last executing test programs: 7m15.510320483s ago: executing program 4 (id=1184): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r4, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) syz_init_net_socket$rose(0xb, 0x5, 0x0) 7m13.083484434s ago: executing program 4 (id=1190): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r2, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) syz_init_net_socket$rose(0xb, 0x5, 0x0) 7m12.756763133s ago: executing program 4 (id=1191): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100), 0x0, 0x0) shutdown(r1, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setrlimit(0x4, &(0x7f0000000080)={0x100, 0xffffffffffff18b2}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) ftruncate(r0, 0x3) 7m11.315211689s ago: executing program 4 (id=1194): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$eJzs3U1rXFUcB+D/JJPXmhe1VlsQD7pRhLHJwpULg7QgBpRoCioIt2aiQyYzITMERsTGlSvBjyHq0p0gfoFs3AjuBEEkG5ddiFcmM7WZzKSNjZ1geZ7NPZxzfvfcl9wLN9wzd/+lLzY31hul9awZI4VCFLfGongzRYqRGI2O3Xju2k+/PPnm2++8trS8fGUlpatLby28mFKafer7dz/+5ukfmueufTv73UTszb+3/8fir3sX9i7u//V1VBqp0ki1ejNl6Xq93syuV8tprdLYKKX0RrWcNcqpUmuUt3va16v1ra1WymprM9Nb2+VGI2W1Vtoot1KzkJrbrZR9kFVqqVQqpZnp4DRWv7qZ53lEno/FeOR5nk/FdJyLh2ImZmMu5uPheCQejfPxWFyIx+OJuHjQ66y3GwAAAAAAAAAAAAAAAAAAAB4sd5n/XzD/HwAAAAAAAAAAAAAAAAAAAO6/o/P/ixG+/w8AAAAAAAAAAAAAAAAAAABDdpfv/x+Z///8ofn/o2e96QAAAAAAAAAAAAAAAAAAAPDgmOwsVlKajNj8bGd1Z7Wz7NQvrUclqlGOyzEXf8bB7P+OTvnqq8tXLqcD8/HC5o1u/sbO6mhvfmFsLuYLA/MLnXzqzU/E9OH8YszF+cHjLw7MT8azz7Tzn3bypZiLH9+PelRjLaLQ3fuD/CcLKb3y+vJUb/5Su9+x/PoBAAAA/yel9I/+5/fdbqeB7Z2m7vN56vYs3OH/A0eez4txqXhWe80tjdZHG1m1Wt6+x8L48esZP92a+wqFiMjicM3s9G8r7cH/syHutTA61EHH7tznFOc0ivf3YLZP4TAO1O9fHqqZjOH+SYx0L4ms2r5/niwVu3ne1/TyieMnuE4HNU3crvm5L3X8PaMwhPsSw3H7pJ/1lgAAAAAAAAAAAPBvDHxncCoi+t4H/LCv5tbr4b3x/jUfP/rnQ9hDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPibHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FUAAAD//8DezoA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100), 0x0, 0x0) shutdown(r1, 0x1) setrlimit(0x4, &(0x7f0000000080)={0x100, 0xffffffffffff18b2}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ftruncate(r0, 0x3) 7m9.139500474s ago: executing program 4 (id=1199): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mq_open(0x0, 0x2, 0x48, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0x8d71ca88fffffffd, 0x0) mount$overlay(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000), 0x880, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './cgroup.cpu/cgroup.procs'}}]}) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x4, 0x80007, 0x9, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) 7m5.38334352s ago: executing program 4 (id=1210): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='gG\x9e', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x280449c, &(0x7f00000006c0)=ANY=[]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000080)) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x10000000, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 7m4.400432565s ago: executing program 32 (id=1210): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='gG\x9e', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x280449c, &(0x7f00000006c0)=ANY=[]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000080)) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x10000000, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 14.61554238s ago: executing program 5 (id=2106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac5496f"], 0x18}, 0xc894) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r5 = dup3(r3, r2, 0x80000) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xffffffffffffffb5) keyctl$get_persistent(0x16, r7, r6) keyctl$get_persistent(0x16, 0x0, r6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0xd) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r9, &(0x7f0000000380), 0xe) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 13.844772499s ago: executing program 5 (id=2109): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000200)={r3, 0x3, 0x2ece, 0x1, &(0x7f00000001c0)=[{0x0, 0x3, 0x1ff, 0x2}]}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket(0x400000000010, 0x2, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="0180a9ada6330180c200000b000442ac9ea8f838afe839009700"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYRES8=r1], 0x3c}, 0x1, 0x11}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010081bd7000fcdbdf25030000001400018008000300ac1e010108000700", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) write(r8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f0000000480)=[{r10, 0x8}], 0x1, 0xff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec00000010000002feffffbf0001000000000000000000000000000000000000fc0200"/46, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000000000000000000000000000000000015e080000000000000c000000000000000700000000f5fffffeff0000000000001c25080000000000a600000000000000f7ffffffffffffff0600000000000000060000000000010000000000000000000200000000000000ff01000000000000fdfffffffcffffff000000002cbd7000000000000a0003ff200000"], 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendfile(0xffffffffffffffff, r9, 0x0, 0x578410eb) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000040)=@isdn={0x22, 0x81, 0x41, 0x5, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="9e6ea81b07356e9fc5a56a9dd73bda78da92c57f44f5e0badfbcfae036b2db9b6e275619b403759b60d21c4a1fcc7528ae3968e98522067533913e4d94af2bd1328484209fd3351d0acfb39c755c4c626aca5d426dd30c7684ff4680475a41149058c24fe607706a409d411744ca7f988ecf024e3484c34300fa952a403ec7ce0934e1822903a6f3e07d25b8f80cda562220d0a4e19f3cf91df1976ec585bc952629ea1536c2548b7a0841d18a1f427c8452ef83955d4da8", 0xb8}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4050) 11.800073311s ago: executing program 5 (id=2114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) kcmp(r0, r0, 0x5, 0xffffffffffffffff, r3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) 11.712189703s ago: executing program 2 (id=2115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x0, 0x1, {0x4, 0x1}, {0x2a, 0xffff}, @cond=[{0x10, 0x10, 0xcf, 0x1, 0x1, 0x3}, {0x271e, 0x4, 0x1, 0x7f, 0xfffe, 0x7ff}]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='i8042', 0x5) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00108a95603067961e1a00000a0a010300000000000000000a00000070ff0a4000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000b40)={0x1fc, r6, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb8b2, 0x4d}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc3ed}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1b0, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe4, 0x2, "bdcc72c991255c2cb90c8da6ff1da57f04a80d1a0a4af96385c30ff598d5431c253ca3ed59591b9b0d19479a31b4280237d727100e5c312e86fe51a86ac54c8ca3daae4388a5dde2e44504aba82648065f88cd3f7a3564d749bc709fa6dd62bc45db5dc556ad6771df11d84d417f9a4f85473914909d89aac67c32bc068e9bee6481dad61612f7987e2a603768f444431d3f6e53cb79e0ca1ff6a42090c80325a2b64ef515f2311c86f1506444b351fcbc20429364e68a9f956d227c6982aa3c0d0a6afdeca16fe649c15eafa97d5b378a90a6e0b26e237ae450542c7e2064e4"}}, {0xc4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xbf, 0x1, "40faa2387ff8b772b06f8842729dbe5aef5791e23de6c8c0b9242de967420a9babfd2e4cb647f85115c8f195801e612e0523f4184cf56a0c7c5d349d27a75faa06290afde5428b964dce6add55a6faf7f85a2cf27af4c7a2324a878a3231f02930ab1076b259ef3d91138f75b22e73ee13580f2b9a13f81a2dec1a54411bc97e3de5387bae87d9df9df0faf0ef14e249277374fb2aa6595a3b2bebc3154f4cb439ca662c360497b54b666e1c1da25d45f3fca72033dc9b5f8b4e62"}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4004000}, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) write(r4, &(0x7f0000000140)='\x00\x00', 0x2) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a300000000014000000020a01"], 0x68}}, 0x0) 11.684862924s ago: executing program 3 (id=2116): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) setuid(0xee00) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000224000/0x1000)=nil) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYRES64=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) 11.563702927s ago: executing program 2 (id=2118): r0 = syz_open_dev$video(0x0, 0x8, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000040)=ANY=[@ANYBLOB='rodir,nonumtail=0,rodir,rodir,shortname=win95,shortnameepage=862,shortname=winnt,shoruname=lower,shortname=winnt,iocharset=iso8859-9,uni_xlate=1,utf8=0,\x00'/163], 0x81, 0x2d1, &(0x7f0000000880)="$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") sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r5, 0x0, 0x0, 0x3b2}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 9.86232502s ago: executing program 3 (id=2120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(r6, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-ba', 0x2a) ioctl(r6, 0x40104d06, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x99) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) 9.131105228s ago: executing program 5 (id=2123): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mq_open(0x0, 0x2, 0x48, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0x8d71ca88fffffffd, 0x0) mount$overlay(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000), 0x880, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './cgroup.cpu/cgroup.procs'}}]}) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x4, 0x80007, 0x9, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) 8.533436684s ago: executing program 1 (id=2124): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x32d090, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) unlink(&(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) timer_create(0x1, 0x0, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 7.434586941s ago: executing program 1 (id=2126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x5d) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x15) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001240)={0x38, r4, 0x1, 0x71bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xf}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x4050) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg2\x00'}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x1) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xfffff) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0xc2c, &(0x7f0000002580)="$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") r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x40) 7.396673073s ago: executing program 0 (id=2127): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x5c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, 0x0, &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(0x0, r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$netlink(0x10, 0x3, 0x0) 7.292499595s ago: executing program 5 (id=2128): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x64}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, r4, r5}}, [@algo_auth={0x11b, 0x1, {{'blake2s-128-x86\x00'}, 0x698, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e05"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x11f4, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="b156a8fc9cf1ceda616bff7bedf099cceb4647e290a6137d9f009701afa23203c5a1d329df58df03f7e29626b52b2e435012eaa452f7755e30cf5aab6460fddfcbb2c6c622fd4dcc2a95cf1a113b227b5205a31aee0635d3ac6e619cb49aada53a2b4b5ada971adea1e1343fe759dece47a452fb05ecbae084bbcde0f855e7d42e4100619426d79a60f0d83f5c4b1af7e196d8989ea8ca6ed9337e803cbdee878e40eb06b6ba614fa15ea5041e148762a8aa3ec429555c35bc57c988fe231d1fb7b7f74eb111cc6e08f6bd383bcf4eaed1b38d7a4e9c40c37c59ec9b14604a32a987b2d22c9b5ebb5a86955a816efb97c22c20a00bea56766c6d8bd6e5d49dad5c88416cf00a6a23ae571381975e4c39727eb00a3ca09a5a452056ca2fd5f275c0f31506a97ec04fb466076b2ea740033bf6a202de4cb39a5146a419628e70bf792edb7c4ca5fcdadb76fb22727c6b4e4dce00a5b63fe8449d72e79f65a3c1ff4b30fdbba3a4a5f47152a3becb34383d2ad564963c226e0ad57554262f694880bfda42fc4c8d68c0e44126371756e65d127a59207d4090956cf666958065d4afd32e9c011612abe70797a4ddbac09ad6c51e05bfcc73bd0756ad47484b75b244b2397fb7d357ca3a56a50a8a7aa9ffe98c72b200cedbaa10689727c083fdf0f5d5fc06a2557dcc2d0b1dca70ec513a82fe26b5eb0cce40b13fcb6de9da917d3b76edb90148ae718e24d75bfd1561d3a1586957000a2a7225f8858416de22228c3f616baf210d1efdd13264abb385e277c1aa451858782c94ed0e0ee2d806a85c75388f7951abd24369308bc6ed6cd7b4b7e2ae3f2e3f9a9f5e70155313b8df1da4f5ca9c96851949af9deed590fe70ad4592128e61b72244f408545360fe37fedefdfe44ef1c2665ec6c9c0a525dac9992aa7f95f3c1eb988f3fed8b981436b210d9407b1eca0dba2b3b1177d0a3e027b576498a074be65755683458786865d5021079df56e7515fe98aed2ea12a44f9e8053485a38e374ef6248502df627d2d2b8dd44727a5750a0140d6830c9ef5d18bad95a44b20eba6618a9d062ddbd9c9c2e92d6ca56d1de110e4cf8cfe62f426e6b5b1e257a5e32ee5ed605a2032808a5950b80811d7987a1cb5bdbfe52cd1f43fcddbba4b62d09a57bdce780bfeb78bfe737d71b3b634871a82698f51d39e6a8895d89b63a8223fb1f507709b8a1a333cf84e9f4a996349f772f2acb260f2519b5500063c31df5f6a05681daa827431a05b98bc0d2106d6abfb7382faa10272f48100dd90a3b677ab9185ff98c31d26c76e26cb3bf09cc70f8a615f0703638381107ef7ba060fab2c12db771b92a32b57b232ec2fac3f57a9f827ff8cb1a590aa66a7b502c4f127d43eb11c98eaaa03d42b0180120c4e1c8f1d5c9d59c6bf8fa884ae5187b73be20168d657e8e04dc8ff27aeabb6f607f23d056758c6c8b29fe7c8a8fae06375738f582d1b01b0a6a760666c853921e03ad3ef78db03201c0cfd0c5086e4bce80011437641bcd621a6f0457030381890dbb8212ebaca4580b6b2b35e8940f4687353886c4321ce0f145842972149d53646170df21cd26e2c729c94f959c9bdbe5bcf7c88d0cfd5ec32b3070522135b2eb191cfb01ba28df935dce574f1353ab5f3e4b9de4c89a2fe77aa84fa518963e61fa83658736b6f78d40876ad550bd690fa3824de7518e72008784cac157cd450be481ae86b758b40e9be6a4193a451f1345ffe4c88fec3af838da9aa96d12829de937048047945833dad53c1f542fda4dd5b7ca8f4b29078cf68e800cc1c9572661e12dfa7fac908023f49b2b6f69c4e5d5b715de0c02c9db4b060a8fee131c25efe7d86ce4545aa8fac94eb0f14716fd65f59f2573d814e4799d153782c59c7e941e8c682dfb2a7ad5386eabb5123bef16555285c96a40f439fe02004f75dd6785822146aa515f5f6c90a24efc72d031b347867134e52f986c3549c0b316237db118c3b6efda0c92c008fc15084e4f5856e6047bc1a5a19f7a9595727a769c2d0764d482f20280d860d831f5ef9aba39714afa7f3fe85a3b4cd5715f8ee6e20886c2ad190d60a38bb5d7853e9465c34bac4b03893edeabce14456274eb4aa279c30d381472a0036a4058d863b3987a0d570196fe1c7976b4aabd41ffde6dfc5b468bddcb0f71513fadfe7e0bbd32c409f78f989fb3a9ef55fb57135e16236f3f8558371ea9165bc471a5715aac3d359979daf991fb8f0497ebbae15fe1c628dfff4bbf64c1efc10f6cc4723db30673bc851183faf622d7aa7d40231a0b15816fcf7cdaeee244843f60b47da00676cd166d0853d161b4cbc555c35905e11a768d60bac536b336b5ef69214db80c71962491e87cdf8441e46ba7270c0fa6815bfada79d1a12029b10ccab08e2971c10dd1558e29169fe2f3c65c8a5a569332ff2baa507cc79622af84048c7b1dfb5adc9ef04f5faa166c33decc2629a6744750dc68975ccda21e72098c6b9485c886a9e0c550e200aea2878e028ffdf0f9f20a7480cc88cdb51406c74c059292bd376d9fdd94633f497181d8c468cfc5d9023ea89b96165ff877a87b3caf605da32546a53f6a20b70ad40e94af1c5eee7d3ecb2ed07e5b413643c2df6d27da458fbc140e97c9cafa8dc97cc79dfcc144070a2cd5adb31bf3a786b30baf087b9273dffb5726e55ae6e1bc2fcf356b446bb322acbcfe35753835bc6dc69ea4845a4d0807ec730fd0490ed81b2f8c7e58c07da8f03a432e509adaaeccc9a405c2b111e26062503cff9b1b611deafaccc0cd9f5f28935376d4d377ff3260670ed956c96374a27320d1a1bcc5bb1bb94e5d2e241ed88da7c4064f8412ff03d7b84b31f4b3afb7c26d131e7343adec9f21ee0efc64a3b14599e3e4032f7af8664475dd8bb42b8bcf8b4bb8a61f4f439cbd6521899f3ff4627abd709ffd0d47b04997643b9c4deaf3af1f453ea445bcc0af145b9845af09b2777e93670e3e4eed77700286f73c2220677c67caad086d9cbf27a8a37c175a8a6584ca7bdef91ac60c088e76cb1414653652df9d86ecae52c26681b5e31f70bf5e03f3fd3d70a174b6c5f098e8bc1687f7c770c73a5449718ff4662065d807283264a238dfd787f40eac0bc6e165855bc71946cda2593a09d71fddd693423fef3b2be1ef9f907eaf786cc7446c6585aba758369833c48823c004ca613ff0e55d485794d862b5243d06f669afca436a7624a38a81787ea62ad3b7f1b340be8a21941e4338245078ad2d4b6fc00a35f94f7eb083c706f5d782c09b09008aefc5dc3c52e1db55a343d017db507c663e2033c224c3dcd3cbc97de9f00bab9c78a672406cc153a0add2285524ecd24236645aa4881d35ee9c40cedb787a04917bcceea935317bc16444733f51d4d0111be4eefd94ce4c0db7cd8385d1d180b563bfba7b965b4735f2195dc31009b6fc885eead0050ed80bd21fbdd3a5432f64078c94e338fdc48a19b1714bc5842234647fc0e32cf27ba5977574b552a315e3c7034877cac0dd70be0832856993add1ea79153a120d9e1f6ed5e9e3d41ff9e11953bb10ef9df2f5fa532cb82a41c2791c73e53d81666cf382419295c7741290049688c6bf7e395e3222abfd94c9d423b30ec7213f29a4560f4b356dfaeabef89d897014422872f9675cd65c17547c753d52f6adee0fa796716c923d35ff7f44f3e5e43a01a8d6dbd79381c91bf4bf5b443b03956ee015019d4cf41654214186038c0e4e888b4ca0d6f29544a9043e201d3b482a61eb50cb1500f1e850eb6410058e6fac6e34cb494568071aea1d7dde90575ed9b0c4ff8cf2b2c8621eb85f66064ad659636c0d164abf972de63c3a5b8637f4014af3aaccf7b67098e46900398efed545bda8c174c05d817d43d97e3a082c499b475847ba2f00ca99072f76cd5299c7193e1f4b1eb0e39cbfd46d08b607a14b8291a6d8473f7bd3211e4aa7aa7034a649efca36447b76404ea19e657815506da20d8d2082884bf9cbcb6b5d2653a249e3032eb944d4aeb3a2353f47147e3930c84ada6c37719b2cdb2678946d5a9a9b4e32c6625cbaae6398a6d5c9b2bf6a0a87c493115581f27739badf456de575df11d8a704657a3a7a3f76242b777f42facec24f92427859b3204db98f1df5f977ab1c4d41040ef518dd48dd41a230494084604b088702c342072695a9e67512a7cb9b1465ad5f2b07ed4ef10a85ca60ef5e76995a9967198b1fa7eacdb61874d13942c6c50f017ae5c26dc48a2c1e7dec7a13f9a6893243e3634ec48ed1e9b2a7dfe69e9e49d37cd3eaa2ce1c0f1c3d69dc18161b1d2e6eb731f2f3d110329c8484805630e208b0b7a8a5307f1c1a3127c33c5b6fddb9e03ba2f1b7822c8b5dd82862db0dde8acac1635f793d479f78ec6bf0a13e281abe9297c22f206078395a20564dc0569a9e43471cf8e1a0d14fc82ca4afb9f49e5d443b0cb975ce494820ca05fde153782de00c038ef2f87cbc971e4b8cfd03b0bfa8651a351cc900ef573ce73548f9af5eb5ca84ca3ecc70fca755aab3d3b260a1224eccb82245882483523d3726d01a848c5e0be5f0fe2188a806abb01602fa43316c1e80770e01d8af77e9b34a319bfc5e3413d61aeae160af43149391da10035346add1d49fba8e1a4abedf42fbe1496ecd70cc931f39489c68a4e61b910c9beef2a2f2242249f286dd48253c55ccc59c9d6e3d5f674836addf882b1328987949ac01b57a0e1aff86e57c0dc0302b3b6d8f7c6ff18a58c4f91f70ba952cef5563d882d6369fe156821a7b3bbfff0bb77e76f4cad52801c3bbebc72e850fc26dcf6181c49361e58789a7f6eae4357aeeabe5c962319b2ea6fa3e472680699f71f9bb6760a5569ac69faa4d04c1c1b27461dd9461599af241b7a207437cba94cc29ec43193799571c4aea1c0d009e60d439d924967ae1af82bc57e55e9ca8d281ce372d4143d67400aa70ada015904d6482b7903a07e6410c9761c77c05c29b4f1cabeda2f400e4590bbb80559790cf28d0ac23ef7414d90b127a95c75645bf234085632ab31821e104377d1a837abc04892de3bd87fe833940fd6692ce937f57d534783be367dc296fe0a64d3a14a38e3ba7609be1987bf7799aef2286f2841eaebc43fb41db4cf0a4efbe1f0468a9b3400696aee552cd4b32aa308658ee5db2e9717ad5eb17b496483c3208108db08a1674a200e0bda31d4ac60356b89e15b6819dad4b9ebcf8f6df6d1945051b2450d55924a4a844df7722904b7b2cec80550c240cc4c1c1c44c620defd7aa0758d80346d534ca08d91f48ff89d601aeeba50f3682aa64c439d04cc245c6a214c6c29dc1c62049c0831b2ee60d9ab3d65fe5c9acecacf318d5a8397ea70075a5114119a1662c6f650d8bbea67f64080831f177ad5456250c496c5d4fb1bca770da4b815c6b5428d490c9e7afe7931d8dcded7097be5abb99c722a13ab0a0d45a8fdd8bf91a9316d4d88b6c848438274a1806d4d979452b9c169642287a221e783be2ec2f78e70a8b13d96959c5c9a000f488a5f2f8cac12f4554287acf6cec15b3fa5057aeca3d234e6265d0575530b8f6fa26182a1c0efbad29f2c6d3c396e3d98335fe0d9ed5e781e2164017ae71e4708829582f6b34899b51919dcc0b6a3893fecc00fee1fcd3957038393c64d76c751839851b6896af8062c73fda7e0b7c8d979ac8a8b435837b240e93f8d6303196c07df5327b86d48722b56beacf6c764ab1c36e0e3637f55a8d4a40c223bb1a614b2", @nested={0xd9, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x120}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r6}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee066545976ea2fe8", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$netlink(0x10, 