.010401][ T5085] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 280.045361][ T2891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 280.103017][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.418837][ T2891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.413930][ T5085] Bluetooth: hci2: command tx timeout [ 281.499203][ T2891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 282.824898][ T5085] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 282.894012][ T1205] libceph: connect (1)[c::]:6789 error -101 [ 282.916252][ T1205] libceph: mon0 (1)[c::]:6789 connect error [ 282.955619][ T2891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.973073][ T2891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 283.093436][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.106917][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.116890][ T6707] bridge_slave_0: entered allmulticast mode [ 283.130540][ T6707] bridge_slave_0: entered promiscuous mode [ 283.151936][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.160119][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.167740][ T6707] bridge_slave_1: entered allmulticast mode [ 283.176731][ T6707] bridge_slave_1: entered promiscuous mode [ 283.776883][ T5085] Bluetooth: hci2: command tx timeout [ 283.863960][ T2891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.876307][ T2891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 284.006719][ T27] audit: type=1800 audit(1783658696.120:72): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.199" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 284.006786][ T6746] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 284.034015][ T6707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.038892][ T6746] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 284.056782][ T6746] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 284.071121][ T1205] libceph: connect (1)[c::]:6789 error -101 [ 284.077625][ T1205] libceph: mon0 (1)[c::]:6789 connect error [ 284.099303][ T6707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.120820][ T6732] ceph: No mds server is up or the cluster is laggy [ 284.596325][ T6707] team0: Port device team_slave_0 added [ 285.425978][ T6757] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.613302][ T6757] binder: 6751:6757 ioctl 4018620d 0 returned -22 [ 285.654162][ T6707] team0: Port device team_slave_1 added [ 286.010078][ T5085] Bluetooth: hci2: command tx timeout [ 286.204000][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.262330][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.288870][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.503564][ T6707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.543316][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.553737][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.233183][ T6764] sctp: failed to load transform for md5: -2 [ 287.483513][ T6707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.395819][ T5085] Bluetooth: hci2: command tx timeout [ 289.978625][ T6789] netlink: 'syz.0.206': attribute type 9 has an invalid length. [ 291.748623][ T6707] hsr_slave_0: entered promiscuous mode [ 291.779524][ T6707] hsr_slave_1: entered promiscuous mode [ 291.800120][ T6707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.831853][ T6707] Cannot create hsr debugfs directory [ 300.753864][ T6850] loop3: detected capacity change from 0 to 1024 [ 303.774318][ T6707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.812751][ T6707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.173174][ T6869] lo speed is unknown, defaulting to 1000 [ 304.179829][ T6869] lo speed is unknown, defaulting to 1000 [ 304.197332][ T6869] lo speed is unknown, defaulting to 1000 [ 304.222827][ T6869] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 304.269790][ T6869] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 304.330772][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 304.478148][ T6707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.677325][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 304.698955][ T6869] lo speed is unknown, defaulting to 1000 [ 304.713972][ T6869] lo speed is unknown, defaulting to 1000 [ 304.724414][ T6707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.792286][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.921548][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.949730][ T6869] lo speed is unknown, defaulting to 1000 [ 304.963020][ T6869] lo speed is unknown, defaulting to 1000 [ 304.977888][ T6869] lo speed is unknown, defaulting to 1000 [ 304.997140][ T6869] lo speed is unknown, defaulting to 1000 [ 305.349333][ T8] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 305.498590][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.617876][ T8] usb 4-1: Product: syz [ 305.673585][ T8] usb 4-1: Manufacturer: syz [ 305.694588][ T2891] hsr_slave_0: left promiscuous mode [ 305.743827][ T8] usb 4-1: SerialNumber: syz [ 305.770345][ T2891] hsr_slave_1: left promiscuous mode [ 305.872217][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.015315][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.179730][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.277926][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.421884][ T2891] bridge_slave_1: left allmulticast mode [ 306.500593][ T2891] bridge_slave_1: left promiscuous mode [ 306.613857][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.787551][ T2891] bridge_slave_0: left allmulticast mode [ 306.886582][ T2891] bridge_slave_0: left promiscuous mode [ 307.029117][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.908186][ T8] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 308.055613][ T5824] Process accounting resumed [ 308.272745][ T2891] veth1_macvtap: left promiscuous mode [ 308.338790][ T2891] veth0_macvtap: left promiscuous mode [ 308.409287][ T2891] veth1_vlan: left promiscuous mode [ 308.496622][ T2891] veth0_vlan: left promiscuous mode [ 308.962620][ T6876] Process accounting resumed [ 309.008819][ T8] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 309.047481][ T8] usb 4-1: USB disconnect, device number 2 [ 309.119174][ T6352] udevd[6352]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.429838][ T2891] bond1 (unregistering): (slave geneve2): Releasing active interface [ 312.646209][ T6897] loop1: detected capacity change from 0 to 512 [ 312.707636][ T6897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 312.723131][ T2891] bond1 (unregistering): Released all slaves [ 312.724288][ T6897] System zones: 1-12 [ 312.887204][ T6897] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.227: missing EA_INODE flag [ 312.938088][ T6897] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.227: error while reading EA inode 12 err=-117 [ 312.996188][ T6897] EXT4-fs (loop1): 1 orphan inode deleted [ 313.025982][ T6897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.315140][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.325725][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.454999][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.484962][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.520659][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 314.529398][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.894208][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.140563][ T2891] team0 (unregistering): Port device team_slave_1 removed [ 316.221118][ T2891] team0 (unregistering): Port device team_slave_0 removed [ 316.301900][ T2891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.405352][ T2891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.765589][ T5787] Bluetooth: hci4: command tx timeout [ 317.581749][ T2891] bond0 (unregistering): Released all slaves [ 318.265002][ T6930] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 318.273352][ T6930] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 318.283721][ T6930] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 318.292206][ T6930] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 318.300543][ T6930] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 318.347222][ T6930] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 318.386510][ T6930] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 318.421989][ T6930] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 318.445979][ T6930] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 318.505489][ T6930] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 318.985949][ T5787] Bluetooth: hci4: command tx timeout [ 319.371423][ T6903] lo speed is unknown, defaulting to 1000 [ 319.792903][ T6943] loop1: detected capacity change from 0 to 8 [ 320.762682][ T6943] SQUASHFS error: xz decompression failed, data probably corrupt [ 320.770858][ T6943] SQUASHFS error: Failed to read block 0x108: -5 [ 320.777229][ T6943] SQUASHFS error: Unable to read metadata cache entry [106] [ 320.784731][ T6943] SQUASHFS error: Unable to read inode 0x11f [ 320.879477][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.886481][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.110049][ T6707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.212284][ T5787] Bluetooth: hci4: command tx timeout [ 321.310049][ T6707] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.327585][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.334736][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.418670][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.425965][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.821229][ T6958] loop3: detected capacity change from 0 to 32768 [ 323.452826][ T5787] Bluetooth: hci4: command tx timeout [ 325.510159][ T6903] chnl_net:caif_netlink_parms(): no params data found [ 325.677233][ T6976] loop3: detected capacity change from 0 to 256 [ 325.693999][ T2891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.707155][ T6976] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 326.166096][ T2891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.725468][ T2891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.912271][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.955407][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.011601][ T6903] bridge_slave_0: entered allmulticast mode [ 327.054135][ T6903] bridge_slave_0: entered promiscuous mode [ 