last executing test programs: 13.409757224s ago: executing program 3 (id=5): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,uni_xlate=1,errors=remount-ro,check=strict,codepage=932,nonumtail=0,shortname=mixed,shortname=lower,iocharset=cp834,shortname=mixed,nonumtail=0,iocharset=cp866,rodir,\x00'], 0x2a, 0x33c, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000640), &(0x7f0000000000)='./file1\x00', 0x4880, &(0x7f0000000240)=ANY=[@ANYRES64], 0x6, 0x2c2, &(0x7f0000000680)="$eJzs3T+LI2UYAPBn9k82apEUViI4oIWV3F5rk0X2YDGVkkItdPHuQJIg3MGCpzheZWtj6ScQBDu/hI2FYCnYCnZecfDKJDOX5JwkO0Ju1fv9mn33ned532cms1lS5JkPXpyOb+Zx+/5nv0a3m8XeIAbxIIt+7EXti1gx+CoAgP+yBynFH2muTV4WEd3dlQUA7FDr///f77wkAGDH3n7n3TdPhsPTt/K8GzemX16Myk/25c/58ZPb8VFM4lZci148jEiPzMc3UkrFQV7qxyvT4mJUZk7f/7Fa/+T3iJjEL3EcvejPplbzz4anx/ncUn5R1vFstf+g3P969OL5hv3PhqfXG/Jj1IlXX16q/7XoxU8fxscxiZuzIhb5nx/n+Rvp6z8/fa8sr8zPiovR0SxuIe0/4ZcGAAAAAAAAAAAAAAAAAAAAAID/s6p3zlHM+veUM1X/nf2H5S+HdcBqf5+i7g+U1es81h+oSPFN3V/nWp7nqQpc5B/ECwdxcDUnDQAAAAAAAAAAAAAAAAAAAP8udz+5Nz6fTG7d2TrYi4htMXU3gPpr/ZdbeXnQqzIXMy9FQ3A/Hs0cLbbcSykVEbFhi9ivNihr3VhPuWKr4g/LZdPG3dcMnllX87fftVrn3vi8uz3m8B9U2HJQ313j86z5Gh5FPdOtb5IflmM6ccm9OusOpVa3X6fxUK/1uXeemw2KDTGRbSrs9d/mV66ayR4/i87sqjamH1aD+d9C072x8lpkW94B/v5ekenWAQAAAAAAAAAAAAAAAAAAO7X40m/Dwftrkn4+mz/kP/o7rg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnozF8/9bDIoq+RLBnbhz94pPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKfAXwEAAP//4jZeTQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000004780), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) 12.949656676s ago: executing program 2 (id=3): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) syz_mount_image$squashfs(&(0x7f0000000680), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x1fb, &(0x7f0000000280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r3, 0xd530000) syz_open_dev$I2C(&(0x7f00000001c0), 0x2800000000000000, 0x800) 12.832662786s ago: executing program 0 (id=1): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000000)={[{@force}, {@creator={'creator', 0x3d, "1decd79c"}}, {@umask={'umask', 0x3d, 0x1000}}, {@uid}, {@nodecompose}, {@force}]}, 0x3, 0x6b9, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getscheduler(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) poll(0x0, 0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="796100000000000000007e000000c13793b662e1b12b940a3bd19e5f9bd47e3f7f600e7406a5129bb288f78573610564130ca7a8e45dd686f4014dcd42a656f07e91858fd92337541a37b8f1c9fa300b553926"], 0x14}}, 0x4000054) llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 12.125786649s ago: executing program 3 (id=6): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,uni_xlate=1,errors=remount-ro,check=strict,codepage=932,nonumtail=0,shortname=mixed,shortname=lower,iocharset=cp834,shortname=mixed,nonumtail=0,iocharset=cp866,rodir,\x00'], 0x2a, 0x33c, &(0x7f0000000a40)="$eJzs3T1sW1UUAODjvjROI5V4QKpgMmxIqGqCGGBKVBWpIgMUWfwtWDTlJzaVYmEpDHG9gBhBLEgwsXWAsTNiQIiNgZUioQJioVukVjxkvxf7+SfUgJzy831DdXTuOb73vV7FL1F889J6bF88Hpdu3rwRS0ulWFg/ux77pajEsUgicyUAgP+S/TSNX9PMnavfXz6IFue8LgBgfvrv/6+cHCbKd3M1AMBRmPH7/6emZi/PbVkAwBztx9j7/4Mjw2M/5l8Y/E4AAPDv9czzLzy5sRlxoVpdimi+0661a/H4cHzjUrwWjdiKM7EStyOyB4XsaaH37xPnN8+dqfb8WIlar6Ndi2h22rXsSWEj6feXYzVWopL3p4P+pNe/2u+vRsSVTn/+aJbateOxnM//3XJsxVqsxL0T/RHnN8+tVfMXqDUP+jsR3Vg6uIje+k/HSnzzclyORlyMXu9w/Xur1erZdHOkv3213K8DAAAAAAAAAAAAAAAAAAAAAIB5OF0dqAzOv0mbnfbbF8YLKiPn49Sy4fx8oG52PlBaPjid591k/Hyg0fN52rWFOHZXrxwAAAAAAAAAAAAAAAAAAAD+OVq7i1FvNLZ2WrtvbReDTiHzxleffnEixmteT4aZWMhebqQmz0WhK4lBezpoT5ORmjxIIobFV68NVlysKQ+uYqK9F5Qnhkr5muqNxskHfvhoWtdvw0wSE7dlNCjl8xeGmvdkqT/oOjxYu0PN9TRND2vf+3CyK0oRCxP/cX8nWMyDL2+8et8jrVOP9oc+zw99eOjhlWevf/DJz9v1RuS3ptFY3GndTv/ypElh/5Ty+1yashOmB91hprvT2q0n3/7y3P3vfT1WnEzfP2kx8+bhc302nlnMgt4yZ7nS41M2//TgxVuD3fvnb+apj9fr1/a+/2nWrsIXCQd1AAAAAAAAAAAAAAAAAADAkSh8Vnwm2WevH3t6vqsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKM1/Pv/haA7kZkluNWJyaHy1k7r0MlPHOmlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/Z7AAAA///zeHd6") syz_mount_image$vfat(&(0x7f0000000640), &(0x7f0000000000)='./file1\x00', 