0x3, 0x0) 6.821706617s ago: executing program 3 (id=2129): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x6c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x11f4, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="b156a8fc9cf1ceda616bff7bedf099cceb4647e290a6137d9f009701afa23203c5a1d329df58df03f7e29626b52b2e435012eaa452f7755e30cf5aab6460fddfcbb2c6c622fd4dcc2a95cf1a113b227b5205a31aee0635d3ac6e619cb49aada53a2b4b5ada971adea1e1343fe759dece47a452fb05ecbae084bbcde0f855e7d42e4100619426d79a60f0d83f5c4b1af7e196d8989ea8ca6ed9337e803cbdee878e40eb06b6ba614fa15ea5041e148762a8aa3ec429555c35bc57c988fe231d1fb7b7f74eb111cc6e08f6bd383bcf4eaed1b38d7a4e9c40c37c59ec9b14604a32a987b2d22c9b5ebb5a86955a816efb97c22c20a00bea56766c6d8bd6e5d49dad5c88416cf00a6a23ae571381975e4c39727eb00a3ca09a5a452056ca2fd5f275c0f31506a97ec04fb466076b2ea740033bf6a202de4cb39a5146a419628e70bf792edb7c4ca5fcdadb76fb22727c6b4e4dce00a5b63fe8449d72e79f65a3c1ff4b30fdbba3a4a5f47152a3becb34383d2ad564963c226e0ad57554262f694880bfda42fc4c8d68c0e44126371756e65d127a59207d4090956cf666958065d4afd32e9c011612abe70797a4ddbac09ad6c51e05bfcc73bd0756ad47484b75b244b2397fb7d357ca3a56a50a8a7aa9ffe98c72b200cedbaa10689727c083fdf0f5d5fc06a2557dcc2d0b1dca70ec513a82fe26b5eb0cce40b13fcb6de9da917d3b76edb90148ae718e24d75bfd1561d3a1586957000a2a7225f8858416de22228c3f616baf210d1efdd13264abb385e277c1aa451858782c94ed0e0ee2d806a85c75388f7951abd24369308bc6ed6cd7b4b7e2ae3f2e3f9a9f5e70155313b8df1da4f5ca9c96851949af9deed590fe70ad4592128e61b72244f408545360fe37fedefdfe44ef1c2665ec6c9c0a525dac9992aa7f95f3c1eb988f3fed8b981436b210d9407b1eca0dba2b3b1177d0a3e027b576498a074be65755683458786865d5021079df56e7515fe98aed2ea12a44f9e8053485a38e374ef6248502df627d2d2b8dd44727a5750a0140d6830c9ef5d18bad95a44b20eba6618a9d062ddbd9c9c2e92d6ca56d1de110e4cf8cfe62f426e6b5b1e257a5e32ee5ed605a2032808a5950b80811d7987a1cb5bdbfe52cd1f43fcddbba4b62d09a57bdce780bfeb78bfe737d71b3b634871a82698f51d39e6a8895d89b63a8223fb1f507709b8a1a333cf84e9f4a996349f772f2acb260f2519b5500063c31df5f6a05681daa827431a05b98bc0d2106d6abfb7382faa10272f48100dd90a3b677ab9185ff98c31d26c76e26cb3bf09cc70f8a615f0703638381107ef7ba060fab2c12db771b92a32b57b232ec2fac3f57a9f827ff8cb1a590aa66a7b502c4f127d43eb11c98eaaa03d42b0180120c4e1c8f1d5c9d59c6bf8fa884ae5187b73be20168d657e8e04dc8ff27aeabb6f607f23d056758c6c8b29fe7c8a8fae06375738f582d1b01b0a6a760666c853921e03ad3ef78db03201c0cfd0c5086e4bce80011437641bcd621a6f0457030381890dbb8212ebaca4580b6b2b35e8940f4687353886c4321ce0f145842972149d53646170df21cd26e2c729c94f959c9bdbe5bcf7c88d0cfd5ec32b3070522135b2eb191cfb01ba28df935dce574f1353ab5f3e4b9de4c89a2fe77aa84fa518963e61fa83658736b6f78d40876ad550bd690fa3824de7518e72008784cac157cd450be481ae86b758b40e9be6a4193a451f1345ffe4c88fec3af838da9aa96d12829de937048047945833dad53c1f542fda4dd5b7ca8f4b29078cf68e800cc1c9572661e12dfa7fac908023f49b2b6f69c4e5d5b715de0c02c9db4b060a8fee131c25efe7d86ce4545aa8fac94eb0f14716fd65f59f2573d814e4799d153782c59c7e941e8c682dfb2a7ad5386eabb5123bef16555285c96a40f439fe02004f75dd6785822146aa515f5f6c90a24efc72d031b347867134e52f986c3549c0b316237db118c3b6efda0c92c008fc15084e4f5856e6047bc1a5a19f7a9595727a769c2d0764d482f20280d860d831f5ef9aba39714afa7f3fe85a3b4cd5715f8ee6e20886c2ad190d60a38bb5d7853e9465c34bac4b03893edeabce14456274eb4aa279c30d381472a0036a4058d863b3987a0d570196fe1c7976b4aabd41ffde6dfc5b468bddcb0f71513fadfe7e0bbd32c409f78f989fb3a9ef55fb57135e16236f3f8558371ea9165bc471a5715aac3d359979daf991fb8f0497ebbae15fe1c628dfff4bbf64c1efc10f6cc4723db30673bc851183faf622d7aa7d40231a0b15816fcf7cdaeee244843f60b47da00676cd166d0853d161b4cbc555c35905e11a768d60bac536b336b5ef69214db80c71962491e87cdf8441e46ba7270c0fa6815bfada79d1a12029b10ccab08e2971c10dd1558e29169fe2f3c65c8a5a569332ff2baa507cc79622af84048c7b1dfb5adc9ef04f5faa166c33decc2629a6744750dc68975ccda21e72098c6b9485c886a9e0c550e200aea2878e028ffdf0f9f20a7480cc88cdb51406c74c059292bd376d9fdd94633f497181d8c468cfc5d9023ea89b96165ff877a87b3caf605da32546a53f6a20b70ad40e94af1c5eee7d3ecb2ed07e5b413643c2df6d27da458fbc140e97c9cafa8dc97cc79dfcc144070a2cd5adb31bf3a786b30baf087b9273dffb5726e55ae6e1bc2fcf356b446bb322acbcfe35753835bc6dc69ea4845a4d0807ec730fd0490ed81b2f8c7e58c07da8f03a432e509adaaeccc9a405c2b111e26062503cff9b1b611deafaccc0cd9f5f28935376d4d377ff3260670ed956c96374a27320d1a1bcc5bb1bb94e5d2e241ed88da7c4064f8412ff03d7b84b31f4b3afb7c26d131e7343adec9f21ee0efc64a3b14599e3e4032f7af8664475dd8bb42b8bcf8b4bb8a61f4f439cbd6521899f3ff4627abd709ffd0d47b04997643b9c4deaf3af1f453ea445bcc0af145b9845af09b2777e93670e3e4eed77700286f73c2220677c67caad086d9cbf27a8a37c175a8a6584ca7bdef91ac60c088e76cb1414653652df9d86ecae52c26681b5e31f70bf5e03f3fd3d70a174b6c5f098e8bc1687f7c770c73a5449718ff4662065d807283264a238dfd787f40eac0bc6e165855bc71946cda2593a09d71fddd693423fef3b2be1ef9f907eaf786cc7446c6585aba758369833c48823c004ca613ff0e55d485794d862b5243d06f669afca436a7624a38a81787ea62ad3b7f1b340be8a21941e4338245078ad2d4b6fc00a35f94f7eb083c706f5d782c09b09008aefc5dc3c52e1db55a343d017db507c663e2033c224c3dcd3cbc97de9f00bab9c78a672406cc153a0add2285524ecd24236645aa4881d35ee9c40cedb787a04917bcceea935317bc16444733f51d4d0111be4eefd94ce4c0db7cd8385d1d180b563bfba7b965b4735f2195dc31009b6fc885eead0050ed80bd21fbdd3a5432f64078c94e338fdc48a19b1714bc5842234647fc0e32cf27ba5977574b552a315e3c7034877cac0dd70be0832856993add1ea79153a120d9e1f6ed5e9e3d41ff9e11953bb10ef9df2f5fa532cb82a41c2791c73e53d81666cf382419295c7741290049688c6bf7e395e3222abfd94c9d423b30ec7213f29a4560f4b356dfaeabef89d897014422872f9675cd65c17547c753d52f6adee0fa796716c923d35ff7f44f3e5e43a01a8d6dbd79381c91bf4bf5b443b03956ee015019d4cf41654214186038c0e4e888b4ca0d6f29544a9043e201d3b482a61eb50cb1500f1e850eb6410058e6fac6e34cb494568071aea1d7dde90575ed9b0c4ff8cf2b2c8621eb85f66064ad659636c0d164abf972de63c3a5b8637f4014af3aaccf7b67098e46900398efed545bda8c174c05d817d43d97e3a082c499b475847ba2f00ca99072f76cd5299c7193e1f4b1eb0e39cbfd46d08b607a14b8291a6d8473f7bd3211e4aa7aa7034a649efca36447b76404ea19e657815506da20d8d2082884bf9cbcb6b5d2653a249e3032eb944d4aeb3a2353f47147e3930c84ada6c37719b2cdb2678946d5a9a9b4e32c6625cbaae6398a6d5c9b2bf6a0a87c493115581f27739badf456de575df11d8a704657a3a7a3f76242b777f42facec24f92427859b3204db98f1df5f977ab1c4d41040ef518dd48dd41a230494084604b088702c342072695a9e67512a7cb9b1465ad5f2b07ed4ef10a85ca60ef5e76995a9967198b1fa7eacdb61874d13942c6c50f017ae5c26dc48a2c1e7dec7a13f9a6893243e3634ec48ed1e9b2a7dfe69e9e49d37cd3eaa2ce1c0f1c3d69dc18161b1d2e6eb731f2f3d110329c8484805630e208b0b7a8a5307f1c1a3127c33c5b6fddb9e03ba2f1b7822c8b5dd82862db0dde8acac1635f793d479f78ec6bf0a13e281abe9297c22f206078395a20564dc0569a9e43471cf8e1a0d14fc82ca4afb9f49e5d443b0cb975ce494820ca05fde153782de00c038ef2f87cbc971e4b8cfd03b0bfa8651a351cc900ef573ce73548f9af5eb5ca84ca3ecc70fca755aab3d3b260a1224eccb82245882483523d3726d01a848c5e0be5f0fe2188a806abb01602fa43316c1e80770e01d8af77e9b34a319bfc5e3413d61aeae160af43149391da10035346add1d49fba8e1a4abedf42fbe1496ecd70cc931f39489c68a4e61b910c9beef2a2f2242249f286dd48253c55ccc59c9d6e3d5f674836addf882b1328987949ac01b57a0e1aff86e57c0dc0302b3b6d8f7c6ff18a58c4f91f70ba952cef5563d882d6369fe156821a7b3bbfff0bb77e76f4cad52801c3bbebc72e850fc26dcf6181c49361e58789a7f6eae4357aeeabe5c962319b2ea6fa3e472680699f71f9bb6760a5569ac69faa4d04c1c1b27461dd9461599af241b7a207437cba94cc29ec43193799571c4aea1c0d009e60d439d924967ae1af82bc57e55e9ca8d281ce372d4143d67400aa70ada015904d6482b7903a07e6410c9761c77c05c29b4f1cabeda2f400e4590bbb80559790cf28d0ac23ef7414d90b127a95c75645bf234085632ab31821e104377d1a837abc04892de3bd87fe833940fd6692ce937f57d534783be367dc296fe0a64d3a14a38e3ba7609be1987bf7799aef2286f2841eaebc43fb41db4cf0a4efbe1f0468a9b3400696aee552cd4b32aa308658ee5db2e9717ad5eb17b496483c3208108db08a1674a200e0bda31d4ac60356b89e15b6819dad4b9ebcf8f6df6d1945051b2450d55924a4a844df7722904b7b2cec80550c240cc4c1c1c44c620defd7aa0758d80346d534ca08d91f48ff89d601aeeba50f3682aa64c439d04cc245c6a214c6c29dc1c62049c0831b2ee60d9ab3d65fe5c9acecacf318d5a8397ea70075a5114119a1662c6f650d8bbea67f64080831f177ad5456250c496c5d4fb1bca770da4b815c6b5428d490c9e7afe7931d8dcded7097be5abb99c722a13ab0a0d45a8fdd8bf91a9316d4d88b6c848438274a1806d4d979452b9c169642287a221e783be2ec2f78e70a8b13d96959c5c9a000f488a5f2f8cac12f4554287acf6cec15b3fa5057aeca3d234e6265d0575530b8f6fa26182a1c0efbad29f2c6d3c396e3d98335fe0d9ed5e781e2164017ae71e4708829582f6b34899b51919dcc0b6a3893fecc00fee1fcd3957038393c64d76c751839851b6896af8062c73fda7e0b7c8d979ac8a8b435837b240e93f8d6303196c07df5327b86d48722b56beacf6c764ab1c36e0e3637f55a8d4a40c223bb1a614b2", @nested={0xd9, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x120}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r6}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee066545976ea2fe8", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$netlink(0x10, 0x3, 0x0) 6.605252782s ago: executing program 0 (id=2130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltclass={0x98, 0x29, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x1, 0x4}, {0xc, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x8}}, @TCA_RATE={0x0, 0x5, {0xff, 0x2}}, @TCA_RATE={0x0, 0x5, {0xff}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_mqprio={0x2e}]}, 0xfb}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000100)={0xe, {0xab, 0x829, 0xfc8, 0xb}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d3, &(0x7f0000000100)) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r5 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, 0x0, &(0x7f0000000500)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.560374724s ago: executing program 1 (id=2131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = inotify_init() openat$autofs(0xffffffffffffff9c, 0x0, 0x40002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x4008000) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x165840, 0x2) mknod$loop(0x0, 0x0, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x9, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 5.387458973s ago: executing program 1 (id=2132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) kcmp(r0, r0, 0x5, 0xffffffffffffffff, r3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 5.12175899s ago: executing program 2 (id=2133): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800012, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca593d94ff0175f5badbe0034e20162", @ANYRESOCT, @ANYRES16, @ANYRES8], 0x1, 0x1d2, &(0x7f0000000580)="$eJzslU9rE0EYxn+zO2kSzaFnrxbbi7bZgvgN7AfwAxjStRYT/3QDmlAweunFg/glCn4KD4LePYgIXupBQQ8VTxWJzM474ywNRMVQCvPA8j7vM++fmVlm5mZxr6gDPw93uyxSQtHivVJoYFlZ7WjB2m9iJ4JP2vpt0Z+L/Si2GI7ePLF0dKvT6+U7xXAGUQpmxVTIcUn/cbMp5PXjqqL4tzrzJ4PU7uzxoacVpT4tRnI58VXMg3xvQah8/t8tasx7FeCVH63Zv+ndM/s7p8akkt6kui2njyR/lVUg11dx9VHC19J5e7jbNeS63GJG27SfOxJljHFeBjHnNIxBpUx8HV3elrAMrA76d1eL4ejidr+zlW/lt7Ns/fLaq7NyRCcPYbuXr6lgGokhGg9zTpvBeA348Ht8TAAVTM3gDCiX61Lc5bxyPkhsQhLkhjUMGrzw/euipfS5xgUawP2xGc6wu7WEqaa5YZa2gSIVp62DecIRCY1y4FL3Tm9zD4VyaftoX6N9QM07mTimUb5+xS9/T+yS2A2x+2IPxLq3y71JuqzwRbyVMSzwoDMY7JSPl2Vey7yWLfrOiXR1r6FyM6kTEREREREREXFK8CsAAP//TTFPEQ==") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)={0x2, 0xa, 0x7, 0x7, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa965}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x60040, 0x30, 0x21}, 0x18) r11 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r11, 0x4054561e, &(0x7f0000000600)={0x0, "126ebf7d9fdf9aec84c0fe4cb734f282d46938152a71b9399c8d590c79cfaf41", 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r13, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r14 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r14, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) close(0x3) 5.070672351s ago: executing program 5 (id=2134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000009c0)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xc}}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x532, &(0x7f0000000480)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0f20c035080000000f22c09a0a00000026000f06b8090000000f23c80f21f8350c0000000f23f80f01c80f20e00f22e064f36cc4e129fd4900f30fc776002e360f30", 0x42}], 0x1, 0x43, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 5.037155582s ago: executing program 0 (id=2135): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a331800009c1100fe8000000000000001000000000000aaff0200000000000000000000000000014e1d4e20"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000480)=0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000080)=' P\xccs|\xe2', 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/drivers/usb_phy_generic/bind\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='pcspkr\x00', 0x6) 3.984307389s ago: executing program 1 (id=2136): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="f73d0b06c80067"], 0xe) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x42) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f00000004c0)="64400f01c5410f01cb66b873000f00d0f3f0450fc74935b9800000c00f3235001000000f30c7442400e2000000c744240203000000ff2c240f01f866baf80cb8aac4d78bef66bafc0c66b80f0066efc401f96e2766ba610066ed", 0x5a}], 0x1, 0x4, &(0x7f0000000580), 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20044091) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000400000000000000000000090a012400000000000000000a00000480d4f67baf9e2c8226c515460011"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f0000001600)=0x80000, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{0x0}], 0x1) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x4}) 3.984098289s ago: executing program 3 (id=2137): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES8=r0], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000580)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}, {"f96e"}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) 3.798125834s ago: executing program 0 (id=2138): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mq_open(0x0, 0x2, 0x48, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0x8d71ca88fffffffd, 0x0) mount$overlay(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000), 0x880, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './cgroup.cpu/cgroup.procs'}}]}) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x4, 0x80007, 0x9, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) 2.674596602s ago: executing program 2 (id=2139): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, &(0x7f0000000840)={0x9, 0x401}, &(0x7f0000000880)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000000240)="ab", 0x1, 0x400c804, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000008c0)={0x5}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x8000200, 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f00000007c0)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.153472265s ago: executing program 3 (id=2140): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x5c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, 0x0, &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(0x0, r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$netlink(0x10, 0x3, 0x0) 2.094752347s ago: executing program 0 (id=2141): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @mcast2, 0x7}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x100000, @mcast2, 0x3}, 0x1c) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 967.176475ms ago: executing program 0 (id=2142): fsopen(&(0x7f0000000280)='ufs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x100}], 0x1, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x25ca03) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x88282, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x4000000012, 0x80000003}, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000400), 0x0, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000180)='vuto_da_alloc', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 670.418343ms ago: executing program 1 (id=2143): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = open(0x0, 0x466040, 0x1a0) migrate_pages(r3, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r4) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x802, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x888) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x8040010) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5000000}, 0x0) 639.706454ms ago: executing program 2 (id=2144): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x64}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, r4, r5}}, [@algo_auth={0x11b, 0x1, {{'blake2s-128-x86\x00'}, 0x698, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e05"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x11f4, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="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", @nested={0xd9, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x120}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r6}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee066545976ea2fe8", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$netlink(0x10, 0x3, 0x0) 231.760264ms ago: executing program 3 (id=2145): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000300)='01234', 0x5) close(r0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r2 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r2, &(0x7f00000006c0)='1843', 0x4) close(r2) r3 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) write(r3, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') unlink(0x0) 0s ago: executing program 2 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) kcmp(r0, r0, 0x5, 0xffffffffffffffff, r3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) kernel console output (not intermixed with test programs): le. Can't mount rw! [ 158.923162][ T4232] usb 5-1: Using ep0 maxpacket: 16 [ 159.123820][ T4232] usb 5-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 159.165671][ T4232] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.195444][ T5275] loop3: detected capacity change from 0 to 1024 [ 159.208649][ T5277] loop1: detected capacity change from 0 to 64 [ 159.312537][ T5275] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.363611][ T4232] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.376900][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.385528][ T4232] usb 5-1: Product: syz [ 159.389789][ T4232] usb 5-1: Manufacturer: syz [ 159.394717][ T4232] usb 5-1: SerialNumber: syz [ 159.611912][ T5275] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 159.641606][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.214355][ T4232] usb 5-1: 0:2 : does not exist [ 160.496250][ T4232] usb 5-1: USB disconnect, device number 2 [ 160.907913][ T5296] netlink: 'syz.3.245': attribute type 29 has an invalid length. [ 161.506047][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.534491][ T5307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.254'. [ 165.539509][ T5342] syz.3.263 uses obsolete (PF_INET,SOCK_PACKET) [ 166.082059][ T5348] device syzkaller0 entered promiscuous mode [ 167.824547][ T5364] loop1: detected capacity change from 0 to 512 [ 167.875410][ T5361] hugetlbfs: syz.0.268 (5361): Using mlock ulimits for SHM_HUGETLB is deprecated [ 168.050525][ T5364] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 168.067401][ T5364] UDF-fs: Scanning with blocksize 512 failed [ 169.418463][ T5364] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 169.790856][ T5376] binder: BINDER_SET_CONTEXT_MGR already set [ 169.797168][ T5376] binder: 5365:5376 ioctl 4018620d 200000004a80 returned -16 [ 169.869082][ T5364] UDF-fs: Scanning with blocksize 1024 failed [ 169.986070][ T5364] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 170.191216][ T5364] UDF-fs: Scanning with blocksize 2048 failed [ 170.201091][ T5384] tmpfs: Unknown parameter 'fscontext' [ 171.120867][ T5364] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 171.456140][ T5364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.669703][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.700753][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.718331][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.731759][ T5445] device bridge_slave_0 left promiscuous mode [ 174.741312][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.785037][ T5446] loop3: detected capacity change from 0 to 8192 [ 174.909316][ T5445] device bridge_slave_1 left promiscuous mode [ 174.944888][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.673280][ T5445] bond0: (slave bond_slave_0): Releasing backup interface [ 175.831137][ T5445] bond0: (slave bond_slave_1): Releasing backup interface [ 176.108546][ T5462] capability: warning: `syz.0.290' uses 32-bit capabilities (legacy support in use) [ 178.562995][ T5445] team0: Port device team_slave_0 removed [ 179.176344][ T5476] loop3: detected capacity change from 0 to 256 [ 179.585090][ T5445] team0: Port device team_slave_1 removed [ 179.591624][ T5445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.603047][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.714363][ T5445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.721789][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.569639][ T5494] loop1: detected capacity change from 0 to 8192 [ 183.884383][ T5504] loop4: detected capacity change from 0 to 2048 [ 183.976118][ T5504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.566373][ T5509] team0: Port device wg0 added [ 186.155679][ T5526] device vlan0 entered promiscuous mode [ 186.701402][ T5527] loop0: detected capacity change from 0 to 512 [ 187.427377][ T5532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.313'. [ 190.262744][ T5527] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.309: bg 0: block 473: padding at end of block bitmap is not set [ 190.302916][ T5527] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 190.388832][ T5527] EXT4-fs (loop0): 1 orphan inode deleted [ 190.410876][ T5527] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.458882][ T5527] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.649952][ T5558] loop4: detected capacity change from 0 to 8192 [ 191.093455][ T4870] Bluetooth: hci2: command 0x0406 tx timeout [ 191.099645][ T4870] Bluetooth: hci1: command 0x0406 tx timeout [ 191.109611][ T4870] Bluetooth: hci4: command 0x0406 tx timeout [ 192.164922][ T4965] Bluetooth: hci0: command 0x0406 tx timeout [ 193.786169][ T4866] Bluetooth: hci4: command 0x0405 tx timeout [ 194.139845][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.146466][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.416792][ T5602] ODEBUG: Out of memory. ODEBUG disabled [ 197.475086][ T5602] syz.3.318 (5602): drop_caches: 2 [ 198.164802][ T5615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.329'. [ 200.313080][ T5619] loop3: detected capacity change from 0 to 128 [ 200.395745][ T5625] loop1: detected capacity change from 0 to 2048 [ 200.537681][ T5619] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 200.555604][ T4178] udevd[4178]: incorrect ext4 checksum on /dev/loop3 [ 201.455118][ T5631] device syzkaller0 entered promiscuous mode [ 203.010956][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.027547][ T5650] loop1: detected capacity change from 0 to 128 [ 204.045083][ T5641] bond1: (slave bond0): Releasing backup interface [ 204.081881][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.086858][ T5650] UDF-fs: bad mount option "18446744073709551615" or missing value [ 204.094161][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.110934][ T5641] bond0: (slave bond_slave_0): Releasing backup interface [ 204.409971][ T5641] bond0: (slave bond_slave_1): Releasing backup interface [ 204.934264][ T5658] loop4: detected capacity change from 0 to 1024 [ 204.960702][ T5658] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 205.025110][ T5658] EXT4-fs (loop4): invalid journal inode [ 205.030917][ T5658] EXT4-fs (loop4): can't get journal size [ 205.044055][ T5658] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 205.160108][ T5641] team0: Port device team_slave_0 removed [ 205.200316][ T5641] team0: Port device team_slave_1 removed [ 205.380886][ T5641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.419073][ T5641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.692012][ T5641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.710068][ T5641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.773446][ T5641] team0: Port device bridge1 removed [ 207.661182][ T5695] device syzkaller0 entered promiscuous mode [ 207.750322][ T5695] tipc: Started in network mode [ 207.755907][ T5695] tipc: Node identity 5ee12ded142c, cluster identity 4711 [ 207.770999][ T5695] tipc: Enabled bearer , priority 0 [ 208.013092][ T5695] tipc: Resetting bearer [ 208.049556][ T5694] tipc: Resetting bearer [ 208.130042][ T5694] tipc: Disabling bearer [ 208.287017][ T5704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.355'. [ 209.327204][ T5715] device syzkaller0 entered promiscuous mode [ 210.488777][ T5724] syz.0.349 (5724): drop_caches: 2 [ 211.368108][ T5736] device syzkaller0 entered promiscuous mode [ 211.802902][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 212.608131][ T5744] ksmbd: Unknown IPC event: 3, ignore. [ 212.863300][ T5748] loop1: detected capacity change from 0 to 32768 [ 213.663058][ T4232] usb 1-1: Dual-Role OTG device on HNP port [ 213.693211][ T4232] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 213.742818][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.781453][ T5757] netlink: 'syz.0.369': attribute type 4 has an invalid length. [ 213.797890][ T5748] XFS (loop1): Mounting V5 Filesystem [ 214.988464][ T4232] gspca_main: spca501-2.14.0 probing 0000:0000 [ 215.022973][ T4232] gspca_spca501: reg write: error -32 [ 215.028475][ T4232] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 215.036271][ T4232] spca501: probe of 1-1:1.0 failed with error -22 [ 215.097790][ T5748] XFS (loop1): Ending clean mount [ 215.114505][ T5748] XFS (loop1): Quotacheck needed: Please wait. [ 215.276165][ T5748] XFS (loop1): Quotacheck: Done. [ 215.531600][ T5773] loop3: detected capacity change from 0 to 8192 [ 216.169363][ T4187] XFS (loop1): Unmounting Filesystem [ 217.457281][ T5797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.376'. [ 219.412738][ T5806] fuse: Unknown parameter '0x0000000000000004' [ 219.743885][ T5813] netlink: 32 bytes leftover after parsing attributes in process `syz.4.384'. [ 220.495149][ T5815] loop4: detected capacity change from 0 to 512 [ 220.592956][ T5815] EXT4-fs (loop4): Ignoring removed nobh option [ 220.633412][ T5815] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.766260][ T5815] EXT4-fs (loop4): 1 truncate cleaned up [ 220.798448][ T5815] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 223.466253][ T5841] netlink: 'syz.4.390': attribute type 4 has an invalid length. [ 224.464555][ T5848] loop1: detected capacity change from 0 to 8 [ 226.911080][ T5867] loop4: detected capacity change from 0 to 32768 [ 228.249014][ T5868] device syzkaller0 entered promiscuous mode [ 228.260579][ T5867] XFS (loop4): Mounting V5 Filesystem [ 228.388841][ T5867] XFS (loop4): Ending clean mount [ 228.409848][ T5867] XFS (loop4): Quotacheck needed: Please wait. [ 228.495637][ T5867] XFS (loop4): Quotacheck: Done. [ 229.096001][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 229.096019][ T26] audit: type=1800 audit(1785767954.098:120): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.401" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 229.304559][ T4186] XFS (loop4): Unmounting Filesystem [ 229.360182][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 229.581202][ T5902] team0: Port device team_slave_0 removed [ 229.654798][ T5906] ubi0: attaching mtd0 [ 229.668200][ T5906] ubi0: scanning is finished [ 229.673037][ T5906] ubi0: empty MTD device detected [ 230.070004][ T5906] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 230.077624][ T5906] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 230.084931][ T5906] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 230.092410][ T5906] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 230.100016][ T5906] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 230.106869][ T5906] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 230.114940][ T5906] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1328296241 [ 230.124995][ T5906] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 230.137041][ T5907] ubi0: background thread "ubi_bgt0d" started, PID 5907 [ 232.058107][ T5927] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 236.475058][ T5967] loop0: detected capacity change from 0 to 1024 [ 236.488162][ T5971] device syzkaller0 entered promiscuous mode [ 236.775299][ T5979] CIFS: Attempting to mount \\127.0.0.1\share [ 236.809153][ T5979] CIFS: VFS: Error connecting to socket. Aborting operation. [ 236.861517][ T5979] CIFS: VFS: cifs_mount failed w/return code = -4 [ 237.045828][ T5981] loop0: detected capacity change from 0 to 8192 [ 239.278770][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 240.311268][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 240.324103][ T4965] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 240.958331][ T6015] tmpfs: Bad value for 'mpol' [ 241.348991][ T6012] binder: 6011:6012 ioctl c00c6211 0 returned -22 [ 242.593190][ T6024] device syzkaller0 entered promiscuous mode [ 242.692300][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 245.016995][ T6057] loop4: detected capacity change from 0 to 32768 [ 245.889215][ T6057] XFS (loop4): Mounting V5 Filesystem [ 246.047592][ T6084] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 246.469351][ T6057] XFS (loop4): Ending clean mount [ 246.501120][ T6057] XFS (loop4): Quotacheck needed: Please wait. [ 246.779360][ T6057] XFS (loop4): Quotacheck: Done. [ 246.890992][ T6087] loop3: detected capacity change from 0 to 256 [ 247.184647][ T26] audit: type=1800 audit(1785767972.218:121): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.447" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 247.264232][ T6075] loop0: detected capacity change from 0 to 8192 [ 247.272855][ T6087] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.389590][ T6087] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 247.467167][ T6087] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 247.708918][ T4186] XFS (loop4): Unmounting Filesystem [ 247.965464][ T26] audit: type=1800 audit(1785767973.008:122): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.454" name="file1" dev="loop3" ino=1048599 res=0 errno=0 [ 248.711347][ T6106] device syzkaller0 entered promiscuous mode [ 251.314521][ T6131] loop3: detected capacity change from 0 to 16 [ 251.435128][ T6134] netlink: 'syz.4.467': attribute type 4 has an invalid length. [ 251.517170][ T6131] erofs: (device loop3): mounted with root inode @ nid 36. [ 253.405775][ T6145] netlink: 'syz.4.470': attribute type 4 has an invalid length. [ 254.915853][ T6162] device syzkaller0 entered promiscuous mode [ 256.544195][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.550559][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.624637][ T6173] tipc: Started in network mode [ 256.629623][ T6173] tipc: Node identity 4, cluster identity 4711 [ 256.635867][ T6173] tipc: Node number set to 4 [ 257.653175][ T6177] netlink: 'syz.3.480': attribute type 4 has an invalid length. [ 257.753033][ T6179] ipt_REJECT: ECHOREPLY no longer supported. [ 257.767964][ T6179] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.098715][ T4863] Bluetooth: hci0: command 0x0401 tx timeout [ 261.655619][ T6207] loop1: detected capacity change from 0 to 32768 [ 262.606521][ T6217] loop3: detected capacity change from 0 to 8 [ 263.343321][ T6214] SQUASHFS error: Unable to read directory block [631:26] [ 263.372722][ T6207] XFS (loop1): Mounting V5 Filesystem [ 263.428663][ T6207] XFS (loop1): Ending clean mount [ 263.446091][ T6207] XFS (loop1): Quotacheck needed: Please wait. [ 263.501308][ T6207] XFS (loop1): Quotacheck: Done. [ 264.089617][ T26] audit: type=1800 audit(1785767988.878:123): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.487" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 264.483657][ T6237] misc userio: Invalid payload size [ 264.499044][ T6237] netlink: 120 bytes leftover after parsing attributes in process `syz.4.478'. [ 264.912320][ T6234] loop0: detected capacity change from 0 to 8192 [ 265.675336][ T4187] XFS (loop1): Unmounting Filesystem [ 269.273347][ T6278] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 271.199330][ T4869] Process accounting resumed [ 271.589524][ T6297] using random self ethernet address [ 271.595425][ T6297] using random host ethernet address [ 271.636922][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.646195][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.653694][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.785535][ T6281] Process accounting resumed [ 276.388042][ T6332] loop1: detected capacity change from 0 to 512 [ 276.917789][ T6332] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.518: missing EA_INODE flag [ 277.043252][ T6332] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.518: error while reading EA inode 12 err=-117 [ 277.125151][ T6332] EXT4-fs (loop1): 1 orphan inode deleted [ 277.133139][ T6332] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 278.877872][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 280.127068][ T6365] loop4: detected capacity change from 0 to 128 [ 283.158852][ T6394] Mass Storage Function, version: 2009/09/11 [ 283.166405][ T6394] LUN: removable file: (no medium) [ 283.183724][ T6394] LUN: removable file: (no medium) [ 284.139597][ T6400] loop0: detected capacity change from 0 to 1024 [ 284.238153][ T6400] EXT4-fs (loop0): Invalid want_extra_isize 7 [ 285.202472][ T6410] fuse: Bad value for 'fd' [ 286.279678][ T6410] block device autoloading is deprecated and will be removed. [ 286.395050][ T6419] netlink: 'syz.4.543': attribute type 4 has an invalid length. [ 286.427026][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 286.457629][ T6422] netlink: 'syz.3.542': attribute type 4 has an invalid length. [ 286.642566][ T6428] loop1: detected capacity change from 0 to 128 [ 286.660538][ T6420] loop0: detected capacity change from 0 to 8192 [ 288.513535][ T6438] loop3: detected capacity change from 0 to 128 [ 288.604024][ T6438] UDF-fs: bad mount option "18446744073709551615" or missing value [ 290.761877][ T6461] loop1: detected capacity change from 0 to 1024 [ 291.582900][ T6461] EXT4-fs (loop1): Invalid want_extra_isize 7 [ 291.788645][ T6481] netlink: 'syz.4.558': attribute type 4 has an invalid length. [ 292.149049][ T6470] loop0: detected capacity change from 0 to 8192 [ 292.593113][ T6492] loop3: detected capacity change from 0 to 128 [ 293.338290][ T6497] tipc: Enabled bearer , priority 0 [ 293.346379][ T6497] device syzkaller0 entered promiscuous mode [ 293.413039][ T6497] tipc: Resetting bearer [ 293.440264][ T6489] tipc: Resetting bearer [ 293.624924][ T6489] tipc: Disabling bearer [ 298.511660][ T6538] loop1: detected capacity change from 0 to 8192 [ 298.906060][ T6553] loop3: detected capacity change from 0 to 1024 [ 299.112873][ T6553] EXT4-fs (loop3): Invalid want_extra_isize 7 [ 300.087403][ T6565] loop3: detected capacity change from 0 to 1024 [ 300.112274][ T6563] loop1: detected capacity change from 0 to 1024 [ 300.161004][ T6559] loop0: detected capacity change from 0 to 8192 [ 300.171781][ T6565] EXT4-fs (loop3): Invalid want_extra_isize 7 [ 300.194090][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 300.206312][ T6561] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.215506][ T6561] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.224240][ T6561] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.233743][ T6561] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.249529][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 300.259394][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 300.387637][ T6563] EXT4-fs (loop1): Invalid want_extra_isize 7 [ 301.653410][ T6579] overlayfs: missing 'lowerdir' [ 301.752902][ T6571] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 301.762070][ T6571] FAT-fs (loop0): Filesystem has been set read-only [ 302.579354][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.586'. [ 303.343707][ T6592] tipc: Enabled bearer , priority 0 [ 303.415059][ T6592] device syzkaller0 entered promiscuous mode [ 303.456531][ T6596] loop1: detected capacity change from 0 to 8192 [ 303.517492][ T6592] tipc: Resetting bearer [ 303.526596][ T6605] overlayfs: failed to clone upperpath [ 304.379522][ T6591] tipc: Resetting bearer [ 304.428009][ T6591] tipc: Disabling bearer [ 304.827801][ T6618] loop4: detected capacity change from 0 to 8192 [ 305.144855][ T6637] loop1: detected capacity change from 0 to 8 [ 305.975626][ T6625] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 306.154350][ T6637] SQUASHFS error: xz decompression failed, data probably corrupt [ 306.162591][ T6637] SQUASHFS error: Failed to read block 0x108: -5 [ 306.168981][ T6637] SQUASHFS error: Unable to read metadata cache entry [106] [ 306.176854][ T6637] SQUASHFS error: Unable to read inode 0x11f [ 306.983440][ T6658] ksmbd: Unknown IPC event: 3, ignore. [ 308.204645][ T6646] team0: Device wg0 is of different type [ 309.029376][ T6646] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 310.042419][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 