327.098642][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.138778][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.160437][ T6903] bridge_slave_1: entered allmulticast mode [ 327.205298][ T6903] bridge_slave_1: entered promiscuous mode [ 327.272823][ T2891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.319781][ T6707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.639194][ T6903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.746174][ T6903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.185510][ T6903] team0: Port device team_slave_0 added [ 328.562140][ T6903] team0: Port device team_slave_1 added [ 329.076252][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.083282][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.418524][ T6903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.420699][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.427895][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.564002][ T6903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.305075][ T7035] syz.3.247 uses obsolete (PF_INET,SOCK_PACKET) [ 334.251742][ T6903] hsr_slave_0: entered promiscuous mode [ 334.272340][ T7036] loop1: detected capacity change from 0 to 2048 [ 334.362188][ T7036] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 334.385403][ T7036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.430404][ T6903] hsr_slave_1: entered promiscuous mode [ 334.548966][ T6903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.642760][ T6903] Cannot create hsr debugfs directory [ 335.337072][ T7043] validate_nla: 44 callbacks suppressed [ 335.337090][ T7043] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 335.367642][ T7043] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 335.375830][ T7043] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 335.393716][ T7043] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 335.426017][ T7043] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 335.436143][ T7043] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 335.450199][ T7043] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 335.461147][ T7043] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 335.479666][ T7043] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 335.489972][ T7043] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 335.612689][ T5824] lo speed is unknown, defaulting to 1000 [ 335.756383][ T6707] veth0_vlan: entered promiscuous mode [ 336.216273][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.251'. [ 336.896730][ T7056] syz.1.251 (7056) used greatest stack depth: 17160 bytes left [ 336.998488][ T6707] veth1_vlan: entered promiscuous mode [ 337.137449][ T6707] veth0_macvtap: entered promiscuous mode [ 337.673335][ T7062] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.173696][ T5787] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 338.183060][ T5787] Bluetooth: hci0: Injecting HCI hardware error event [ 338.192304][ T5787] Bluetooth: hci0: hardware error 0x00 [ 338.532329][ T6707] veth1_macvtap: entered promiscuous mode [ 339.040930][ T5085] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 339.146083][ T1205] Process accounting resumed [ 339.519010][ T7068] Process accounting resumed [ 340.358228][ T5787] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 342.220905][ T7085] loop1: detected capacity change from 0 to 128 [ 342.241058][ T7085] FAT-fs (loop1): Unrecognized mount option "fmask=0000000000000000ăĄ3Oošjnonumtail=0" or missing value [ 343.461071][ T6903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 343.856254][ T6903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.180243][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.193013][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.203496][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.215669][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.226886][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.258088][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.823568][ T6903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.852973][ T6903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 347.299556][ T5085] Bluetooth: hci1: command tx timeout [ 347.321748][ T7093] lo speed is unknown, defaulting to 1000 [ 347.484335][ T2891] hsr_slave_0: left promiscuous mode [ 347.504103][ T2891] hsr_slave_1: left promiscuous mode [ 347.521713][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.539879][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.561611][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.569173][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.593818][ T2891] bridge_slave_1: left allmulticast mode [ 347.599744][ T2891] bridge_slave_1: left promiscuous mode [ 347.614890][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.638540][ T2891] bridge_slave_0: left allmulticast mode [ 347.645548][ T2891] bridge_slave_0: left promiscuous mode [ 347.656692][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.725684][ T2891] veth1_macvtap: left promiscuous mode [ 347.742170][ T2891] veth0_macvtap: left promiscuous mode [ 347.748227][ T2891] veth1_vlan: left promiscuous mode [ 347.763606][ T2891] veth0_vlan: left promiscuous mode [ 349.813395][ T7122] block nbd3: NBD_DISCONNECT [ 349.827144][ T5085] Bluetooth: hci1: command tx timeout [ 352.083911][ T5085] Bluetooth: hci1: command tx timeout [ 352.540751][ T2891] team0 (unregistering): Port device team_slave_1 removed [ 352.595267][ T7138] loop1: detected capacity change from 0 to 128 [ 352.629029][ T7138] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 352.664637][ T7138] hpfs: filesystem error: improperly stopped [ 352.673533][ T2891] team0 (unregistering): Port device team_slave_0 removed [ 352.686487][ T7138] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 352.708115][ T7138] hpfs: You really don't want any checks? You are crazy... [ 352.716623][ T7138] hpfs: Code page index out of array [ 352.723321][ T7138] hpfs: code page support is disabled [ 352.730788][ T7138] hpfs: hpfs_map_4sectors(): unaligned read [ 352.739811][ T7138] hpfs: hpfs_map_4sectors(): unaligned read [ 352.746285][ T7138] hpfs: filesystem error: unable to find root dir [ 352.764599][ T2891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.924120][ T2891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.979891][ T2891] bond0 (unregistering): Released all slaves [ 354.314324][ T5085] Bluetooth: hci1: command tx timeout [ 354.693325][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.267'. [ 354.702388][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.267'. [ 354.711986][ T7144] netlink: 6 bytes leftover after parsing attributes in process `syz.1.267'. [ 356.061947][ T6903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.204088][ T6903] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.247599][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.254956][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.365382][ T7153] Bluetooth: MGMT ver 1.22 [ 356.435136][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.442663][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.488907][ T7093] chnl_net:caif_netlink_parms(): no params data found [ 357.753401][ T6903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.764476][ T6903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.916838][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.924426][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.932369][ T7093] bridge_slave_0: entered allmulticast mode [ 357.950349][ T7093] bridge_slave_0: entered promiscuous mode [ 357.959613][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.155945][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.301763][ T7093] bridge_slave_1: entered allmulticast mode [ 358.441960][ T7093] bridge_slave_1: entered promiscuous mode [ 359.191894][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.275664][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.424834][ T7093] team0: Port device team_slave_0 added [ 359.448024][ T7093] team0: Port device team_slave_1 added [ 359.575863][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.184750][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.290956][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.474284][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.481338][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.608564][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.809422][ T6903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.000793][ T7093] hsr_slave_0: entered promiscuous mode [ 362.040713][ T7093] hsr_slave_1: entered promiscuous mode [ 362.122082][ T7093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.161445][ T7093] Cannot create hsr debugfs directory [ 365.554843][ T7238] loop3: detected capacity change from 0 to 512 [ 365.609706][ T6903] veth0_vlan: entered promiscuous mode [ 365.666761][ T6903] veth1_vlan: entered promiscuous mode [ 365.710592][ T7238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 365.768305][ T7238] System zones: 1-12 [ 365.849245][ T7238] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.278: missing EA_INODE flag [ 366.060453][ T7238] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.278: error while reading EA inode 12 err=-117 [ 366.392581][ T7238] EXT4-fs (loop3): 1 orphan inode deleted [ 366.428970][ T7238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.723787][ T6903] veth0_macvtap: entered promiscuous mode [ 366.739253][ T6903] veth1_macvtap: entered promiscuous mode [ 366.816739][ T2891] hsr_slave_0: left promiscuous mode [ 366.828142][ T2891] hsr_slave_1: left promiscuous mode [ 366.866023][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.909329][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.935599][ T2891] bridge_slave_1: left allmulticast mode [ 366.950970][ T2891] bridge_slave_1: left promiscuous mode [ 367.282002][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.376617][ T2891] bridge_slave_0: left allmulticast mode [ 367.437164][ T2891] bridge_slave_0: left promiscuous mode [ 367.503701][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.613888][ T2891] veth1_macvtap: left promiscuous mode [ 367.645749][ T2891] veth0_macvtap: left promiscuous mode [ 367.668254][ T2891] veth1_vlan: left promiscuous mode [ 367.680220][ T2891] veth0_vlan: left promiscuous mode [ 