311.446738][ T6672] loop0: detected capacity change from 0 to 8192 [ 311.502834][ T4874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 311.975039][ T6685] loop1: detected capacity change from 0 to 8192 [ 312.113554][ T4874] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 312.174161][ T4874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.232627][ T4874] usb 4-1: Product: syz [ 312.255226][ T4874] usb 4-1: Manufacturer: syz [ 312.278652][ T4874] usb 4-1: SerialNumber: syz [ 312.710032][ T4874] usb 4-1: config 0 descriptor?? [ 312.860396][ T6702] loop4: detected capacity change from 0 to 64 [ 313.474977][ T4874] usb 4-1: USB disconnect, device number 3 [ 313.504896][ T26] audit: type=1800 audit(1785768038.558:124): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.613" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 314.066811][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.776540][ T4186] hfs: node 4:3 still has 1 user(s)! [ 315.094120][ T6731] loop1: detected capacity change from 0 to 128 [ 316.049566][ T6731] EXT4-fs (loop1): quotafile must be on filesystem root [ 316.344189][ T6742] loop3: detected capacity change from 0 to 8192 [ 316.573039][ T6746] loop4: detected capacity change from 0 to 8192 [ 317.464880][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.473746][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.275550][ T6790] loop1: detected capacity change from 0 to 16 [ 322.077143][ T6790] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 322.095434][ T6787] device wlan0 entered promiscuous mode [ 322.964294][ T6787] batman_adv: batadv0: Adding interface: wlan0 [ 322.970720][ T6787] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.124990][ T6787] batman_adv: batadv0: Interface activated: wlan0 [ 324.633754][ T6820] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 324.733193][ T26] audit: type=1326 audit(1785768049.658:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.3.642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 325.607162][ T26] audit: type=1326 audit(1785768049.668:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.3.642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 325.633191][ T4260] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 325.650235][ T26] audit: type=1326 audit(1785768049.668:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.3.642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 325.718612][ T26] audit: type=1326 audit(1785768049.668:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.3.642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 325.817872][ T26] audit: type=1326 audit(1785768049.668:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.3.642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 326.659803][ T26] audit: type=1326 audit(1785768049.668:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.3.642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 326.684011][ T26] audit: type=1326 audit(1785768049.668:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.3.642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 326.709947][ T6827] loop1: detected capacity change from 0 to 8192 [ 326.730074][ T26] audit: type=1326 audit(1785768049.668:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.3.642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 326.787631][ T26] audit: type=1326 audit(1785768049.668:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.3.642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 326.792892][ T4260] usb 5-1: Using ep0 maxpacket: 32 [ 326.813905][ T26] audit: type=1326 audit(1785768049.668:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.3.642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f173450d84e code=0x7ffc0000 [ 327.109750][ T6836] loop0: detected capacity change from 0 to 512 [ 328.200549][ T6836] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 328.237661][ T6836] EXT4-fs (loop0): Ignoring removed orlov option [ 328.244402][ T6836] EXT4-fs (loop0): DAX unsupported by block device. [ 328.258275][ T4260] usb 5-1: unable to read config index 0 descriptor/all [ 328.269535][ T4260] usb 5-1: can't read configurations, error -71 [ 330.112119][ T6881] device veth1_macvtap left promiscuous mode [ 333.321264][ T6907] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 334.154847][ T6914] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 335.164010][ T6923] netlink: 'syz.0.675': attribute type 4 has an invalid length. [ 338.128952][ T6967] loop1: detected capacity change from 0 to 256 [ 338.777119][ T6967] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.821730][ T6967] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 338.947250][ T6978] overlayfs: failed to clone upperpath [ 339.877674][ T6967] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 341.394399][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 341.394415][ T26] audit: type=1800 audit(1785768066.048:147): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.684" name="file1" dev="loop1" ino=1048642 res=0 errno=0 [ 341.529813][ T6987] netlink: 'syz.3.688': attribute type 4 has an invalid length. [ 344.063462][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 344.887378][ T7031] ubi: mtd0 is already attached to ubi0 [ 345.109810][ T7041] loop1: detected capacity change from 0 to 256 [ 345.194836][ T7041] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 347.069182][ T7056] ksmbd: Unknown IPC event: 3, ignore. [ 351.296499][ T7077] loop1: detected capacity change from 0 to 512 [ 351.518681][ T7077] EXT4-fs error (device loop1): ext4_fill_super:4872: inode #2: comm syz.1.711: inode has both inline data and extents flags [ 351.569136][ T7077] EXT4-fs (loop1): get root inode failed [ 351.595957][ T7077] EXT4-fs (loop1): mount failed [ 351.695628][ T7091] device syzkaller0 entered promiscuous mode [ 351.754728][ T7077] fuse: Unknown parameter '0x0000000000000005' [ 352.729157][ T7103] netlink: 'syz.0.716': attribute type 4 has an invalid length. [ 354.168511][ T7125] loop4: detected capacity change from 0 to 8 [ 355.149689][ T7125] SQUASHFS error: xz decompression failed, data probably corrupt [ 355.194426][ T7125] SQUASHFS error: Failed to read block 0x108: -5 [ 355.259166][ T7125] SQUASHFS error: Unable to read metadata cache entry [106] [ 355.362680][ T7125] SQUASHFS error: Unable to read inode 0x11f [ 355.725102][ T7153] Device name cannot be null; rc = [-22] [ 355.754317][ T7153] overlayfs: overlapping lowerdir path [ 355.795605][ T7155] overlayfs: overlapping lowerdir path [ 356.158023][ T7167] netlink: 'syz.3.735': attribute type 4 has an invalid length. [ 356.182373][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.226843][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 356.245442][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 356.307866][ T7175] overlayfs: conflicting lowerdir path [ 357.096757][ T7166] team0: Port device wg0 removed [ 359.208459][ T7194] misc userio: Invalid payload size [ 359.243174][ T7194] netlink: 120 bytes leftover after parsing attributes in process `syz.0.740'. [ 360.504299][ T7213] loop3: detected capacity change from 0 to 512 [ 360.531046][ T7211] device syzkaller0 entered promiscuous mode [ 360.562261][ T7213] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.746: missing EA_INODE flag [ 360.592845][ T7213] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.746: error while reading EA inode 12 err=-117 [ 360.650777][ T7213] EXT4-fs (loop3): 1 orphan inode deleted [ 360.660799][ T7213] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 361.983012][ T7235] loop1: detected capacity change from 0 to 8 [ 362.467483][ T7241] hub 8-0:1.0: USB hub found [ 362.476316][ T7241] hub 8-0:1.0: 1 port detected [ 362.566806][ T7235] SQUASHFS error: xz decompression failed, data probably corrupt [ 362.574634][ T7235] SQUASHFS error: Failed to read block 0x108: -5 [ 362.580974][ T7235] SQUASHFS error: Unable to read metadata cache entry [106] [ 362.588322][ T7235] SQUASHFS error: Unable to read inode 0x11f [ 364.365025][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 365.450260][ T7261] team0: Device wg0 is of different type [ 366.189982][ T7261] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 366.640789][ T7279] loop4: detected capacity change from 0 to 512 [ 366.861482][ T7279] EXT4-fs error (device loop4): ext4_fill_super:4872: inode #2: comm syz.4.764: inode has both inline data and extents flags [ 366.898069][ T7279] EXT4-fs (loop4): get root inode failed [ 366.904979][ T7279] EXT4-fs (loop4): mount failed [ 367.033317][ T7279] fuse: Unknown parameter '0x0000000000000005' [ 369.409797][ T7299] loop1: detected capacity change from 0 to 1024 [ 369.616565][ T7299] EXT4-fs (loop1): Invalid want_extra_isize 7 [ 369.649142][ T7301] loop4: detected capacity change from 0 to 512 [ 369.859909][ T7301] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.769: missing EA_INODE flag [ 370.159201][ T7301] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.769: error while reading EA inode 12 err=-117 [ 370.489318][ T7315] loop3: detected capacity change from 0 to 512 [ 370.496570][ T7301] EXT4-fs (loop4): 1 orphan inode deleted [ 370.502336][ T7301] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 370.786735][ T7318] batman_adv: batadv0: Adding interface: macvtap1 [ 370.794565][ T7318] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.820022][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.939888][ T7315] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.772: iget: bad i_size value: 38620345925642 [ 371.560515][ T7318] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 371.593988][ T7315] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.772: couldn't read orphan inode 15 (err -117) [ 371.645692][ T7315] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 371.772366][ T7327] batman_adv: batadv0: Removing interface: macvtap1 [ 371.836197][ T7315] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.772: bg 0: block 5: invalid block bitmap [ 372.065395][ T7315] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 720 with error 28 [ 372.083701][ T7315] EXT4-fs (loop3): This should not happen!! Data will be lost [ 372.083701][ T7315] [ 372.096200][ T7315] EXT4-fs (loop3): Total free blocks count 0 [ 372.102637][ T7315] EXT4-fs (loop3): Free/Dirty block details [ 372.478605][ T7315] EXT4-fs (loop3): free_blocks=0 [ 372.506727][ T7315] EXT4-fs (loop3): dirty_blocks=724 [ 372.685878][ T7315] EXT4-fs (loop3): Block reservation details [ 372.789903][ T7315] EXT4-fs (loop3): i_reserved_data_blocks=724 [ 373.050537][ T7343] device wlan0 entered promiscuous mode [ 373.088063][ T7346] fuse: Unknown parameter '0x0000000000000004' [ 373.097896][ T7343] batman_adv: batadv0: Adding interface: wlan0 [ 373.109069][ T7343] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.307980][ T7343] batman_adv: batadv0: Interface activated: wlan0 [ 376.441611][ T7367] loop1: detected capacity change from 0 to 2048 [ 377.614865][ T7364] device veth1_macvtap left promiscuous mode [ 378.565497][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.571863][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.958464][ T7400] netlink: 'syz.3.795': attribute type 4 has an invalid length. [ 382.438384][ T7407] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 385.265849][ T7421] loop1: detected capacity change from 0 to 8 [ 385.873999][ T7421] SQUASHFS error: xz decompression failed, data probably corrupt [ 385.881905][ T7421] SQUASHFS error: Failed to read block 0x108: -5 [ 385.888425][ T7421] SQUASHFS error: Unable to read metadata cache entry [106] [ 385.896358][ T7421] SQUASHFS error: Unable to read inode 0x11f [ 387.873473][ T7439] device wlan0 entered promiscuous mode [ 388.034006][ T7441] netlink: 'syz.1.806': attribute type 5 has an invalid length. [ 388.078480][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 388.087781][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 388.119655][ T7441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.770876][ T7472] Device name cannot be null; rc = [-22] [ 390.787022][ T7472] overlayfs: overlapping lowerdir path [ 390.805796][ T7472] overlayfs: overlapping lowerdir path [ 391.637359][ T7469] batman_adv: batadv0: Adding interface: macvtap1 [ 391.854693][ T7469] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.064335][ T7469] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 394.266785][ T7500] loop4: detected capacity change from 0 to 8 [ 395.967413][ T7500] SQUASHFS error: xz decompression failed, data probably corrupt [ 395.975585][ T7500] SQUASHFS error: Failed to read block 0x108: -5 [ 395.982041][ T7500] SQUASHFS error: Unable to read metadata cache entry [106] [ 395.989507][ T7500] SQUASHFS error: Unable to read inode 0x11f [ 398.214474][ T7518] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 398.955177][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 398.965347][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 398.972845][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.982926][ T146] Workqueue: hci4 hci_rx_work [ 398.987670][ T146] Call Trace: [ 398.990975][ T146] [ 398.993929][ T146] dump_stack_lvl+0x188/0x250 [ 398.998645][ T146] ? show_regs_print_info+0x20/0x20 [ 399.003877][ T146] ? load_image+0x410/0x410 [ 399.008432][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 399.013683][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 399.018405][ T146] ? kthread+0x42e/0x520 [ 399.022673][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 399.027903][ T146] kobject_add_internal+0x5ba/0xcd0 [ 399.033153][ T146] kobject_add+0x160/0x230 [ 399.037608][ T146] ? kobject_init+0x1c0/0x1c0 [ 399.042323][ T146] ? __raw_spin_lock_init+0x41/0x100 [ 399.047636][ T146] ? klist_children_get+0x50/0x50 [ 399.052685][ T146] ? get_device_parent+0x121/0x3e0 [ 399.057838][ T146] device_add+0x470/0x1050 [ 399.062276][ T146] ? device_initialize+0x2a5/0x4d0 [ 399.067418][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 399.072392][ T146] le_conn_complete_evt+0xc2e/0x14d0 [ 399.077723][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 399.082895][ T146] ? __mutex_trylock_common+0x15c/0x260 [ 399.088482][ T146] hci_le_meta_evt+0x285/0x3ca0 [ 399.093376][ T146] ? hci_event_packet+0x363/0x1310 [ 399.098540][ T146] ? __lock_acquire+0x7b50/0x7b50 [ 399.103605][ T146] ? hci_remote_host_features_evt+0x240/0x240 [ 399.109701][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 399.115367][ T146] ? mark_lock+0x94/0x320 [ 399.119723][ T146] ? mutex_unlock+0x10/0x10 [ 399.124258][ T146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 399.130272][ T146] ? lock_chain_count+0x20/0x20 [ 399.135174][ T146] ? __rwlock_init+0x140/0x140 [ 399.139970][ T146] hci_event_packet+0xe0b/0x1310 [ 399.144946][ T146] ? _raw_spin_unlock+0x40/0x40 [ 399.149828][ T146] ? rcu_lock_release+0x20/0x20 [ 399.154728][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 399.159975][ T146] hci_rx_work+0x255/0xa10 [ 399.164438][ T146] process_one_work+0x867/0xff0 [ 399.169333][ T146] ? worker_detach_from_pool+0x240/0x240 [ 399.174995][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 399.180310][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 399.185357][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 399.190933][ T146] ? wq_worker_running+0x97/0x170 [ 399.195984][ T146] worker_thread+0xad7/0x12a0 [ 399.200728][ T146] kthread+0x42e/0x520 [ 399.204822][ T146] ? rcu_lock_release+0x20/0x20 [ 399.209704][ T146] ? kthread_blkcg+0xd0/0xd0 [ 399.214322][ T146] ret_from_fork+0x1f/0x30 [ 399.218783][ T146] [ 399.297794][ T146] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 399.314055][ T146] Bluetooth: hci4: failed to register connection device [ 399.484039][ T7523] netlink: 'syz.3.827': attribute type 2 has an invalid length. [ 399.640572][ T7537] batman_adv: batadv0: Adding interface: macvtap1 [ 399.654529][ T7537] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.168326][ T7542] loop1: detected capacity change from 0 to 64 [ 400.552926][ T7537] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 401.549211][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.634495][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 401.650756][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 401.872043][ T7545] batman_adv: batadv0: Removing interface: macvtap1 [ 402.766865][ T7537] batman_adv: batadv0: Removing interface: macvtap1 [ 402.781607][ T7561] loop1: detected capacity change from 0 to 128 [ 403.004899][ T7561] FAT-fs (loop1): bogus number of FAT structure [ 403.011198][ T7561] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 403.513225][ T7561] FAT-fs (loop1): Can't find a valid FAT filesystem [ 405.015958][ T7584] loop1: detected capacity change from 0 to 2048 [ 405.667935][ T7590] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 405.670521][ T4197] Bluetooth: hci2: hcon ffff888079644000 sent 1 < count 257 [ 405.692496][ T4965] Bluetooth: hci4: command 0x0406 tx timeout [ 405.985735][ T7596] ip6t_srh: unknown srh match flags FF3F [ 411.792051][ T7627] netlink: 'syz.3.853': attribute type 4 has an invalid length. [ 413.685524][ T7639] loop4: detected capacity change from 0 to 64 [ 414.632800][ T4965] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 415.643630][ T4965] usb 2-1: device descriptor read/64, error -71 [ 419.314603][ T7678] netlink: 'syz.0.866': attribute type 4 has an invalid length. [ 419.690617][ T7690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.868'. [ 425.392360][ T7726] loop1: detected capacity change from 0 to 1024 [ 425.929049][ T7733] 9pnet_virtio: no channels available for device syz [ 426.327455][ T26] audit: type=1800 audit(1785768151.138:148): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.878" name="file0" dev="loop1" ino=18 res=0 errno=0 [ 427.925208][ T7755] loop3: detected capacity change from 0 to 40427 [ 428.464800][ T7755] F2FS-fs (loop3): invalid crc value [ 428.486098][ T7755] F2FS-fs (loop3): Found nat_bits in checkpoint [ 428.576973][ T7768] udc-core: couldn't find an available UDC or it's busy [ 428.584099][ T7768] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 429.327276][ T7755] F2FS-fs (loop3): Start checkpoint disabled! [ 429.388080][ T7755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 429.868139][ T7774] netlink: 'syz.3.886': attribute type 1 has an invalid length. [ 431.038228][ T4292] attempt to access beyond end of device [ 431.038228][ T4292] loop3: rw=2049, want=40976, limit=40427 [ 432.164192][ T7797] netlink: 'syz.3.890': attribute type 4 has an invalid length. [ 432.846587][ T7802] netlink: 'syz.1.897': attribute type 4 has an invalid length. [ 434.670868][ T7824] device syzkaller0 entered promiscuous mode [ 437.088844][ T7836] netlink: 'syz.3.906': attribute type 4 has an invalid length. [ 438.561868][ T7849] loop1: detected capacity change from 0 to 512 [ 438.569321][ T7852] netlink: 'syz.4.912': attribute type 4 has an