367.876711][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.354194][ T7268] loop3: detected capacity change from 0 to 128 [ 368.459045][ T7268] FAT-fs (loop3): Unrecognized mount option "fmask=0000000000000000ăĄ3Oošjnonumtail=0" or missing value [ 370.105150][ T2891] team0 (unregistering): Port device team_slave_1 removed [ 370.223098][ T2891] team0 (unregistering): Port device team_slave_0 removed [ 370.350177][ T2891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.448477][ T2891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.258539][ T2891] bond0 (unregistering): Released all slaves [ 371.582533][ T7093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.608627][ T7093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.657967][ T7093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.690742][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.727367][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.767326][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.818536][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.851589][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.938582][ T7093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.009091][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.046427][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.090780][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.101368][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.112908][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.145847][ T6903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.164492][ T6903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.174826][ T6903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.183577][ T6903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.515390][ T7093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.539435][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.547338][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.607070][ T7093] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.617755][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.634269][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.644588][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.651907][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.679652][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.687090][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.799626][ T7093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.910235][ T7295] loop3: detected capacity change from 0 to 512 [ 374.127514][ T7295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.160904][ T7295] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.237087][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.5.224'. [ 375.719860][ T7093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.914563][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.554516][ T7093] veth0_vlan: entered promiscuous mode [ 376.583512][ T7093] veth1_vlan: entered promiscuous mode [ 376.683537][ T7093] veth0_macvtap: entered promiscuous mode [ 376.736794][ T7093] veth1_macvtap: entered promiscuous mode [ 376.807639][ T7342] loop3: detected capacity change from 0 to 8 [ 378.106679][ T7342] SQUASHFS error: Failed to read block 0x6de: -5 [ 378.113316][ T7342] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 378.120799][ T7342] SQUASHFS error: Unable to read inode 0x11f [ 379.401801][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.517046][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.549658][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.589641][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.632787][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.941741][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.561226][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.627571][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.645709][ T7361] sctp: failed to load transform for md5: -2 [ 382.386093][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.396445][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.484030][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.111866][ T7379] trusted_key: syz.3.294 sent an empty control message without MSG_MORE. [ 384.085657][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.135658][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.189935][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.218023][ T7385] fuse: Bad value for 'fd' [ 384.242324][ T7093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.288643][ T7093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.297431][ T7093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.342884][ T7093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.747290][ T7347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.778128][ T7347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.866830][ T2891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.874734][ T2891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.526954][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.554078][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.909248][ T7422] sctp: failed to load transform for md5: -2 [ 391.849518][ T7449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.303'. [ 394.083858][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'. [ 394.890301][ T7469] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 396.348014][ T7472] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 399.354703][ T7490] mac80211_hwsim hwsim12 »»»»»»: renamed from wlan0 (while UP) [ 401.615269][ T6149] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 402.105760][ T7521] block nbd1: NBD_DISCONNECT [ 404.263854][ T5838] Process accounting resumed [ 404.766392][ T7515] Process accounting resumed [ 404.906139][ T6149] usb 4-1: unable to get BOS descriptor or descriptor too short [ 405.251327][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.5.316'. [ 405.340762][ T6149] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 405.428689][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 405.495280][ T7537] loop4: detected capacity change from 0 to 256 [ 407.334102][ T6149] usb 4-1: can't read configurations, error -71 [ 408.840948][ T7553] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 410.656981][ T7562] block nbd5: NBD_DISCONNECT [ 412.798561][ T23] Process accounting resumed [ 413.671635][ T7571] Process accounting resumed [ 416.467024][ T7596] overlayfs: missing 'lowerdir' [ 419.819799][ T7612] loop3: detected capacity change from 0 to 1024 [ 419.828319][ T7612] EXT4-fs: Invalid want_extra_isize 7 [ 420.170396][ T7614] capability: warning: `syz.3.335' uses deprecated v2 capabilities in a way that may be insecure [ 421.124045][ T7620] tipc: Started in network mode [ 421.129526][ T7620] tipc: Node identity 4, cluster identity 4711 [ 421.135879][ T7620] tipc: Node number set to 4 [ 422.694472][ T7631] bridge_slave_1: left allmulticast mode [ 422.715504][ T7631] bridge_slave_1: left promiscuous mode [ 422.721386][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.840892][ T7631] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 425.333869][ T1205] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 425.746164][ T1205] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.796184][ T1205] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.292964][ T1205] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 427.320909][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.363999][ T1205] usb 5-1: config 0 descriptor?? [ 427.388403][ T1205] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 428.908668][ T5819] Process accounting resumed [ 428.947396][ T1205] usb 5-1: USB disconnect, device number 2 [ 429.844599][ T7682] Process accounting resumed [ 433.464669][ T7717] loop4: detected capacity change from 0 to 128 [ 433.597134][ T7717] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 433.609401][ T7717] hpfs: filesystem error: improperly stopped [ 433.615657][ T7717] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 433.623833][ T7717] hpfs: You really don't want any checks? You are crazy... [ 433.632922][ T7717] hpfs: hpfs_map_sector(): read error [ 433.638822][ T7717] hpfs: code page support is disabled [ 433.649046][ T7717] hpfs: hpfs_map_4sectors(): unaligned read [ 433.656476][ T7717] hpfs: hpfs_map_4sectors(): unaligned read [ 433.662923][ T7717] hpfs: filesystem error: unable to find root dir [ 436.323668][ T7739] loop4: detected capacity change from 0 to 40427 [ 436.500692][ T7739] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 436.509614][ T7739] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 437.362699][ T7739] F2FS-fs (loop4): invalid crc value [ 437.445558][ T7739] F2FS-fs (loop4): Found nat_bits in checkpoint [ 437.691559][ T7739] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 437.699050][ T7739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 437.783465][ T5085] Bluetooth: hci1: link tx timeout [ 437.789367][ T5085] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.802400][ T5085] Bluetooth: hci1: link tx timeout [ 437.816061][ T5085] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.823841][ T5085] Bluetooth: hci1: link tx timeout [ 437.848436][ T5085] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.862292][ T5085] Bluetooth: hci1: link tx timeout [ 437.867685][ T5085] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.881103][ T5085] Bluetooth: hci1: link tx timeout [ 437.886474][ T5085] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.897445][ T5085] Bluetooth: hci1: link tx timeout [ 437.903072][ T5085] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.913591][ T5085] Bluetooth: hci1: link tx timeout [ 437.931329][ T5085] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.940062][ T5085] Bluetooth: hci1: link tx timeout [ 437.945577][ T5085] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.957456][ T5085] Bluetooth: hci1: link tx timeout [ 437.962869][ T5085] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.026518][ T7756] syz.4.355: attempt to access beyond end of device [ 439.026518][ T7756] loop4: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 439.951921][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 443.344417][ T7800] fuse: Bad value for 'fd' [ 443.376017][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 448.358538][ T7830] loop4: detected capacity change from 0 to 32768 [ 450.066149][ T7835] netlink: 9 bytes leftover after parsing attributes in process `syz.3.366'. [ 452.252418][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.259214][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.079312][ T5776] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 454.056329][ T7863] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 454.147925][ T7854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.204252][ T7854] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 455.361598][ T7854] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 455.682497][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 455.822568][ T7854] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 455.843365][ T7854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 455.849463][ T7854] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 456.600794][ T5776] Bluetooth: hci4: command 0x0c1a tx timeout [ 457.281338][ T7895] fuse: Bad value for 'fd' [ 457.323044][ T7890] loop5: detected capacity change from 0 to 1024 [ 457.538032][ T7890] EXT4-fs: Invalid want_extra_isize 7 [ 458.150300][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 458.985619][ T5085] Bluetooth: hci4: command 0x0c1a tx timeout [ 460.681739][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 460.742691][ T7921] loop1: detected capacity change from 0 to 1024 [ 460.920327][ T7923] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 461.153387][ T5085] Bluetooth: hci4: command 0x0c1a tx timeout [ 461.667742][ T7921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.117809][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.790416][ T7934] loop4: detected capacity change from 0 to 8192 [ 464.939030][ T7934] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 465.076003][ T7934] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 465.113568][ T7934] REISERFS (device loop4): using ordered data mode [ 465.156068][ T7934] reiserfs: using flush barriers [ 465.181321][ T7934] REISERFS warning (device loop4): journal-1256 journal_init: unable to get memory for journal structure [ 466.461875][ T7970] syz.1.394: attempt to access beyond end of device [ 466.461875][ T7970] loop1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 466.475506][ T7970] syz.1.394: attempt to access beyond end of device [ 466.475506][ T7970] loop1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 466.489342][ T7970] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 466.499582][ T7970] syz.1.394: attempt to access beyond end of device [ 466.499582][ T7970] loop1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 466.512751][ T7970] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 466.522787][ T7970] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 466.530722][ T7970] UDF-fs: Scanning with blocksize 512 failed [ 466.539298][ T7970] syz.1.394: attempt to access beyond end of device [ 466.539298][ T7970] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 466.552622][ T7970] syz.1.394: attempt to access beyond end of device [ 466.552622][ T7970] loop1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 466.565901][ T7970] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 466.576315][ T7970] syz.1.394: attempt to access beyond end of device [ 466.576315][ T7970] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 466.590263][ T7970] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 466.600580][ T7970] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 466.608495][ T7970] UDF-fs: Scanning with blocksize 1024 failed [ 466.615829][ T7970] syz.1.394: attempt to access beyond end of device [ 466.615829][ T7970] loop1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 466.630443][ T7970] syz.1.394: attempt to access beyond end of device [ 466.630443][ T7970] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 466.643979][ T7970] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 466.655292][ T7970] syz.1.394: attempt to access beyond end of device [ 466.655292][ T7970] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 466.668698][ T7970] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 466.678542][ T7970] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 466.686386][ T7970] UDF-fs: Scanning with blocksize 2048 failed [ 466.694700][ T7970] syz.1.394: attempt to access beyond end of device [ 466.694700][ T7970] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 466.708750][ T7970] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 466.718741][ T7970] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 466.728523][ T7970] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 466.736490][ T7970] UDF-fs: Scanning with blocksize 4096 failed [ 466.743402][ T7970] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 470.295040][ T7986] validate_nla: 98 callbacks suppressed [ 470.295086][ T7986] netlink: 'syz.5.399': attribute type 1 has an invalid length. [ 470.326210][ T8003] loop3: detected capacity change from 0 to 2048 [ 470.426240][ T8003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.485050][ T7986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.540444][ T27] audit: type=1800 audit(1783658870.684:73): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.400" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 470.561840][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.122840][ T7994] bond1: (slave geneve2): making interface the new active one [ 472.132692][ T7994] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 472.179713][ T27] audit: type=1326 audit(1783658871.217:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.4.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759de59 code=0x7ffc0000 [ 472.206900][ T27] audit: type=1326 audit(1783658871.217:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.4.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759de59 code=0x7ffc0000 [ 472.235516][ T27] audit: type=1326 audit(1783658871.217:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.4.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759de59 code=0x7ffc0000 [ 472.362838][ T27] audit: type=1326 audit(1783658871.217:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.4.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759de59 code=0x7ffc0000 [ 472.481770][ T8019] loop1: detected capacity change from 0 to 1024 [ 472.493128][ T27] audit: type=1326 audit(1783658871.217:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.4.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fabb759de59 code=0x7ffc0000 [ 472.553213][ T8019] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 472.561448][ T8019] hfsplus: xattr searching failed [ 472.694414][ T27] audit: type=1326 audit(1783658871.498:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.4.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759de59 code=0x7ffc0000 [ 472.860336][ T27] audit: type=1326 audit(1783658871.508:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.4.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759de59 code=0x7ffc0000 [ 472.907599][ T27] audit: type=1326 audit(1783658871.657:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.4.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759de59 code=0x7ffc0000 [ 472.931721][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.973602][ T27] audit: type=1326 audit(1783658871.657:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.4.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759de59 code=0x7ffc0000 [ 477.084781][ T3550] hfsplus: b-tree write err: -5, ino 25 [ 477.091071][ T3550] hfsplus: b-tree write err: -5, ino 4 [ 477.098411][ T3550] hfsplus: b-tree write err: -5, ino 2 [ 477.104083][ T3550] hfsplus: b-tree write err: -5, ino 23 [ 481.062977][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 481.063049][ T27] audit: type=1326 audit(1783658880.510:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 481.105184][ T27] audit: type=1326 audit(1783658880.510:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 481.130479][ T27] audit: type=1326 audit(1783658880.510:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 481.176341][ T27] audit: type=1326 audit(1783658880.510:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 481.317902][ T27] audit: type=1326 audit(1783658880.510:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 481.435303][ T27] audit: type=1326 audit(1783658880.510:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 481.523596][ T27] audit: type=1326 audit(1783658880.529:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 481.793475][ T27] audit: type=1326 audit(1783658880.529:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6639de59 code=0x7ffc0000 [ 483.141837][ T8078] loop3: detected capacity change from 0 to 2048 [ 483.195205][ T8078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.215679][ T8075] loop1: detected capacity change from 0 to 4096 [ 483.494258][ T8085] loop4: detected capacity change from 0 to 256 [ 484.076800][ T8085] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d) [ 484.415619][ T8075] EXT4-fs (loop1): Test dummy encryption mode enabled [ 484.487397][ T8075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.833140][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 485.860604][ T8111] No such timeout policy "syz0" [ 486.015536][ T8100] overlay: filesystem on ./file0 not supported [ 486.270157][ T8075] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 486.538627][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.652922][ T8120] loop5: detected capacity change from 0 to 256 [ 487.803078][ T8129] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 490.478526][ T8150] tmpfs: Bad value for 'huge' [ 490.492445][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 490.501853][ T8150] netlink: 43 bytes leftover after parsing attributes in process `syz.3.424'. [ 490.556244][ T8151] mmap: syz.3.424 (8151) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 494.173893][ T5818] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 494.508932][ T5818] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 494.986704][ T8174] No such timeout policy "syz0" [ 495.049348][ T5818] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 495.159093][ T5818] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 495.208422][ T5818] usb 4-1: config 150 has no interface number 0 [ 495.446863][ T5818] usb 