invalid length. [ 439.595263][ T7849] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.911: invalid indirect mapped block 256 (level 2) [ 440.003112][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.011118][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.035640][ T7849] EXT4-fs (loop1): 2 truncates cleaned up [ 440.041532][ T7849] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 440.451668][ T7871] loop4: detected capacity change from 0 to 2048 [ 440.678750][ T7870] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.911: bg 0: block 5: invalid block bitmap [ 440.697913][ T7870] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 440.710168][ T7870] EXT4-fs (loop1): This should not happen!! Data will be lost [ 440.710168][ T7870] [ 440.720220][ T7870] EXT4-fs (loop1): Total free blocks count 0 [ 440.726855][ T7870] EXT4-fs (loop1): Free/Dirty block details [ 440.732829][ T7870] EXT4-fs (loop1): free_blocks=0 [ 440.737790][ T7870] EXT4-fs (loop1): dirty_blocks=1 [ 440.742894][ T7870] EXT4-fs (loop1): Block reservation details [ 440.748898][ T7870] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 440.760633][ T4965] Bluetooth: hci4: command 0x0405 tx timeout [ 440.815727][ T7871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.076955][ T7882] device syzkaller0 entered promiscuous mode [ 443.120832][ T7892] loop4: detected capacity change from 0 to 512 [ 443.876060][ T7892] EXT4-fs (loop4): Ignoring removed nobh option [ 443.902930][ T7892] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 444.115022][ T7892] EXT4-fs (loop4): 1 truncate cleaned up [ 444.122756][ T7892] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 444.711288][ T7907] loop1: detected capacity change from 0 to 8 [ 445.715793][ T7907] SQUASHFS error: xz decompression failed, data probably corrupt [ 445.723770][ T7907] SQUASHFS error: Failed to read block 0x108: -5 [ 445.730169][ T7907] SQUASHFS error: Unable to read metadata cache entry [106] [ 445.737549][ T7907] SQUASHFS error: Unable to read inode 0x11f [ 446.677869][ T7935] block device autoloading is deprecated and will be removed. [ 447.405669][ T7945] loop3: detected capacity change from 0 to 128 [ 447.479312][ T7947] comedi comedi1: 8255: I/O port conflict (0x1000000,4) [ 447.486894][ T7947] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 447.493550][ T7947] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 447.500324][ T7947] comedi comedi1: 8255: I/O port conflict (0xf,4) [ 447.507007][ T7947] comedi comedi1: 8255: I/O port conflict (0xffe,4) [ 447.513879][ T7947] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 447.520492][ T7947] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 447.528820][ T7947] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 447.535495][ T7947] comedi comedi1: 8255: I/O port conflict (0xffff,4) [ 447.542375][ T7947] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 447.549018][ T7947] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 447.555715][ T7947] comedi comedi1: 8255: I/O port conflict (0xf0,4) [ 447.562588][ T7947] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 447.569221][ T7947] comedi comedi1: 8255: I/O port conflict (0x3ff,4) [ 447.576019][ T7947] comedi comedi1: 8255: I/O port conflict (0x10000,4) [ 447.583309][ T7947] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 447.589908][ T7947] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 447.596549][ T7947] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 448.590135][ T7950] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 449.509388][ T7959] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4199] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7959] [ 449.546192][ T7959] netlink: 260 bytes leftover after parsing attributes in process `syz.3.935'. [ 449.555442][ T7959] netlink: 104 bytes leftover after parsing attributes in process `syz.3.935'. [ 449.818042][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 450.886300][ T7970] loop3: detected capacity change from 0 to 128 [ 451.794077][ T7970] FAT-fs (loop3): Directory bread(block 414) failed [ 451.800860][ T7970] FAT-fs (loop3): Directory bread(block 415) failed [ 451.807607][ T7970] FAT-fs (loop3): Directory bread(block 416) failed [ 451.814354][ T7970] FAT-fs (loop3): Directory bread(block 417) failed [ 451.821007][ T7970] FAT-fs (loop3): Directory bread(block 418) failed [ 451.827673][ T7970] FAT-fs (loop3): Directory bread(block 419) failed [ 451.834372][ T7970] FAT-fs (loop3): Directory bread(block 420) failed [ 451.840998][ T7970] FAT-fs (loop3): Directory bread(block 421) failed [ 453.440606][ T8001] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 457.350981][ T8034] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 458.588290][ T8062] loop4: detected capacity change from 0 to 8 [ 460.723677][ T8062] SQUASHFS error: xz decompression failed, data probably corrupt [ 460.731561][ T8062] SQUASHFS error: Failed to read block 0x108: -5 [ 460.738080][ T8062] SQUASHFS error: Unable to read metadata cache entry [106] [ 460.745476][ T8062] SQUASHFS error: Unable to read inode 0x11f [ 461.758966][ T8072] netlink: 'syz.4.967': attribute type 4 has an invalid length. [ 463.496284][ T8091] overlayfs: failed to clone lowerpath [ 464.595640][ T8099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.595851][ T8099] device batadv_slave_1 entered promiscuous mode [ 469.585340][ T8151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 478.137268][ T8223] device syzkaller0 entered promiscuous mode [ 483.654384][ T8275] device syzkaller0 entered promiscuous mode [ 488.150289][ T8326] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 488.169333][ T8326] cramfs: wrong magic [ 491.779921][ T8374] loop3: detected capacity change from 0 to 8 [ 492.395515][ T8374] SQUASHFS error: xz decompression failed, data probably corrupt [ 492.403487][ T8374] SQUASHFS error: Failed to read block 0x108: -5 [ 492.409853][ T8374] SQUASHFS error: Unable to read metadata cache entry [106] [ 492.417298][ T8374] SQUASHFS error: Unable to read inode 0x11f [ 492.926431][ T8384] device syzkaller0 entered promiscuous mode [ 494.875237][ T8409] loop4: detected capacity change from 0 to 2048 [ 495.273303][ T8409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.098772][ T8431] overlayfs: conflicting lowerdir path [ 498.388837][ T8456] overlayfs: option "workdir=./cgroup.cpu/cgroup.procs" is useless in a non-upper mount, ignore [ 498.442945][ T8456] overlayfs: missing 'lowerdir' [ 500.795879][ T8460] overlayfs: option "workdir=./cgroup.cpu/cgroup.procs" is useless in a non-upper mount, ignore [ 500.816629][ T8460] overlayfs: missing 'lowerdir' [ 501.501337][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.509466][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.622308][ T8477] device syzkaller0 entered promiscuous mode [ 502.221338][ T8493] trusted_key: encrypted_key: key user:syz not found [ 503.846110][ T8509] overlayfs: option "workdir=./cgroup.cpu/cgroup.procs" is useless in a non-upper mount, ignore [ 503.863407][ T8509] overlayfs: missing 'lowerdir' [ 505.349203][ T8525] loop4: detected capacity change from 0 to 512 [ 505.422994][ T8525] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 505.438535][ T8525] EXT4-fs (loop4): Unrecognized mount option "fscontext=system_u" or missing value [ 505.731791][ T8527] device syzkaller0 entered promiscuous mode [ 506.637231][ T8540] netlink: 'syz.1.1099': attribute type 4 has an invalid length. [ 506.989792][ T8548] loop4: detected capacity change from 0 to 2048 [ 510.114979][ T8565] loop4: detected capacity change from 0 to 8192 [ 511.912279][ T8586] netlink: 'syz.0.1112': attribute type 4 has an invalid length. [ 514.103236][ T8602] device syzkaller0 entered promiscuous mode [ 515.721768][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.737227][ T8627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.526214][ T8643] loop3: detected capacity change from 0 to 8 [ 518.106196][ T8643] SQUASHFS error: xz decompression failed, data probably corrupt [ 518.114183][ T8643] SQUASHFS error: Failed to read block 0x108: -5 [ 518.120564][ T8643] SQUASHFS error: Unable to read metadata cache entry [106] [ 518.127962][ T8643] SQUASHFS error: Unable to read inode 0x11f [ 518.912480][ T8655] netlink: 'syz.4.1127': attribute type 4 has an invalid length. [ 519.448011][ T8665] device syzkaller0 entered promiscuous mode [ 520.754895][ T8685] overlayfs: option "workdir=./cgroup.cpu/cgroup.procs" is useless in a non-upper mount, ignore [ 520.765494][ T8685] overlayfs: missing 'lowerdir' [ 521.315432][ T8690] netlink: 'syz.0.1138': attribute type 4 has an invalid length. [ 521.476073][ T8692] loop3: detected capacity change from 0 to 8192 [ 521.859381][ T8699] loop4: detected capacity change from 0 to 8 [ 522.749243][ T8699] SQUASHFS error: xz decompression failed, data probably corrupt [ 522.757191][ T8699] SQUASHFS error: Failed to read block 0x108: -5 [ 522.763585][ T8699] SQUASHFS error: Unable to read metadata cache entry [106] [ 522.770890][ T8699] SQUASHFS error: Unable to read inode 0x11f [ 525.214613][ T8751] netlink: 'syz.0.1155': attribute type 4 has an invalid length. [ 526.690662][ T8767] loop3: detected capacity change from 0 to 8 [ 526.776624][ T8767] SQUASHFS error: xz decompression failed, data probably corrupt [ 526.784555][ T8767] SQUASHFS error: Failed to read block 0x108: -5 [ 526.790920][ T8767] SQUASHFS error: Unable to read metadata cache entry [106] [ 526.798281][ T8767] SQUASHFS error: Unable to read inode 0x11f [ 528.166206][ T8781] device syzkaller0 entered promiscuous mode [ 528.312444][ T8786] netlink: 'syz.1.1163': attribute type 4 has an invalid length. [ 528.547302][ T8790] overlayfs: option "workdir=./cgroup.cpu/cgroup.procs" is useless in a non-upper mount, ignore [ 528.674085][ T8790] overlayfs: missing 'lowerdir' [ 528.796636][ T8794] netlink: 'syz.4.1166': attribute type 4 has an invalid length. [ 530.427615][ T8807] device syzkaller0 entered promiscuous mode [ 530.479361][ T8805] loop4: detected capacity change from 0 to 8192 [ 531.003929][ T8815] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 531.023000][ T8815] FAT-fs (loop4): Filesystem has been set read-only [ 531.544640][ T8821] overlayfs: option "workdir=./cgroup.cpu/cgroup.procs" is useless in a non-upper mount, ignore [ 531.555622][ T8821] overlayfs: missing 'lowerdir' [ 531.585855][ T8824] device syzkaller0 entered promiscuous mode [ 533.055966][ T8829] netlink: 'syz.3.1168': attribute type 5 has an invalid length. [ 533.073936][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.081791][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.091015][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.118916][ T8829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.945369][ T8842] overlayfs: option "workdir=./cgroup.cpu/cgroup.procs" is useless in a non-upper mount, ignore [ 533.955921][ T8842] overlayfs: missing 'lowerdir' [ 534.908854][ T8855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.963664][ T8855] loop3: detected capacity change from 0 to 1024 [ 535.155089][ T8855] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 535.752000][ T8862] overlayfs: option "workdir=./cgroup.cpu/cgroup.procs" is useless in a non-upper mount, ignore [ 535.870039][ T8862] overlayfs: missing 'lowerdir' [ 537.627637][ T8880] device syzkaller0 entered promiscuous mode [ 538.647830][ T8895] overlayfs: option "workdir=./cgroup.cpu/cgroup.procs" is useless in a non-upper mount, ignore [ 538.690146][ T8895] overlayfs: missing 'lowerdir' [ 539.768865][ T8899] loop4: detected capacity change from 0 to 8192 [ 540.648930][ T8913] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 541.501720][ T8913] FAT-fs (loop4): Filesystem has been set read-only [ 541.842718][ T4186] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 542.562215][ T4186] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 542.572489][ T8931] overlayfs: failed to clone upperpath [ 543.296100][ T8012] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 545.032572][ T8958] overlayfs: option "workdir=./cgroup.cpu/cgroup.procs" is useless in a non-upper mount, ignore [ 545.043092][ T8958] overlayfs: missing 'lowerdir' [ 546.599518][ T8971] netlink: 'syz.0.1212': attribute type 4 has an invalid length. [ 547.925883][ T8976] chnl_net:caif_netlink_parms(): no params data found [ 547.980410][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.987691][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.995775][ T8976] device bridge_slave_0 entered promiscuous mode [ 548.004174][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.011336][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.019379][ T8976] device bridge_slave_1 entered promiscuous mode [ 548.043828][ T8976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.055485][ T8976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.092198][ T8976] team0: Port device team_slave_0 added [ 548.104958][ T8976] team0: Port device team_slave_1 added [ 548.140010][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.147761][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.405973][ T8976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.418860][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.426123][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.452773][ T8976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.498509][ T8976] device hsr_slave_0 entered promiscuous mode [ 548.514314][ T8976] device hsr_slave_1 entered promiscuous mode [ 548.531674][ T8976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.557262][ T8976] Cannot create hsr debugfs directory [ 548.575399][ T9003] 9pnet_virtio: no channels available for device syz [ 549.572712][ T4260] Bluetooth: hci1: command 0x0409 tx timeout [ 552.644198][ T8976] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 552.655899][ T4175] Bluetooth: hci1: command 0x041b tx timeout [ 552.727180][ T8976] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 552.775396][ T8976] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 552.815171][ T8976] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 553.159588][ T8976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.239132][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.256553][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.307069][ T8976] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.356337][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.411975][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.464344][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.471551][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.511645][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.542782][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.573508][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.611330][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.618465][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.920294][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.962243][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 555.154297][ T9052] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 555.242700][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 555.257268][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 555.290718][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 555.435756][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 555.444533][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 555.453516][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 555.462078][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 555.470937][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 555.550846][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 555.559730][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 555.605135][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 557.085826][ T9068] xt_hashlimit: max too large, truncated to 1048576 [ 557.094392][ T9068] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 557.418818][ T8579] Bluetooth: hci1: command 0x0419 tx timeout [ 557.666446][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.683226][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 557.741881][ T8976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.311290][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 558.338586][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 558.384705][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 558.407030][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.443369][ T8976] device veth0_vlan entered promiscuous mode [ 558.450249][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.466086][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.487966][ T8976] device veth1_vlan entered promiscuous mode [ 558.522425][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 558.531728][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 558.568600][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 558.577742][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 558.610862][ T8976] device veth0_macvtap entered promiscuous mode [ 558.872205][ T8976] device veth1_macvtap entered promiscuous mode [ 559.088178][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.099750][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.149958][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.160914][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.171111][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.182041][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.198116][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.219893][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.230735][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.241779][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.254058][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.184960][ T4870] Bluetooth: hci1: command 0x0405 tx timeout [ 560.264820][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.272403][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 560.312209][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 560.324138][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 560.339157][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 560.353723][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 560.365686][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.416426][ T8976] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.452847][ T8976] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.963786][ T8976] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.003006][ T8976] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.560354][ T9117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1249'. [ 562.997462][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.003898][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.622525][ T8976] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 