4-1: config 150 interface 204 has no altsetting 0 [ 495.523998][ T5818] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 495.544395][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.552865][ T5818] usb 4-1: Product: syz [ 495.562525][ T5818] usb 4-1: Manufacturer: syz [ 495.567306][ T5818] usb 4-1: SerialNumber: syz [ 496.599197][ T5818] usb 4-1: USB disconnect, device number 5 [ 496.757795][ T8190] loop3: detected capacity change from 0 to 128 [ 497.101655][ T8190] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 497.192983][ T8190] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 499.279273][ T8213] netlink: 'syz.4.436': attribute type 11 has an invalid length. [ 500.896988][ T8213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.436'. [ 500.965957][ T8213] ip6erspan0: entered allmulticast mode [ 501.062210][ T8213] ALSA: mixer_oss: invalid OSS volume '' [ 501.203594][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 502.206111][ T8225] loop3: detected capacity change from 0 to 4096 [ 502.247999][ T8225] EXT4-fs (loop3): invalid inodes per group: 204800 [ 502.247999][ T8225] [ 503.595374][ T8233] syz.3.438 (8233): drop_caches: 2 [ 506.550030][ T8247] loop1: detected capacity change from 0 to 128 [ 506.677999][ T8247] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 506.903935][ T8249] loop5: detected capacity change from 0 to 32768 [ 506.955468][ T8247] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 506.970887][ T8249] (syz.5.445,8249,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 506.987935][ T8249] (syz.5.445,8249,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 507.106914][ T8249] JBD2: Ignoring recovery information on journal [ 507.255918][ T8249] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 507.487940][ T8264] loop3: detected capacity change from 0 to 1024 [ 507.632993][ T8264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.559167][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.801388][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 509.833683][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 511.368222][ T6903] ocfs2: Unmounting device (7,5) on (node local) [ 515.459957][ T5824] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 515.812111][ T5824] usb 6-1: Using ep0 maxpacket: 32 [ 515.825026][ T5824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.884734][ T5824] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 515.907221][ T8344] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 516.229391][ T5824] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 516.359265][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.496201][ T5824] usb 6-1: Product: syz [ 516.507740][ T5824] usb 6-1: Manufacturer: syz [ 516.517252][ T5824] usb 6-1: SerialNumber: syz [ 516.540130][ T5824] usb 6-1: config 0 descriptor?? [ 517.837342][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.843894][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.212272][ T8371] fuse: Bad value for 'group_id' [ 520.948183][ T23] usb 6-1: USB disconnect, device number 2 [ 521.017956][ T8383] netlink: 'syz.3.461': attribute type 2 has an invalid length. [ 521.180374][ T8392] loop4: detected capacity change from 0 to 512 [ 521.264206][ T8392] EXT4-fs: Conflicting test_dummy_encryption options [ 521.420310][ T8395] loop1: detected capacity change from 0 to 4096 [ 522.951022][ T8395] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 524.235037][ T8395] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 525.510389][ T8429] futex_wake_op: syz.4.471 tries to shift op by 144; fix this program [ 528.381064][ T8436] loop1: detected capacity change from 0 to 32768 [ 528.405816][ T8436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.470 (8436) [ 528.444111][ T8436] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 528.454999][ T8436] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 528.463900][ T8436] BTRFS info (device loop1): metadata ratio 0 [ 528.470186][ T8436] BTRFS info (device loop1): turning on sync discard [ 528.476977][ T8436] BTRFS info (device loop1): using free space tree [ 530.489191][ T8436] BTRFS info (device loop1): enabling ssd optimizations [ 531.424499][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 532.550637][ T8478] loop5: detected capacity change from 0 to 1024 [ 532.573121][ T8478] EXT4-fs: inline encryption not supported [ 532.589296][ T8478] EXT4-fs: Ignoring removed bh option [ 532.883658][ T8478] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 533.620267][ T8478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.732855][ T8086] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (8086) [ 534.219961][ T8490] IPVS: sed: FWM 3 0x00000003 - no destination available [ 534.542196][ T5824] IPVS: starting estimator thread 0... [ 534.607098][ T8489] serio: Serial port ttyS3 [ 534.666503][ T8493] IPVS: using max 19 ests per chain, 45600 per kthread [ 534.761653][ T6903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.063593][ T5824] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 538.749605][ T5824] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 538.758382][ T5824] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 538.770198][ T5824] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 538.780705][ T5824] usb 6-1: config 150 has no interface number 0 [ 538.789630][ T5824] usb 6-1: config 150 interface 204 has no altsetting 0 [ 538.833096][ T5824] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 538.887761][ T8531] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.897466][ T8531] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.906382][ T8531] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.915650][ T8531] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.071487][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.127386][ T8531] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.137344][ T8531] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.146645][ T8531] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.155915][ T8531] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.234418][ T5824] usb 6-1: Product: syz [ 539.387212][ T5824] usb 6-1: Manufacturer: syz [ 539.423494][ T5824] usb 6-1: SerialNumber: syz [ 539.434662][ T5824] usb 6-1: can't set config #150, error -71 [ 539.448106][ T5824] usb 6-1: USB disconnect, device number 3 [ 540.279708][ T8539] block device autoloading is deprecated and will be removed. [ 540.889046][ T8532] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.898557][ T8532] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.908981][ T8532] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.918691][ T8532] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.446375][ T8532] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.455514][ T8532] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.465059][ T8532] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.474097][ T8532] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.836236][ T8566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.493'. [ 546.562972][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 547.848630][ T5824] IPVS: starting estimator thread 0... [ 547.958707][ T8581] IPVS: using max 18 ests per chain, 43200 per kthread [ 548.116219][ T8593] loop1: detected capacity change from 0 to 512 [ 548.124884][ T8593] ext4: Unknown parameter 'context' [ 548.983832][ T8595] sctp: failed to load transform for md5: -2 [ 549.911519][ T8555] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 550.054107][ T8607] capability: warning: `syz.3.498' uses 32-bit capabilities (legacy support in use) [ 550.090681][ T8613] loop5: detected capacity change from 0 to 256 [ 550.205372][ T8613] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 558.694294][ T8687] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 558.749150][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 559.500395][ T8691] EXT4-fs: Conflicting test_dummy_encryption options [ 559.512718][ T8691] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 559.520448][ T8691] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 559.568061][ T8691] hsr0: entered promiscuous mode [ 559.607566][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.504'. [ 560.786713][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 563.101041][ T8715] loop1: detected capacity change from 0 to 128 [ 563.168944][ T8715] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 563.189208][ T8718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.514'. [ 563.204625][ T8715] qnx6: wrong signature (magic) in superblock #1. [ 563.211245][ T8715] qnx6: unable to read the first superblock [ 565.256754][ T8730] xt_CT: No such helper "pptp" [ 567.662975][ T8750] loop3: detected capacity change from 0 to 1024 [ 568.220934][ T8757] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 569.161536][ T27] audit: type=1804 audit(1783658962.887:103): pid=8762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.521" name="/newroot/169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=2 res=1 errno=0 [ 569.204433][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.737715][ T8770] input: syz0 as /devices/virtual/input/input11 [ 572.498296][ T8766] loop5: detected capacity change from 0 to 128 [ 572.559262][ T8766] FAT-fs (loop5): Unrecognized mount option "fmask=0000000000000000ăĄ3Oošjnonumtail=0" or missing value [ 573.131598][ T8781] loop4: detected capacity change from 0 to 512 [ 573.142937][ T8781] ext4: Unknown parameter 'context' [ 575.868497][ T8793] loop1: detected capacity change from 0 to 256 [ 575.880874][ T8793] exfat: Deprecated parameter 'namecase' [ 575.887102][ T8793] exfat: Deprecated parameter 'namecase' [ 575.893078][ T8793] exfat: Deprecated parameter 'namecase' [ 576.905940][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 577.088220][ T8793] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 577.224837][ T8608] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 578.488516][ T8605] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 578.835696][ T8809] loop4: detected capacity change from 0 to 40427 [ 578.869140][ T8809] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 578.876538][ T8809] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 578.886269][ T8809] F2FS-fs (loop4): Image doesn't support compression [ 578.893051][ T8809] F2FS-fs (loop4): Image doesn't support compression [ 578.900637][ T8809] F2FS-fs (loop4): invalid crc value [ 578.962048][ T8809] F2FS-fs (loop4): Start checkpoint disabled! [ 579.179192][ T8811] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.186514][ T8811] bridge0: port 2(bridge_slave_1) entered listening state [ 579.194015][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.201475][ T8811] bridge0: port 1(bridge_slave_0) entered listening state [ 579.209131][ T8809] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 579.216309][ T8809] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 580.498081][ T1046] bio_check_eod: 2 callbacks suppressed [ 580.498130][ T1046] kworker/u4:5: attempt to access beyond end of device [ 580.498130][ T1046] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 580.579432][ T1046] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 582.175457][ T8838] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 583.800129][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.806835][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.238215][ T8849] ALSA: mixer_oss: invalid OSS volume 'u' [ 603.996571][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 604.011256][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 604.021802][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 604.031871][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 604.040079][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 604.048150][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 604.577054][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.5.555'. [ 604.587333][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.5.555'. [ 605.283211][ T8952] lo speed is unknown, defaulting to 1000 [ 605.505867][ T3550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.320821][ T5787] Bluetooth: hci1: command tx timeout [ 606.425605][ T3550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.707914][ T3550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.908380][ T8971] netlink: 'syz.5.557': attribute type 4 has an invalid length. [ 608.407760][ T3550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.539851][ T5787] Bluetooth: hci1: command tx timeout [ 608.605982][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 610.342141][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 610.858694][ T5787] Bluetooth: hci1: command tx timeout [ 612.169659][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 612.176962][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 614.215681][ T5787] Bluetooth: hci1: command tx timeout [ 614.405818][ T8952] chnl_net:caif_netlink_parms(): no params data found [ 615.187239][ T9022] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.564'. [ 615.209951][ T9022] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.564'. [ 615.783549][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.791112][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.268891][ T8952] bridge_slave_0: entered allmulticast mode [ 616.925135][ T8952] bridge_slave_0: entered promiscuous mode [ 620.083291][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.168531][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.619817][ T8952] bridge_slave_1: entered allmulticast mode [ 620.640483][ T8952] bridge_slave_1: entered promiscuous mode [ 621.213490][ T8952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.301739][ T8952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.409209][ T9055] netlink: 72 bytes leftover after parsing attributes in process `syz.1.572'. [ 621.418468][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 621.474324][ T8952] team0: Port device team_slave_0 added [ 622.016894][ T8952] team0: Port device team_slave_1 added [ 625.508398][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.543579][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.712906][ T8952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.166254][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.173645][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.246283][ T8952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.367595][ T9082] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 628.069214][ T8952] hsr_slave_0: entered promiscuous mode [ 628.109865][ T8952] hsr_slave_1: entered promiscuous mode [ 628.281130][ T9094] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 628.319032][ T9094] loop5: detected capacity change from 0 to 1764 [ 629.519036][ T8952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.528899][ T8952] Cannot create hsr debugfs directory [ 631.034478][ T9107] loop3: detected capacity change from 0 to 4096 [ 631.737850][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.064567][ T9122] loop5: detected capacity change from 0 to 8 [ 632.526725][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 632.555205][ T9122] SQUASHFS error: lzo decompression failed, data probably corrupt [ 632.563141][ T9122] SQUASHFS error: Failed to read block 0x91: -5 [ 632.569746][ T9122] SQUASHFS error: Unable to read metadata cache entry [8f] [ 632.577075][ T9122] SQUASHFS error: Unable to read inode 0x11f [ 633.256016][ T9124] ceph: No mds server is up or the cluster is laggy [ 633.302289][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.369423][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 633.436364][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.578843][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.627679][ T3550] bridge_slave_1: left allmulticast mode [ 633.730457][ T3550] bridge_slave_1: left promiscuous mode [ 633.821043][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.379976][ T3550] bridge_slave_0: left allmulticast mode [ 634.472114][ T3550] bridge_slave_0: left promiscuous mode [ 634.558157][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.821975][ T3550] veth1_macvtap: left promiscuous mode [ 634.830433][ T3550] veth0_macvtap: left promiscuous mode [ 634.836154][ T3550] veth1_vlan: left promiscuous mode [ 634.846023][ T3550] veth0_vlan: left promiscuous mode [ 634.849081][ T9142] loop3: detected capacity change from 0 to 164 [ 634.959157][ T9009] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 635.384748][ T9145] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9145] [ 640.134955][ T3550] team0 (unregistering): Port device team_slave_1 removed [ 640.215267][ T3550] team0 (unregistering): Port device team_slave_0 removed [ 640.282206][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.930524][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.558099][ T3550] bond0 (unregistering): Released all slaves [ 641.742077][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'. [ 641.778852][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 641.789498][ T9171] netlink: 'syz.3.588': attribute type 4 has an invalid length. [ 641.823741][ T5819] lo speed is unknown, defaulting to 1000 [ 642.045538][ T8952] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 642.076899][ T9181] loop9: detected capacity change from 0 to 7 [ 642.140450][ T9181] Dev loop9: unable to read RDB block 7 [ 642.146488][ T9181] loop9: unable to read partition table [ 642.195234][ T9181] loop9: partition table beyond EOD, truncated [ 642.254901][ T9181] loop_reread_partitions: partition scan of loop9 (ţ被xü˙˙˙˙˙˙˙ ) failed (rc=-5) [ 642.305216][ T8952] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 643.812292][ T9185] vcan0: tx drop: invalid sa for name 0x00000000000000f0 [ 644.753330][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.760642][ C0] bridge0: topology change detected, propagating [ 644.770315][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.777599][ C0] bridge0: topology change detected, propagating [ 644.935884][ T6149] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 644.947379][ T8952] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 644.981589][ T8952] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 645.178126][ T6149] usb 4-1: unable to get BOS descriptor or descriptor too short [ 645.204913][ T6149] usb 4-1: not running at top speed; connect to a high speed hub [ 645.237355][ T6149] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 645.259267][ T6149] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 645.285198][ T6149] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.506634][ T8952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.520961][ T6149] usb 4-1: string descriptor 0 read error: -71 [ 645.538736][ T6149] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 645.891940][ T9200] loop5: detected capacity change from 0 to 4096 [ 645.976740][ T6149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.011233][ T9200] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 646.023300][ T9200] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 646.038998][ T9200] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 646.051052][ T9200] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 646.064381][ T9200] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 646.082022][ T9200] ntfs: volume version 3.1. [ 646.094281][ T9200] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 646.106931][ T9200] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 646.123903][ T9200] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 646.135218][ T9200] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 646.146954][ T9200] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 646.278484][ T6149] usb 4-1: can't set config #1, error -71 [ 646.303938][ T6149] usb 4-1: USB disconnect, device number 6 [ 646.350729][ T8952] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.600687][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.608005][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.767213][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.774501][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.730926][ T9212] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 648.223892][ T9223] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 649.944193][ T8952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.310628][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 650.317026][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.650012][ T8952] veth0_vlan: entered promiscuous mode [ 650.670669][ T8952] veth1_vlan: entered promiscuous mode [ 651.396638][ T9255] loop5: detected capacity change from 0 to 512 [ 656.421626][ T9252] loop3: detected capacity change from 0 to 256 [ 656.540816][ T9255] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 656.555160][ T9252] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 656.566197][ T9252] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 656.584137][ T9255] EXT4-fs error (device loop5): ext4_get_journal_inode:5820: comm syz.5.604: inode #1792: comm syz.5.604: iget: illegal inode # [ 656.609490][ T8952] veth0_macvtap: entered promiscuous mode [ 656.642186][ T9255] EXT4-fs (loop5): Remounting filesystem read-only [ 656.642813][ T9252] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 656.649651][ T9255] EXT4-fs (loop5): no journal found [ 656.649694][ T9255] EXT4-fs (loop5): can't get journal size [ 656.649953][ T9255] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 656.650385][ T9255] EXT4-fs: failed to create workqueue [ 656.650394][ T9255] EXT4-fs (loop5): mount failed [ 656.728048][ T8952] veth1_macvtap: entered promiscuous mode [ 656.804996][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.847534][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.894853][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.017593][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.069694][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.081079][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.092823][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.103889][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.114452][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.125776][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.136426][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.148766][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.164423][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.224363][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.126300][ T8952] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.135869][ T8952] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.486037][ T8952] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.486077][ T8952] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.716987][ T9267] tty tty4: ldisc open failed (-12), clearing slot 3 [ 662.782769][ T9278] loop1: detected capacity change from 0 to 256 [ 663.737346][ T9284] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 665.096974][ T9299] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.110892][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.236901][ T9305] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 668.444281][ T9305] input: syz0 as /devices/virtual/input/input12 [ 669.456255][ T8788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 669.471977][ T8788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 669.482239][ T8788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 669.495340][ T8788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 669.505750][ T8788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 669.514938][ T8788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 669.780515][ T9317] lo speed is unknown, defaulting to 1000 [ 671.743547][ T9338] loop5: detected capacity change from 0 to 64 [ 671.802983][ T8788] Bluetooth: hci1: command tx timeout [ 672.021339][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 672.021358][ T27] audit: type=1800 audit(1783659057.875:104): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.611" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 673.599382][ T7233] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.040193][ T8788] Bluetooth: hci1: command tx timeout [ 674.342577][ T9360] loop3: detected capacity change from 0 to 1764 [ 674.351427][ T9359] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 674.406752][ T7233] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.454957][ T9317] chnl_net:caif_netlink_parms(): no params data found [ 674.513420][ T7233] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.619013][ T7233] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.970264][ T9363] loop5: detected capacity change from 0 to 4096 [ 676.848784][ T8788] Bluetooth: hci1: command tx timeout [ 678.506866][ T9380] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 678.527211][ T9383] loop3: detected capacity change from 0 to 4096 [ 678.582782][ T9383] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 678.594690][ T9383] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 678.608581][ T9383] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 678.620124][ T9383] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 678.633396][ T9383] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 678.647378][ T9383] ntfs: volume version 3.1. [ 678.701670][ T9383] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 678.714184][ T9383] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 678.729916][ T9383] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 678.741315][ T9383] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 678.752743][ T9383] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 678.912871][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.923057][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.931084][ T9317] bridge_slave_0: entered allmulticast mode [ 678.940129][ T9317] bridge_slave_0: entered promiscuous mode [ 678.950143][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.999822][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.007638][ T9317] bridge_slave_1: entered allmulticast mode [ 679.015950][ T9317] bridge_slave_1: entered promiscuous mode [ 679.058533][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.071708][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.093364][ T8788] Bluetooth: hci1: command tx timeout [ 679.431993][ T9317] team0: Port device team_slave_0 added [ 681.323254][ T9317] team0: Port device team_slave_1 added [ 682.696327][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.711438][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.747020][ T9317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.807212][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.825123][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.864576][ T9317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.053129][ T9317] hsr_slave_0: entered promiscuous mode [ 683.060465][ T9317] hsr_slave_1: entered promiscuous mode [ 683.074121][ T9317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.081776][ T9317] Cannot create hsr debugfs directory [ 683.567550][ T9419] loop1: detected capacity change from 0 to 128 [ 683.585294][ T9419] FAT-fs (loop1): Unrecognized mount option "fmask=0000000000000000ăĄ3Oošjnonumtail=0" or missing value [ 686.901940][ T9437] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 687.005172][ T9437] loop1: detected capacity change from 0 to 1764 [ 692.230375][ T9455] loop3: detected capacity change from 0 to 32768 [ 692.246128][ T9455] (syz.3.629,9455,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 692.259659][ T9455] (syz.3.629,9455,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 692.311294][ T9455] JBD2: Ignoring recovery information on journal [ 692.356521][ T9455] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 692.498612][ T7233] hsr_slave_0: left promiscuous mode [ 692.566685][ T7233] hsr_slave_1: left promiscuous mode [ 692.619402][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.626911][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.716172][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.723660][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.823917][ T7233] bridge_slave_1: left allmulticast mode [ 692.829596][ T7233] bridge_slave_1: left promiscuous mode [ 692.844533][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.902684][ T7233] bridge_slave_0: left allmulticast mode [ 692.908441][ T7233] bridge_slave_0: left promiscuous mode [ 692.942075][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.138328][ T7233] veth1_macvtap: left promiscuous mode [ 693.143966][ T7233] veth0_macvtap: left promiscuous mode [ 693.176232][ T7233] veth1_vlan: left promiscuous mode [ 693.199168][ T7233] veth0_vlan: left promiscuous mode [ 693.700872][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 698.523941][ T9476] tty tty22: ldisc open failed (-12), clearing slot 21 [ 698.943153][ T9482] loop5: detected capacity change from 0 to 4096 [ 700.979295][ T9486] loop5: detected capacity change from 0 to 4096 [ 701.002103][ T9486] __ntfs_warning: 6 callbacks suppressed [ 701.002119][ T9486] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 701.058664][ T9486] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 701.118774][ T9486] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 701.141724][ T9486] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 701.196383][ T9486] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 701.205183][ T9486] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 701.246227][ T9486] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 701.257899][ T9486] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 701.280485][ T9486] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 701.298016][ T9486] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 701.348148][ T9488] loop3: detected capacity change from 0 to 128 [ 701.368149][ T9488] FAT-fs (loop3): Unrecognized mount option "fmask=0000000000000000ăĄ3Oošjnonumtail=0" or missing value [ 701.389934][ T9486] ntfs: volume version 3.1. [ 703.520195][ T7233] team0 (unregistering): Port device team_slave_1 removed [ 703.607595][ T7233] team0 (unregistering): Port device team_slave_0 removed [ 703.753233][ T7233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.037714][ T7233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.697090][ T7233] bond0 (unregistering): Released all slaves [ 705.860351][ T9477] bridge0: left promiscuous mode [ 705.875051][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.883893][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.916803][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.638'. [ 707.816822][ T9520] virtio-fs: tag not found [ 707.910988][ T9520] "syz.5.641" (9520) uses obsolete ecb(arc4) skcipher [ 709.334548][ T9523] virtio-fs: tag not found [ 709.419609][ T9523] "syz.3.643" (9523) uses obsolete ecb(arc4) skcipher [ 712.557143][ T9317] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 712.618061][ T9317] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 712.679591][ T9317] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 712.719892][ T9317] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 713.050242][ T9317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.126397][ T9317] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.169379][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.176625][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.199127][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.206326][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.759879][ T9547] loop3: detected capacity change from 0 to 256 [ 714.275875][ T9558] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 714.331249][ T9317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.278244][ T9560] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 716.363831][ T9317] veth0_vlan: entered promiscuous mode [ 716.400343][ T9317] veth1_vlan: entered promiscuous mode [ 716.483780][ T9317] veth0_macvtap: entered promiscuous mode [ 716.499590][ T9317] veth1_macvtap: entered promiscuous mode [ 716.524515][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.577130][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.588081][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.609614][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.619832][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.676654][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.697006][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.721546][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.761168][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.771147][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.790397][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.803198][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.813992][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.828207][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.840225][ T9317] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.870269][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.876738][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.912830][ T9317] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.921618][ T9317] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.931050][ T9317] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.075423][ T5899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.083401][ T5899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.164221][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.183173][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.863518][ T9604] loop3: detected capacity change from 0 to 2048 [ 720.574168][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.605190][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.973625][ T9628] IPv6: sit1: Disabled Multicast RS [ 725.582690][ T9627] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 725.612021][ T8788] Bluetooth: hci3: command 0x0406 tx timeout [ 725.697507][ T9627] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 725.706053][ T9627] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 725.719114][ T9627] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 725.760417][ T9641] loop3: detected capacity change from 0 to 4096 [ 725.769404][ T9627] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 725.919088][ T9641] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 725.985459][ T9641] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 726.806825][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 726.815930][ T9647] netlink: 43 bytes leftover after parsing attributes in process `syz.1.654'. [ 726.825326][ T9648] tmpfs: Bad value for 'huge' [ 728.025565][ T8788] Bluetooth: hci1: command 0x0c1a tx timeout [ 728.033163][ T8788] Bluetooth: hci4: command 0x0c1a tx timeout [ 730.311701][ T8788] Bluetooth: hci1: command 0x0c1a tx timeout [ 732.533310][ T8788] Bluetooth: hci1: command 0x0c1a tx timeout [ 733.181294][ T9703] loop3: detected capacity change from 0 to 32768 [ 733.216276][ T9703] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 734.532310][ T9009] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 735.269675][ T9722] loop3: detected capacity change from 0 to 2048 [ 735.618408][ T9722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.904935][ T11] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 738.403530][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 664 with error 28 [ 738.533076][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 738.533076][ T11] [ 738.576499][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 738.582585][ T11] EXT4-fs (loop3): Free/Dirty block details [ 738.615626][ T11] EXT4-fs (loop3): free_blocks=66060288 [ 738.636003][ T11] EXT4-fs (loop3): dirty_blocks=672 [ 738.748767][ T9751] loop6: detected capacity change from 0 to 128 [ 738.757155][ T9751] FAT-fs (loop6): Unrecognized mount option "fmask=0000000000000000ăĄ3Oošjnonumtail=0" or missing value [ 738.799128][ T11] EXT4-fs (loop3): Block reservation details [ 738.826671][ T11] EXT4-fs (loop3): i_reserved_data_blocks=42 [ 739.553190][ T9138] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 740.867686][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.319787][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 749.606576][ T9823] loop6: detected capacity change from 0 to 128 [ 749.631904][ T9823] FAT-fs (loop6): Unrecognized mount option "fmask=0000000000000000ăĄ3Oošjnonumtail=0" or missing value [ 751.753965][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 753.429911][ T8788] Bluetooth: hci1: command 0x0c1a tx timeout [ 756.046757][ T8788] Bluetooth: hci4: command 0x0c1a tx timeout [ 757.068557][ T9890] loop1: detected capacity change from 0 to 1024 [ 757.091938][ T9890] EXT4-fs: inline encryption not supported [ 757.110464][ T9890] EXT4-fs: Ignoring removed bh option [ 757.135375][ T9890] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 757.698874][ T9890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.219040][ T9906] IPVS: sh: FWM 3 0x00000003 - no destination available [ 758.227154][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 759.895025][ T9913] virtio-fs: tag not found [ 759.952499][ T9913] "syz.3.697" (9913) uses obsolete ecb(arc4) skcipher [ 760.892057][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.604645][ T1046] [ 762.607055][ T1046] ============================================ [ 762.613230][ T1046] WARNING: possible recursive locking detected [ 762.619488][ T1046] syzkaller #0 Not tainted [ 762.623908][ T1046] -------------------------------------------- [ 762.630154][ T1046] kworker/u4:5/1046 is trying to acquire lock: [ 762.636326][ T1046] ffffe8ffffd34730 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x624/0xa40 [ 762.645892][ T1046] [ 762.645892][ T1046] but task is already holding lock: [ 762.653445][ T1046] ffffe8ffffd34780 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 762.662685][ T1046] [ 762.662685][ T1046] other info that might help us debug this: [ 762.670748][ T1046] Possible unsafe locking scenario: [ 762.670748][ T1046] [ 762.678200][ T1046] CPU0 [ 762.681485][ T1046] ---- [ 762.684773][ T1046] lock(&pd_list->lock); [ 762.689114][ T1046] lock(&pd_list->lock); [ 762.693449][ T1046] [ 762.693449][ T1046] *** DEADLOCK *** [ 762.693449][ T1046] [ 762.701605][ T1046] May be due to missing lock nesting notation [ 762.701605][ T1046] [ 762.709927][ T1046] 3 locks held by kworker/u4:5/1046: [ 762.715221][ T1046] #0: ffff88801d649538 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 762.727192][ T1046] #1: ffffc9000439fd00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 762.739165][ T1046] #2: ffffe8ffffd34780 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 762.748861][ T1046] [ 762.748861][ T1046] stack backtrace: [ 762.754765][ T1046] CPU: 1 PID: 1046 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 762.762435][ T1046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 762.772515][ T1046] Workqueue: pencrypt_parallel padata_parallel_worker [ 762.779314][ T1046] Call Trace: [ 762.782673][ T1046] [ 762.785664][ T1046] dump_stack_lvl+0x18c/0x250 [ 762.790495][ T1046] ? show_regs_print_info+0x20/0x20 [ 762.795846][ T1046] ? print_deadlock_bug+0x435/0x5d0 [ 762.801078][ T1046] __lock_acquire+0x6809/0x7d80 [ 762.805965][ T1046] ? __lock_acquire+0x7d80/0x7d80 [ 762.811020][ T1046] ? do_raw_spin_unlock+0x121/0x230 [ 762.816253][ T1046] ? verify_lock_unused+0x140/0x140 [ 762.821475][ T1046] ? mark_lock+0x94/0x320 [ 762.825818][ T1046] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 762.831811][ T1046] ? __lock_acquire+0x7d80/0x7d80 [ 762.836846][ T1046] lock_acquire+0x19e/0x420 [ 762.841424][ T1046] ? padata_do_serial+0x624/0xa40 [ 762.846558][ T1046] ? lockdep_hardirqs_on+0x98/0x150 [ 762.851767][ T1046] ? queue_work_on+0x19a/0x1f0 [ 762.856718][ T1046] ? read_lock_is_recursive+0x20/0x20 [ 762.862102][ T1046] ? __rwlock_init+0x150/0x150 [ 762.866875][ T1046] ? generic_gcmaes_encrypt+0x289/0x3d0 [ 762.872672][ T1046] _raw_spin_lock+0x2e/0x40 [ 762.877279][ T1046] ? padata_do_serial+0x624/0xa40 [ 762.882321][ T1046] padata_do_serial+0x624/0xa40 [ 762.887190][ T1046] ? padata_parallel_worker+0x44/0x1c0 [ 762.892659][ T1046] padata_parallel_worker+0x6f/0x1c0 [ 762.897956][ T1046] ? process_scheduled_works+0x975/0x1600 [ 762.903687][ T1046] process_scheduled_works+0xa60/0x1600 [ 762.909278][ T1046] ? worker_attach_to_pool+0x370/0x370 [ 762.914764][ T1046] ? assign_work+0x3cc/0x5d0 [ 762.919540][ T1046] worker_thread+0xa5e/0xfe0 [ 762.924147][ T1046] ? _raw_spin_unlock+0x40/0x40 [ 762.929020][ T1046] ? __kthread_parkme+0x71/0x1c0 [ 762.934061][ T1046] kthread+0x2fa/0x390 [ 762.938136][ T1046] ? pr_cont_work+0x550/0x550 [ 762.942836][ T1046] ? kthread_blkcg+0xd0/0xd0 [ 762.947450][ T1046] ret_from_fork+0x48/0x80 [ 762.951900][ T1046] ? kthread_blkcg+0xd0/0xd0 [ 762.956690][ T1046] ret_from_fork_asm+0x11/0x20 [ 762.961523][ T1046] [ 763.716711][ T9953] loop3: detected capacity change from 0 to 256 [ 763.726093][ T9953] exfat: Deprecated parameter 'namecase' [ 763.732211][ T9953] exfat: Deprecated parameter 'namecase' [ 763.738127][ T9953] exfat: Deprecated parameter 'namecase' [ 764.058852][ T9953] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d)