563.649282][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.677827][ T8976] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 564.027413][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.416155][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.452822][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.502596][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 564.531428][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.562924][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.570425][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 565.367039][ T9134] device syzkaller0 entered promiscuous mode [ 567.232806][ T9179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 567.251947][ T9179] loop5: detected capacity change from 0 to 1024 [ 567.410618][ T9179] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 570.331524][ T9207] tipc: Failed to remove unknown binding: 66,0,0/0:919103919/919103921 [ 570.412285][ T9207] tipc: Failed to remove unknown binding: 66,0,0/0:919103919/919103920 [ 571.450990][ T9233] loop5: detected capacity change from 0 to 8192 [ 573.098776][ T9255] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 573.149256][ T9255] FAT-fs (loop5): Filesystem has been set read-only [ 574.850193][ T9278] loop3: detected capacity change from 0 to 8 [ 576.984064][ T9286] loop5: detected capacity change from 0 to 32768 [ 577.592468][ T9286] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 579.441940][ T9286] syz.5.1288 (9286) used greatest stack depth: 18304 bytes left [ 579.810640][ T9305] vivid-001: ================= START STATUS ================= [ 579.819278][ T9305] vivid-001: Radio HW Seek Mode: Bounded [ 579.825344][ T9305] vivid-001: Radio Programmable HW Seek: false [ 579.831526][ T9305] vivid-001: RDS Rx I/O Mode: Block I/O [ 579.837116][ T9305] vivid-001: Generate RBDS Instead of RDS: false [ 579.843539][ T9305] vivid-001: RDS Reception: true [ 579.848517][ T9305] vivid-001: RDS Program Type: 0 inactive [ 579.854307][ T9305] vivid-001: RDS PS Name: inactive [ 579.859535][ T9305] vivid-001: RDS Radio Text: inactive [ 579.865089][ T9305] vivid-001: RDS Traffic Announcement: false inactive [ 579.871887][ T9305] vivid-001: RDS Traffic Program: false inactive [ 579.878277][ T9305] vivid-001: RDS Music: false inactive [ 579.883871][ T9305] vivid-001: ================== END STATUS ================== [ 580.225003][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 582.433166][ T9334] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 584.475153][ T9352] loop5: detected capacity change from 0 to 128 [ 584.490362][ T26] audit: type=1800 audit(1785768309.538:149): pid=9353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1316" name="idVendor" dev="configfs" ino=50624 res=0 errno=0 [ 584.642687][ T26] audit: type=1800 audit(1785768309.638:150): pid=9353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1316" name="serialnumber" dev="configfs" ino=50635 res=0 errno=0 [ 584.677842][ T9358] device syzkaller0 entered promiscuous mode [ 584.789071][ T9360] loop3: detected capacity change from 0 to 1024 [ 585.124694][ T9364] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8976] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9364] [ 585.160862][ T9364] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1304'. [ 585.170594][ T9364] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1304'. [ 585.179943][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 585.196603][ T8977] Bluetooth: Wrong link type (-22) [ 588.208793][ T9385] netlink: 'syz.1.1313': attribute type 4 has an invalid length. [ 588.813988][ T9390] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 590.681954][ T9411] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9411] [ 590.704129][ T9411] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1321'. [ 590.713541][ T9411] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1321'. [ 590.722670][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 591.142310][ T8977] Bluetooth: Wrong link type (-22) [ 593.480254][ T9421] device syzkaller0 entered promiscuous mode [ 594.090867][ T9433] loop5: detected capacity change from 0 to 8 [ 594.432365][ T9433] SQUASHFS error: xz decompression failed, data probably corrupt [ 594.440280][ T9433] SQUASHFS error: Failed to read block 0x108: -5 [ 594.446674][ T9433] SQUASHFS error: Unable to read metadata cache entry [106] [ 594.454052][ T9433] SQUASHFS error: Unable to read inode 0x11f [ 599.395108][ T9466] loop5: detected capacity change from 0 to 256 [ 600.666297][ T9466] exfat: Deprecated parameter 'utf8' [ 600.672388][ T9466] exfat: Deprecated parameter 'utf8' [ 600.822455][ T9466] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 601.096945][ T26] audit: type=1326 audit(1785768582.154:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1338" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 601.541115][ T26] audit: type=1326 audit(1785768582.154:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1338" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 602.005247][ T26] audit: type=1326 audit(1785768582.194:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1338" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 602.030361][ T26] audit: type=1326 audit(1785768582.194:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1338" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 602.055412][ T26] audit: type=1326 audit(1785768582.194:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1338" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 602.082404][ T26] audit: type=1326 audit(1785768582.204:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1338" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 602.115928][ T26] audit: type=1326 audit(1785768582.204:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1338" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 602.159704][ T9489] overlayfs: missing 'lowerdir' [ 602.202956][ T26] audit: type=1326 audit(1785768582.204:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1338" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 602.286681][ T26] audit: type=1326 audit(1785768582.204:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1338" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 602.328765][ T26] audit: type=1326 audit(1785768582.204:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1338" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 605.015785][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 609.318033][ T9543] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 612.246174][ T9560] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 613.046089][ T9562] netlink: 'syz.3.1364': attribute type 4 has an invalid length. [ 613.291051][ T9573] netlink: 'syz.5.1368': attribute type 4 has an invalid length. [ 613.413430][ T9576] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9576] [ 613.443676][ T9576] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1365'. [ 613.453004][ T9576] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1365'. [ 613.462110][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 613.474226][ T8977] Bluetooth: Wrong link type (-22) [ 614.322533][ T9582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1369'. [ 615.101495][ T9584] device syzkaller0 entered promiscuous mode [ 615.124380][ T9592] loop5: detected capacity change from 0 to 512 [ 615.133919][ T9595] netlink: 'syz.0.1382': attribute type 4 has an invalid length. [ 615.147708][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 615.208277][ T9592] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 615.238582][ T9592] EXT4-fs (loop5): Unrecognized mount option "fscontext=system_u" or missing value [ 615.959210][ T9611] loop5: detected capacity change from 0 to 2048 [ 618.965986][ T9631] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9631] [ 618.998662][ T9631] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1381'. [ 619.008608][ T9631] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1381'. [ 619.017850][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 621.781223][ T9677] netlink: 'syz.5.1391': attribute type 4 has an invalid length. [ 622.021676][ T9685] loop5: detected capacity change from 0 to 128 [ 622.167933][ T9686] loop3: detected capacity change from 0 to 8 [ 622.235730][ T9686] SQUASHFS error: xz decompression failed, data probably corrupt [ 622.247368][ T9686] SQUASHFS error: Failed to read block 0x108: -5 [ 622.255078][ T9686] SQUASHFS error: Unable to read metadata cache entry [106] [ 622.262455][ T9686] SQUASHFS error: Unable to read inode 0x11f [ 622.371981][ T9690] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8976] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9690] [ 622.405949][ T9690] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1395'. [ 622.415571][ T9690] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1395'. [ 622.424690][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1395'. [ 622.439764][ T8977] Bluetooth: Wrong link type (-22) [ 622.928863][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 622.928878][ T26] audit: type=1326 audit(1785768603.984:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.0.1396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b6bc019 code=0x7ffc0000 [ 623.041876][ T26] audit: type=1326 audit(1785768603.984:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.0.1396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b6bc019 code=0x7ffc0000 [ 623.072577][ T26] audit: type=1326 audit(1785768604.064:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.0.1396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f851b6bc019 code=0x7ffc0000 [ 623.242881][ T26] audit: type=1326 audit(1785768604.064:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.0.1396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b6bc019 code=0x7ffc0000 [ 623.385562][ T26] audit: type=1326 audit(1785768604.064:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.0.1396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b6bc019 code=0x7ffc0000 [ 623.410381][ T26] audit: type=1326 audit(1785768604.064:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.0.1396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f851b6bc019 code=0x7ffc0000 [ 623.697030][ T26] audit: type=1326 audit(1785768604.064:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.0.1396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b6bc019 code=0x7ffc0000 [ 623.873572][ T26] audit: type=1326 audit(1785768604.064:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.0.1396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b6bc019 code=0x7ffc0000 [ 623.898624][ T26] audit: type=1326 audit(1785768604.064:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.0.1396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f851b6bc019 code=0x7ffc0000 [ 623.923518][ T26] audit: type=1326 audit(1785768604.064:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.0.1396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b6bc019 code=0x7ffc0000 [ 624.944198][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.950536][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.053670][ T9712] device syzkaller0 entered promiscuous mode [ 625.083069][ T9723] device syzkaller0 entered promiscuous mode [ 625.589549][ T9730] loop3: detected capacity change from 0 to 32768 [ 625.682039][ T9730] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 627.214019][ T9742] loop5: detected capacity change from 0 to 2048 [ 627.274546][ T9742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.366597][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 628.169687][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 628.169701][ T26] audit: type=1326 audit(1785768609.224:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 628.206342][ T9747] netlink: 'syz.0.1413': attribute type 4 has an invalid length. [ 628.816461][ T9753] xt_CONNSECMARK: invalid mode: 0 [ 628.864225][ T26] audit: type=1326 audit(1785768609.224:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 628.943394][ T26] audit: type=1326 audit(1785768609.264:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 628.943434][ T26] audit: type=1326 audit(1785768609.264:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 628.943466][ T26] audit: type=1326 audit(1785768609.264:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 628.943498][ T26] audit: type=1326 audit(1785768609.274:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 628.943536][ T26] audit: type=1326 audit(1785768609.274:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 628.943568][ T26] audit: type=1326 audit(1785768609.274:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 628.943600][ T26] audit: type=1326 audit(1785768609.274:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 628.943632][ T26] audit: type=1326 audit(1785768609.274:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173454d019 code=0x7ffc0000 [ 632.738454][ T21] libceph: connect (1)[c::]:6789 error -101 [ 632.793492][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 633.886521][ T9799] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 633.893179][ T9799] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 633.901078][ T9799] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 633.907757][ T9799] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 633.914552][ T9799] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 633.922919][ T9799] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 633.930858][ T9799] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 633.937552][ T9799] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 633.945726][ T9799] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 633.953186][ T9799] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 633.960345][ T9799] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 633.967031][ T9799] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 633.974215][ T9799] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 633.981274][ T9799] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 633.988731][ T9799] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 633.995662][ T9799] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 634.002841][ T9799] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 634.009688][ T9799] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 634.016391][ T9799] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 634.023089][ T9799] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 634.029996][ T9799] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 634.036665][ T9799] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 634.043670][ T9799] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 634.050432][ T9799] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 634.057484][ T9799] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 634.064143][ T9799] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 634.887790][ T21] libceph: connect (1)[c::]:6789 error -101 [ 634.893877][ T9791] ceph: No mds server is up or the cluster is laggy [ 634.907876][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 635.940351][ T9813] netlink: 'syz.3.1430': attribute type 4 has an invalid length. [ 636.198945][ T4260] libceph: connect (1)[c::]:6789 error -101 [ 636.210482][ T4260] libceph: mon0 (1)[c::]:6789 connect error [ 636.302081][ T9819] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9819] [ 636.331558][ T9819] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1431'. [ 636.341102][ T9819] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1431'. [ 636.350235][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 636.994228][ T21] libceph: connect (1)[c::]:6789 error -101 [ 637.000248][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 637.438851][ T9824] loop5: detected capacity change from 0 to 8192 [ 637.480816][ T9828] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 9828 comm: syz.3.1434) [ 637.501459][ T9828] tmpfs: Bad value for 'mpol' [ 641.404321][ T9868] loop5: detected capacity change from 0 to 32768 [ 641.545430][ T9876] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 641.575418][ T9868] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 641.623051][ T9876] cramfs: wrong magic [ 641.989289][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 641.989304][ T26] audit: type=1800 audit(1785768623.044:220): pid=9880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1445" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 642.633099][ T9886] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 9886 comm: syz.0.1450) [ 642.652592][ T9886] tmpfs: Bad value for 'mpol' [ 643.424328][ T9887] loop3: detected capacity change from 0 to 64 [ 647.090598][ T9904] loop3: detected capacity change from 0 to 32768 [ 647.187801][ T9904] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 647.196572][ T9904] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 647.352376][ T9904] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 647.955723][ T9904] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 649.689135][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 653.482982][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 653.762785][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 653.883103][ T4232] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 653.956965][ T4232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 654.073694][ T4232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 655.080769][ T9955] loop5: detected capacity change from 0 to 32768 [ 655.194625][ T4232] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.359065][ T4232] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 655.375518][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.556747][ T9967] overlayfs: bad mount option "redirect_dir=on\" [ 655.596899][ T9965] netlink: 'syz.0.1469': attribute type 2 has an invalid length. [ 655.618180][ T9955] XFS (loop5): Mounting V5 Filesystem [ 655.682382][ T9955] XFS (loop5): Ending clean mount [ 655.695395][ T9955] XFS (loop5): Quotacheck needed: Please wait. [ 655.726884][ T9967] IPv6: addrconf: prefix option has invalid lifetime [ 655.895851][ T9955] XFS (loop5): Quotacheck: Done. [ 657.135021][ T26] audit: type=1800 audit(1785768638.014:221): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1463" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 657.432775][ T4232] usb 4-1: usb_control_msg returned -71 [ 657.439253][ T4232] usbtmc 4-1:16.0: can't read capabilities [ 657.593773][ T4232] usb 4-1: USB disconnect, device number 4 [ 657.813466][ T9991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 659.305594][ T8976] XFS (loop5): Unmounting Filesystem [ 659.442626][ T9991] device vlan0 left promiscuous mode [ 659.456466][ T9991] device bridge1 left promiscuous mode [ 663.277998][T10026] sctp: [Deprecated]: syz.0.1493 (pid 10026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.277998][T10026] Use struct sctp_sack_info instead [ 663.593526][T10028] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 663.602870][T10028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 663.612387][T10028] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 663.780848][ T26] audit: type=1800 audit(1785768644.644:222): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1484" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 664.343076][T10037] loop3: detected capacity change from 0 to 32768 [ 666.018075][T10043] loop5: detected capacity change from 0 to 64 [ 667.284452][T10065] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 10065 comm: syz.5.1490) [ 671.780504][T10092] loop3: detected capacity change from 0 to 2048 [ 671.834016][T10092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 674.604255][T10117] fuse: Unknown parameter '0xffffffffffffffff' [ 675.254924][T10124] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 675.299457][T10124] cramfs: wrong magic [ 675.373245][T10127] loop5: detected capacity change from 0 to 8192 [ 678.029656][T10156] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1517'. [ 682.614114][ T4866] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 683.982851][ T4866] usb 6-1: Using ep0 maxpacket: 8 [ 684.113075][ T4866] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.212645][ T4866] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 684.244198][T10187] netlink: 'syz.3.1526': attribute type 4 has an invalid length. [ 684.272548][ T4866] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 684.364435][ T4866] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.498785][ T4866] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 684.588827][ T4866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.241853][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1528'. [ 685.654821][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.661262][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.716661][ T4866] usb 6-1: usb_control_msg returned -71 [ 687.722288][ T4866] usbtmc 6-1:16.0: can't read capabilities [ 687.877913][T10191] device veth0_to_bond entered promiscuous mode [ 687.920583][ T4866] usb 6-1: USB disconnect, device number 2 [ 689.501337][T10227] gadgetfs: bound to dummy_udc driver [ 690.522150][T10235] loop5: detected capacity change from 0 to 64 [ 691.544735][T10232] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 692.373461][T10245] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 695.144695][T10270] netlink: 'syz.3.1543': attribute type 4 has an invalid length. [ 695.281625][T10273] loop5: detected capacity change from 0 to 8192 [ 700.860445][T10328] loop3: detected capacity change from 0 to 2048 [ 703.699215][T10328] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 709.316160][T10386] loop5: detected capacity change from 0 to 256 [ 711.763852][T10403] loop3: detected capacity change from 0 to 8 [ 713.329067][T10403] SQUASHFS error: xz decompression failed, data probably corrupt [ 713.376844][T10403] SQUASHFS error: Failed to read block 0x108: -5 [ 713.384178][T10403] SQUASHFS error: Unable to read metadata cache entry [106] [ 713.391510][T10403] SQUASHFS error: Unable to read inode 0x11f [ 714.898017][ T4175] Bluetooth: hci1: command 0x0406 tx timeout [ 714.951360][T10436] fuse: Unknown parameter '0xffffffffffffffff' [ 716.345673][T10445] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 716.398697][T10445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.343596][T10489] loop5: detected capacity change from 0 to 8 [ 722.036978][T10489] SQUASHFS error: xz decompression failed, data probably corrupt [ 723.089552][T10489] SQUASHFS error: Failed to read block 0x108: -5 [ 723.189231][T10489] SQUASHFS error: Unable to read metadata cache entry [106] [ 723.196641][T10489] SQUASHFS error: Unable to read inode 0x11f [ 723.719156][T10514] loop3: detected capacity change from 0 to 1024 [ 724.735448][T10514] EXT4-fs (loop3): Ignoring removed nobh option [ 725.464420][T10523] netlink: 'syz.1.1603': attribute type 4 has an invalid length. [ 725.694640][T10514] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 727.950533][T10552] loop3: detected capacity change from 0 to 8 [ 728.025380][T10552] SQUASHFS error: xz decompression failed, data probably corrupt [ 728.033274][T10552] SQUASHFS error: Failed to read block 0x108: -5 [ 728.039721][T10552] SQUASHFS error: Unable to read metadata cache entry [106] [ 728.047144][T10552] SQUASHFS error: Unable to read inode 0x11f [ 728.883797][T10557] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1611'. [ 728.883838][ T26] audit: type=1800 audit(1785768709.944:223): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1616" name="pnp_string" dev="configfs" ino=53931 res=0 errno=0 [ 728.938795][T10557] netlink: zone id is out of range [ 728.973260][T10557] netlink: zone id is out of range [ 728.978556][T10557] netlink: zone id is out of range [ 729.020699][T10578] netlink: 'syz.5.1618': attribute type 4 has an invalid length. [ 729.037899][T10557] netlink: zone id is out of range [ 729.052875][T10557] netlink: zone id is out of range [ 729.078422][T10557] netlink: zone id is out of range [ 729.108910][T10557] netlink: zone id is out of range [ 729.119596][T10557] netlink: zone id is out of range [ 729.139295][T10557] netlink: zone id is out of range [ 729.170501][T10557] netlink: zone id is out of range [ 729.395518][T10586] loop3: detected capacity change from 0 to 8192 [ 729.684131][T10596] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 729.693211][T10596] FAT-fs (loop3): Filesystem has been set read-only [ 730.905720][T10604] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 731.612962][T10613] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 732.579965][T10613] VFS: Can't find a romfs filesystem on dev nullb0. [ 732.579965][T10613] [ 733.242818][T10628] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 733.253965][T10628] VFS: Can't find a romfs filesystem on dev nullb0. [ 733.253965][T10628] [ 735.895073][T10655] loop3: detected capacity change from 0 to 8 [ 735.948713][T10655] SQUASHFS error: xz decompression failed, data probably corrupt [ 735.956569][T10655] SQUASHFS error: Failed to read block 0x108: -5 [ 735.963155][T10655] SQUASHFS error: Unable to read metadata cache entry [106] [ 735.970466][T10655] SQUASHFS error: Unable to read inode 0x11f [ 736.064791][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1635'. [ 737.392220][T10663] fuse: Unknown parameter '0xffffffffffffffff' [ 740.655657][T10699] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8976] was attempted by ""[10699] [ 740.676332][T10699] netlink: 'syz.5.1647': attribute type 29 has an invalid length. [ 740.687646][T10699] netlink: 'syz.5.1647': attribute type 29 has an invalid length. [ 740.700722][T10699] netlink: 'syz.5.1647': attribute type 29 has an invalid length. [ 740.718769][T10699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.279264][T10695] ceph: No mds server is up or the cluster is laggy [ 744.884208][T10720] loop5: detected capacity change from 0 to 8 [ 744.951686][T10720] SQUASHFS error: xz decompression failed, data probably corrupt [ 744.960001][T10720] SQUASHFS error: Failed to read block 0x108: -5 [ 744.966543][T10720] SQUASHFS error: Unable to read metadata cache entry [106] [ 744.973955][T10720] SQUASHFS error: Unable to read inode 0x11f [ 747.213581][T10741] loop5: detected capacity change from 0 to 32768 [ 747.223677][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.229996][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.029271][T10741] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 748.142696][T10750] fuse: Unknown parameter '0xffffffffffffffff' [ 748.396209][ T26] audit: type=1800 audit(1785768729.454:224): pid=10758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1660" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 749.435071][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 749.975584][T10771] loop5: detected capacity change from 0 to 8192 [ 750.662912][T10777] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 2068) [ 750.672005][T10777] FAT-fs (loop5): Filesystem has been set read-only [ 750.762779][T10778] 9pnet: Insufficient options for proto=fd [ 751.144333][T10784] loop3: detected capacity change from 0 to 256 [ 751.914424][T10784] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 752.811697][T10792] loop5: detected capacity change from 0 to 32768 [ 753.209568][T10792] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 753.360987][T10795] loop3: detected capacity change from 0 to 32768 [ 753.418295][T10795] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 753.593329][T10807] overlayfs: failed to clone upperpath [ 753.752880][T10795] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 754.241082][ T26] audit: type=1800 audit(1785768735.264:225): pid=10811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1673" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 754.775716][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 754.868825][T10819] fuse: Unknown parameter '0xffffffffffffffff' [ 754.888960][T10821] netlink: 'syz.3.1676': attribute type 4 has an invalid length. [ 755.326388][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 757.880515][T10854] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1684'. [ 758.581136][T10843] loop5: detected capacity change from 0 to 8192 [ 758.808901][T10862] netlink: 'syz.1.1689': attribute type 4 has an invalid length. [ 758.842633][T10863] device bridge1 entered promiscuous mode [ 761.203848][T10875] netlink: 'syz.3.1694': attribute type 4 has an invalid length. [ 761.210637][T10874] fuse: Unknown parameter '0xffffffffffffffff' [ 761.982456][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 764.518380][T10909] loop5: detected capacity change from 0 to 32768 [ 764.582383][T10913] netlink: 'syz.0.1705': attribute type 4 has an invalid length. [ 764.693854][T10909] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 765.554487][ T26] audit: type=1800 audit(1785768746.214:226): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1704" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 765.714113][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 766.871750][T10928] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 767.665543][T10935] fuse: Unknown parameter '0xffffffffffffffff' [ 770.294599][T10950] loop3: detected capacity change from 0 to 32768 [ 770.536044][T10950] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 770.720401][T10962] loop5: detected capacity change from 0 to 32768 [ 771.706798][ T26] audit: type=1800 audit(1785768752.744:227): pid=10967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1715" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 772.176112][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 772.252434][T10962] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 773.385681][T10982] netlink: 'syz.3.1724': attribute type 4 has an invalid length. [ 775.131346][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 776.061082][T10998] fuse: Unknown parameter '0xffffffffffffffff' [ 777.779040][T11017] netlink: 'syz.1.1733': attribute type 4 has an invalid length. [ 778.253703][T11020] loop5: detected capacity change from 0 to 32768 [ 779.349815][T11020] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 779.383268][T11032] device syzkaller0 entered promiscuous mode [ 779.408770][T11029] loop3: detected capacity change from 0 to 4096 [ 780.188272][T11029] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 780.577586][ T26] audit: type=1800 audit(1785768761.624:228): pid=11042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1735" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 781.285232][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 781.536690][T11052] fuse: Unknown parameter '0xffffffffffffffff' [ 784.535416][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 784.537270][T11081] netlink: 'syz.3.1751': attribute type 4 has an invalid length. [ 784.566564][T11083] loop5: detected capacity change from 0 to 512 [ 784.573436][T11079] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 786.106295][T11103] fuse: Unknown parameter '0xffffffffffffffff' [ 787.101502][T11083] EXT4-fs (loop5): 1 orphan inode deleted [ 787.186860][T11083] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 787.224008][T11083] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.032551][T11121] tipc: Started in network mode [ 788.037546][T11121] tipc: Node identity 4, cluster identity 4711 [ 788.043859][T11121] tipc: Node number set to 4 [ 788.948080][T11130] fuse: Unknown parameter '0xffffffffffffffff' [ 791.414277][T11144] netlink: 'syz.3.1766': attribute type 4 has an invalid length. [ 792.149890][T11152] udc-core: couldn't find an available UDC or it's busy [ 792.223295][T11152] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 792.293834][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 792.496041][T11154] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 792.529246][T11154] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 792.537231][T11154] netlink: 'syz.2.1770': attribute type 2 has an invalid length. [ 793.217666][T11162] x_tables: duplicate underflow at hook 1 [ 793.439739][T11163] loop5: detected capacity change from 0 to 2048 [ 794.019918][T11163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.065101][T11175] fuse: Unknown parameter '0xffffffffffffffff' [ 797.972995][T11188] binder_alloc: 11184: binder_alloc_buf, no vma [ 800.184265][T11215] loop3: detected capacity change from 0 to 256 [ 801.296945][T11215] FAT-fs (loop3): Directory bread(block 64) failed [ 801.532673][T11215] FAT-fs (loop3): Directory bread(block 65) failed [ 801.539379][T11215] FAT-fs (loop3): Directory bread(block 66) failed [ 801.592227][T11215] FAT-fs (loop3): Directory bread(block 67) failed [ 801.661914][T11215] FAT-fs (loop3): Directory bread(block 68) failed [ 801.775841][T11215] FAT-fs (loop3): Directory bread(block 69) failed [ 801.782482][T11215] FAT-fs (loop3): Directory bread(block 70) failed [ 801.802609][T11215] FAT-fs (loop3): Directory bread(block 71) failed [ 801.810516][T11215] FAT-fs (loop3): Directory bread(block 72) failed [ 801.817548][T11215] FAT-fs (loop3): Directory bread(block 73) failed [ 802.162220][T11226] fuse: Unknown parameter '0xffffffffffffffff' [ 802.287093][T11215] net_ratelimit: 68 callbacks suppressed [ 802.287111][T11215] IPVS: dh: FWM 3 0x00000003 - no destination available [ 805.660975][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 807.698149][T11249] input: syz1 as /devices/virtual/input/input12 [ 808.536138][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.542456][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.006035][T11273] netlink: 'syz.1.1803': attribute type 4 has an invalid length. [ 810.024799][T11280] using random self ethernet address [ 810.030347][T11280] using random host ethernet address [ 811.456937][T11284] netlink: 'syz.0.1806': attribute type 4 has an invalid length. [ 814.422164][T11316] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1811'. [ 815.215842][T11313] befs: (nullb0): invalid magic header [ 816.241910][T11320] binder: 11319:11320 ioctl 4018620d 0 returned -22 [ 816.249277][T11320] binder: 11319:11320 ioctl c0306201 0 returned -14 [ 818.030816][T11336] loop3: detected capacity change from 0 to 512 [ 818.453461][T11336] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1816: inode has both inline data and extents flags [ 818.717494][T11347] futex_wake_op: syz.2.1822 tries to shift op by 144; fix this program [ 820.232766][T11336] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1816: couldn't read orphan inode 15 (err -117) [ 820.318218][T11336] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 820.994573][T11362] netlink: 'syz.5.1825': attribute type 4 has an invalid length. [ 821.826811][T11363] udc-core: couldn't find an available UDC or it's busy [ 821.833910][T11363] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 823.202545][ C0] hrtimer: interrupt took 52955 ns [ 826.944093][T11428] loop5: detected capacity change from 0 to 8 [ 827.178524][T11429] tmpfs: Unknown parameter '' [ 827.680600][T11428] SQUASHFS error: xz decompression failed, data probably corrupt [ 827.688494][T11428] SQUASHFS error: Failed to read block 0x108: -5 [ 827.695613][T11428] SQUASHFS error: Unable to read metadata cache entry [106] [ 827.702998][T11428] SQUASHFS error: Unable to read inode 0x11f [ 827.958255][T11441] netlink: 'syz.1.1848': attribute type 4 has an invalid length. [ 828.089728][T11443] netlink: 'syz.0.1849': attribute type 4 has an invalid length. [ 832.293169][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'. [ 832.303782][T11461] device bridge_slave_1 left promiscuous mode [ 832.310558][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.330571][T11461] device bridge_slave_0 left promiscuous mode [ 832.337373][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.319580][T11488] netlink: 'syz.1.1862': attribute type 4 has an invalid length. [ 837.675819][T11509] loop5: detected capacity change from 0 to 8 [ 837.783806][T11509] SQUASHFS error: xz decompression failed, data probably corrupt [ 837.791684][T11509] SQUASHFS error: Failed to read block 0x108: -5 [ 837.798374][T11509] SQUASHFS error: Unable to read metadata cache entry [106] [ 837.805749][T11509] SQUASHFS error: Unable to read inode 0x11f [ 838.596948][T11520] using random self ethernet address [ 838.842714][T11520] using random host ethernet address [ 839.009469][T11535] dlm: dev_write: no op 0 74000000000000 [ 841.520779][T11555] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551612) [ 841.554210][T11555] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 841.789809][T11556] loop5: detected capacity change from 0 to 32768 [ 841.916763][T11556] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 842.349758][ T26] audit: type=1800 audit(1785769079.376:229): pid=11565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1882" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 843.090947][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 843.392564][T11240] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 843.912723][T11240] usb 2-1: Using ep0 maxpacket: 16 [ 844.241505][ T26] audit: type=1326 audit(1785769081.286:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 844.877589][T11555] netlink: 'syz.1.1880': attribute type 10 has an invalid length. [ 845.235028][ T26] audit: type=1326 audit(1785769081.926:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63bb642019 code=0x7ffc0000 [ 845.354066][T11555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1880'. [ 845.959402][T11555] device dummy0 entered promiscuous mode [ 846.039866][T11598] fuse: Unknown parameter '0xffffffffffffffff' [ 847.168123][T11240] usb 2-1: unable to get BOS descriptor or descriptor too short [ 848.070857][T11240] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 848.120960][T11240] usb 2-1: can't read configurations, error -71 [ 848.411176][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 848.762422][T11612] loop3: detected capacity change from 0 to 131072 [ 848.875380][T11612] F2FS-fs (loop3): invalid crc value [ 850.210762][T11612] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 850.685404][T11625] loop5: detected capacity change from 0 to 32768 [ 850.849955][T11619] device bridge2 entered promiscuous mode [ 850.858035][T11619] team0: Port device bridge2 added [ 850.982577][T11632] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 850.993636][T11632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 851.058229][T11625] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 852.390612][ T26] audit: type=1800 audit(1785769088.556:232): pid=11636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1898" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 852.679324][T11641] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 852.688260][T11641] overlayfs: missing 'lowerdir' [ 852.727332][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 853.054459][T11644] fuse: Unknown parameter '0xffffffffffffffff' [ 859.351260][T11680] loop5: detected capacity change from 0 to 32768 [ 859.500347][T11680] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 859.972852][ T26] audit: type=1800 audit(1785769096.996:233): pid=11685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1914" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 860.516054][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 860.727399][T11695] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 860.799569][T11695] loop3: detected capacity change from 0 to 128 [ 861.332103][T11697] fuse: Unknown parameter '0xffffffffffffffff' [ 862.334548][T11706] loop3: detected capacity change from 0 to 256 [ 862.659607][T11706] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 864.539895][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1923'. [ 864.550386][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1923'. [ 864.560067][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1923'. [ 868.462419][T11761] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 870.372735][T11770] fuse: Unknown parameter '0xffffffffffffffff' [ 870.569640][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.576086][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.973506][T11778] futex_wake_op: syz.5.1936 tries to shift op by 144; fix this program [ 872.319604][T11786] loop5: detected capacity change from 0 to 32768 [ 873.364498][T11786] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 875.623588][T11786] syz.5.1940 (11786) used greatest stack depth: 17920 bytes left [ 875.867662][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 883.024048][T11855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 883.203508][T11855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 883.695193][T11874] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 885.160988][T11874] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 885.228609][T11874] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 886.500621][T11898] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 886.511324][T11898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.233791][T11907] loop5: detected capacity change from 0 to 32768 [ 889.289855][T11907] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 890.582209][ T26] audit: type=1800 audit(1785769126.114:234): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1971" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 891.778448][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 898.972514][T11955] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 898.981471][T11955] overlayfs: missing 'lowerdir' [ 901.235741][T11975] loop3: detected capacity change from 0 to 32768 [ 901.337304][T11975] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 901.884645][ T26] audit: type=1800 audit(1785769136.809:235): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1987" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 902.463566][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 903.377414][T11993] loop3: detected capacity change from 0 to 1024 [ 903.734885][T11996] binder: 11985:11996 ioctl 4018620d 0 returned -22 [ 903.754954][T11996] binder: 11985:11996 ioctl c0306201 0 returned -14 [ 903.838953][T11994] loop5: detected capacity change from 0 to 32768 [ 903.977023][T11994] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 905.012763][ T26] audit: type=1800 audit(1785769139.134:236): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1992" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 905.126145][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 905.154161][ T4284] hfsplus: b-tree write err: -5, ino 25 [ 905.170014][ T4284] hfsplus: b-tree write err: -5, ino 4 [ 905.375083][ T4284] hfsplus: b-tree write err: -5, ino 2 [ 914.245335][T12072] loop5: detected capacity change from 0 to 32768 [ 914.357497][T12072] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 914.651874][ T26] audit: type=1800 audit(1785769148.583:237): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2014" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 916.539211][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 918.255255][T12103] binder: 12091:12103 ioctl c0306201 0 returned -14 [ 923.268434][T12130] udc-core: couldn't find an available UDC or it's busy [ 923.285380][T12130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 923.367525][T12136] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 923.374887][T12136] PKCS7: Only support pkcs7_signedData type [ 926.876942][T12151] loop5: detected capacity change from 0 to 32768 [ 927.017294][T12152] hub 8-0:1.0: USB hub found [ 927.022206][T12152] hub 8-0:1.0: 1 port detected [ 928.000687][T12151] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 928.579109][ T26] audit: type=1800 audit(1785769161.334:238): pid=12175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2034" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 929.818903][ T8976] ocfs2: Unmounting device (7,5) on (node local) [ 930.703202][T12189] loop3: detected capacity change from 0 to 512 [ 930.883272][T12194] device syzkaller0 entered promiscuous mode [ 930.968819][T12189] EXT4-fs (loop3): 1 orphan inode deleted [ 930.985856][T12189] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 931.012192][T12189] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.671378][T12219] loop5: detected capacity change from 0 to 512 [ 933.694365][T12221] netlink: 'syz.1.2054': attribute type 4 has an invalid length. [ 933.732759][T12219] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 933.785916][T12226] fuse: Unknown parameter '0xffffffffffffffff' [ 933.835416][ T26] audit: type=1800 audit(1785769166.289:239): pid=12227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2053" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 935.581859][T12219] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 935.623912][T12219] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 936.195784][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.202194][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.584811][T12243] device syzkaller0 entered promiscuous mode [ 939.986566][T12264] netlink: 'syz.1.2065': attribute type 4 has an invalid length. [ 940.802285][T12269] fuse: Unknown parameter '0xffffffffffffffff' [ 943.792665][T12298] fuse: Unknown parameter '0xffffffffffffffff' [ 944.321621][T12305] device syzkaller0 entered promiscuous mode [ 948.808627][T12326] fuse: Unknown parameter '0xffffffffffffffff' [ 948.997440][T12337] loop5: detected capacity change from 0 to 256 [ 949.049331][T12339] netlink: 'syz.0.2082': attribute type 4 has an invalid length. [ 949.065326][T12341] netlink: 'syz.3.2084': attribute type 4 has an invalid length. [ 949.503911][T12337] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 950.297661][ T26] audit: type=1800 audit(1785769181.477:240): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2090" name="idVendor" dev="configfs" ino=60451 res=0 errno=0 [ 950.368602][ T26] audit: type=1800 audit(1785769181.514:241): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2090" name="serialnumber" dev="configfs" ino=60454 res=0 errno=0 [ 951.337290][ T26] audit: type=1800 audit(1785769181.514:242): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2090" name="manufacturer" dev="configfs" ino=60455 res=0 errno=0 [ 951.403538][T12410] fuse: Unknown parameter '0xffffffffffffffff' [ 951.815296][ T26] audit: type=1800 audit(1785769181.514:243): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2090" name="product" dev="configfs" ino=60456 res=0 errno=0 [ 952.434298][T12423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 952.452633][T12425] fuse: Unknown parameter '0xffffffffffffffff' [ 953.589463][T12434] netlink: 'syz.1.2100': attribute type 4 has an invalid length. [ 954.734337][T12418] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 954.900626][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 955.963796][T12451] loop3: detected capacity change from 0 to 8 [ 955.984802][T12451] SQUASHFS error: Unable to read inode 0x11f [ 956.918409][T12451] Non-string source [ 958.054237][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2109'. [ 958.292841][T12478] device syzkaller0 entered promiscuous mode [ 958.312863][T12484] netlink: 'syz.0.2113': attribute type 4 has an invalid length. [ 961.398005][T12510] fuse: Unknown parameter '0x0000000000000003' [ 963.585186][T12540] netlink: 'syz.5.2128': attribute type 4 has an invalid length. [ 964.075266][T12546] netlink: 'syz.3.2129': attribute type 4 has an invalid length. [ 965.765485][T12562] loop5: detected capacity change from 0 to 512 [ 965.915227][T12564] hub 8-0:1.0: USB hub found [ 965.921022][T12564] hub 8-0:1.0: 1 port detected [ 966.837091][T12562] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 967.000661][T12562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 967.013122][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 967.039254][T12577] bond0 speed is unknown, defaulting to 1000 [ 967.046283][T12577] bond0 speed is unknown, defaulting to 1000 [ 967.070644][T12577] bond0 speed is unknown, defaulting to 1000 [ 967.195379][T12577] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 967.234004][T12577] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 967.347038][T12577] bond0 speed is unknown, defaulting to 1000 [ 967.363643][T12577] bond0 speed is unknown, defaulting to 1000 [ 967.377544][T12577] bond0 speed is unknown, defaulting to 1000 [ 967.389675][T12577] bond0 speed is unknown, defaulting to 1000 [ 967.402014][T12577] bond0 speed is unknown, defaulting to 1000 [ 967.416467][T12577] bond0 speed is unknown, defaulting to 1000 [ 967.852094][T12562] EXT4-fs (loop5): orphan cleanup on readonly fs [ 967.858504][T12562] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.2134: bad orphan inode 3 [ 967.875277][T12562] EXT4-fs (loop5): Remounting filesystem read-only [ 968.135262][T12562] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none. [ 968.609824][T12584] sctp: [Deprecated]: syz.2.2139 (pid 12584) Use of int in max_burst socket option deprecated. [ 968.609824][T12584] Use struct sctp_assoc_value instead [ 968.633980][T12562] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.2134: dx entry: limit 0 != root limit 125 [ 968.663860][T12562] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2134: Corrupt directory, running e2fsck is recommended [ 968.813065][T12590] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2139'. [ 970.755244][T12609] [ 970.757632][T12609] ====================================================== [ 970.764771][T12609] WARNING: possible circular locking dependency detected [ 970.771831][T12609] syzkaller #0 Not tainted [ 970.776273][T12609] ------------------------------------------------------ [ 970.783313][T12609] syz.3.2145/12609 is trying to acquire lock: [ 970.789400][T12609] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 970.800697][T12609] [ 970.800697][T12609] but task is already holding lock: [ 970.808066][T12609] ffff88807714eee0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0 [ 970.818534][T12609] [ 970.818534][T12609] which lock already depends on the new lock. [ 970.818534][T12609] [ 970.828959][T12609] [ 970.828959][T12609] the existing dependency chain (in reverse order) is: [ 970.837985][T12609] [ 970.837985][T12609] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 970.846676][T12609] down_write+0x38/0x60 [ 970.851360][T12609] configfs_depend_item_unlocked+0x14f/0x430 [ 970.857875][T12609] usbg_make_tpg+0x1f3/0x580 [ 970.862996][T12609] target_fabric_make_tpg+0xa0/0x6d0 [ 970.868814][T12609] configfs_mkdir+0x511/0x9e0 [ 970.874011][T12609] vfs_mkdir+0x386/0x570 [ 970.878774][T12609] do_mkdirat+0x1dd/0x5c0 [ 970.883662][T12609] __x64_sys_mkdir+0x6a/0x80 [ 970.888776][T12609] do_syscall_64+0x4c/0xa0 [ 970.893733][T12609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 970.900236][T12609] [ 970.900236][T12609] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 970.907881][T12609] __mutex_lock_common+0x1e5/0x2400 [ 970.913604][T12609] mutex_lock_nested+0x17/0x20 [ 970.918897][T12609] tcm_set_name+0x26/0x90 [ 970.923748][T12609] function_make+0x195/0x350 [ 970.928859][T12609] configfs_mkdir+0x511/0x9e0 [ 970.934055][T12609] vfs_mkdir+0x386/0x570 [ 970.938832][T12609] do_mkdirat+0x1dd/0x5c0 [ 970.943831][T12609] __x64_sys_mkdir+0x6a/0x80 [ 970.949045][T12609] do_syscall_64+0x4c/0xa0 [ 970.954013][T12609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 970.960433][T12609] [ 970.960433][T12609] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 970.968705][T12609] __lock_acquire+0x2c66/0x7b50 [ 970.974105][T12609] lock_acquire+0x19e/0x400 [ 970.979133][T12609] __mutex_lock_common+0x1e5/0x2400 [ 970.984863][T12609] mutex_lock_nested+0x17/0x20 [ 970.990166][T12609] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 970.996843][T12609] configfs_symlink+0x5a4/0x13b0 [ 971.002306][T12609] vfs_symlink+0x245/0x3d0 [ 971.007243][T12609] do_symlinkat+0x1ab/0x6b0 [ 971.012273][T12609] __x64_sys_symlink+0x7a/0x90 [ 971.017568][T12609] do_syscall_64+0x4c/0xa0 [ 971.022506][T12609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 971.028926][T12609] [ 971.028926][T12609] other info that might help us debug this: [ 971.028926][T12609] [ 971.039163][T12609] Chain exists of: [ 971.039163][T12609] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#26 [ 971.039163][T12609] [ 971.053852][T12609] Possible unsafe locking scenario: [ 971.053852][T12609] [ 971.061302][T12609] CPU0 CPU1 [ 971.066668][T12609] ---- ---- [ 971.072034][T12609] lock(&sb->s_type->i_mutex_key#26); [ 971.077513][T12609] lock(&opts->dep_lock); [ 971.084451][T12609] lock(&sb->s_type->i_mutex_key#26); [ 971.092447][T12609] lock(gadget_subsys.su_mutex); [ 971.097479][T12609] [ 971.097479][T12609] *** DEADLOCK *** [ 971.097479][T12609] [ 971.105633][T12609] 2 locks held by syz.3.2145/12609: [ 971.110836][T12609] #0: ffff88801e144460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 971.120082][T12609] #1: ffff88807714eee0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0 [ 971.130984][T12609] [ 971.130984][T12609] stack backtrace: [ 971.136870][T12609] CPU: 0 PID: 12609 Comm: syz.3.2145 Not tainted syzkaller #0 [ 971.144331][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 971.154392][T12609] Call Trace: [ 971.157832][T12609] [ 971.160770][T12609] dump_stack_lvl+0x188/0x250 [ 971.165482][T12609] ? load_image+0x410/0x410 [ 971.169996][T12609] ? show_regs_print_info+0x20/0x20 [ 971.175234][T12609] ? print_circular_bug+0x12b/0x1a0 [ 971.180449][T12609] check_noncircular+0x296/0x330 [ 971.185397][T12609] ? add_chain_block+0x9b0/0x9b0 [ 971.190536][T12609] ? lockdep_lock+0xf1/0x1f0 [ 971.195142][T12609] ? mark_lock+0x94/0x320 [ 971.199486][T12609] ? _find_first_zero_bit+0xd1/0xf0 [ 971.204692][T12609] __lock_acquire+0x2c66/0x7b50 [ 971.209570][T12609] ? stack_trace_save+0xf0/0xf0 [ 971.214436][T12609] ? arch_stack_walk+0xf2/0x140 [ 971.219295][T12609] ? verify_lock_unused+0x140/0x140 [ 971.224498][T12609] ? kmem_cache_free+0x8f/0x210 [ 971.229350][T12609] ? stack_trace_save+0xa6/0xf0 [ 971.234212][T12609] ? mark_lock+0x94/0x320 [ 971.238695][T12609] lock_acquire+0x19e/0x400 [ 971.243345][T12609] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 971.249693][T12609] ? __might_sleep+0xf0/0xf0 [ 971.254297][T12609] ? read_lock_is_recursive+0x10/0x10 [ 971.259682][T12609] ? verify_lock_unused+0x140/0x140 [ 971.264890][T12609] __mutex_lock_common+0x1e5/0x2400 [ 971.270111][T12609] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 971.276470][T12609] ? lock_chain_count+0x20/0x20 [ 971.281334][T12609] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 971.287762][T12609] ? mutex_lock_io_nested+0x60/0x60 [ 971.292993][T12609] ? rwsem_write_trylock+0x135/0x1c0 [ 971.298299][T12609] ? clear_nonspinnable+0x60/0x60 [ 971.303335][T12609] mutex_lock_nested+0x17/0x20 [ 971.308109][T12609] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 971.314443][T12609] ? inode_permission+0xef/0x480 [ 971.319408][T12609] ? bpf_lsm_inode_permission+0x5/0x10 [ 971.324879][T12609] ? security_inode_permission+0xac/0xf0 [ 971.330530][T12609] configfs_symlink+0x5a4/0x13b0 [ 971.335479][T12609] ? end_current_label_crit_section+0x14b/0x170 [ 971.341740][T12609] ? common_perm+0x15d/0x1b0 [ 971.346345][T12609] ? from_kgid+0x14f/0x6a0 [ 971.350767][T12609] ? apparmor_path_symlink+0x1ac/0x230 [ 971.356235][T12609] ? lookup_one_qstr_excl+0x11c/0x240 [ 971.361625][T12609] ? detach_groups+0x370/0x370 [ 971.366391][T12609] ? inode_permission+0xef/0x480 [ 971.371334][T12609] ? bpf_lsm_inode_symlink+0x5/0x10 [ 971.376531][T12609] ? security_inode_symlink+0xb2/0x100 [ 971.381994][T12609] vfs_symlink+0x245/0x3d0 [ 971.386438][T12609] do_symlinkat+0x1ab/0x6b0 [ 971.390957][T12609] ? vfs_symlink+0x3d0/0x3d0 [ 971.395560][T12609] ? getname_flags+0x1f9/0x4f0 [ 971.400327][T12609] __x64_sys_symlink+0x7a/0x90 [ 971.405104][T12609] do_syscall_64+0x4c/0xa0 [ 971.409527][T12609] ? clear_bhb_loop+0x30/0x80 [ 971.414204][T12609] ? clear_bhb_loop+0x30/0x80 [ 971.418879][T12609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 971.424798][T12609] RIP: 0033:0x7f173454d019 [ 971.429224][T12609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.448849][T12609] RSP: 002b:00007f17327a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 971.457266][T12609] RAX: ffffffffffffffda RBX: 00007f17347d4fa0 RCX: 00007f173454d019 [ 971.465248][T12609] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000200000000800 [ 971.473219][T12609] RBP: 00007f17345e400c R08: 0000000000000000 R09: 0000000000000000 [ 971.481191][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.489159][T12609] R13: 00007f17347d5038 R14: 00007f17347d4fa0 R15: 00007fff6240ab78 [ 971.497149][T12609]