0x4880, &(0x7f0000000240)=ANY=[@ANYRES64], 0x6, 0x2c2, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 9.300314761s ago: executing program 3 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000002000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8.373706284s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/201, 0xc9}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) openat$cgroup_ro(r6, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000f1, 0x0, 0x32feb97b}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x16000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 7.979653616s ago: executing program 3 (id=10): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x3, 0x7, 0x4, 0x3ff, 0x9, 0xffffffffffffffff}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="18030000000000000100000000000000060000000000000003000000000000000d00000000000000a600000001000000078000000000000004000010000000004e000000000000000500000000000000060000000000000048ffffffffffffff0a0000000000000002000000080000000500000000200000ed0010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000004900000000000000fefffffffffffffff7ffffffffffffff08", @ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x95}, 0x0) open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) r1 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 7.522003618s ago: executing program 1 (id=11): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x62) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xdf}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.20894581s ago: executing program 1 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) syz_mount_image$squashfs(&(0x7f0000000680), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x1fb, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) 5.471150127s ago: executing program 2 (id=13): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc002) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0xf4c, 0x7}) 5.448185937s ago: executing program 1 (id=14): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,uni_xlate=1,errors=remount-ro,check=strict,codepage=932,nonumtail=0,shortname=mixed,shortname=lower,iocharset=cp834,shortname=mixed,nonumtail=0,iocharset=cp866,rodir,\x00'], 0x2a, 0x33c, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000640), &(0x7f0000000000)='./file1\x00', 0x4880, &(0x7f0000000240)=ANY=[@ANYRES64], 0x6, 0x2c2, &(0x7f0000000680)="$eJzs3T+LI2UYAPBn9k82apEUViI4oIWV3F5rk0X2YDGVkkItdPHuQJIg3MGCpzheZWtj6ScQBDu/hI2FYCnYCnZecfDKJDOX5JwkO0Ju1fv9mn33ned532cms1lS5JkPXpyOb+Zx+/5nv0a3m8XeIAbxIIt+7EXti1gx+CoAgP+yBynFH2muTV4WEd3dlQUA7FDr///f77wkAGDH3n7n3TdPhsPTt/K8GzemX16Myk/25c/58ZPb8VFM4lZci148jEiPzMc3UkrFQV7qxyvT4mJUZk7f/7Fa/+T3iJjEL3EcvejPplbzz4anx/ncUn5R1vFstf+g3P969OL5hv3PhqfXG/Jj1IlXX16q/7XoxU8fxscxiZuzIhb5nx/n+Rvp6z8/fa8sr8zPiovR0SxuIe0/4ZcGAAAAAAAAAAAAAAAAAAAAAID/s6p3zlHM+veUM1X/nf2H5S+HdcBqf5+i7g+U1es81h+oSPFN3V/nWp7nqQpc5B/ECwdxcDUnDQAAAAAAAAAAAAAAAAAAAP8udz+5Nz6fTG7d2TrYi4htMXU3gPpr/ZdbeXnQqzIXMy9FQ3A/Hs0cLbbcSykVEbFhi9ivNihr3VhPuWKr4g/LZdPG3dcMnllX87fftVrn3vi8uz3m8B9U2HJQ313j86z5Gh5FPdOtb5IflmM6ccm9OusOpVa3X6fxUK/1uXeemw2KDTGRbSrs9d/mV66ayR4/i87sqjamH1aD+d9C072x8lpkW94B/v5ekenWAQAAAAAAAAAAAAAAAAAAO7X40m/Dwftrkn4+mz/kP/o7rg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnozF8/9bDIoq+RLBnbhz94pPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKfAXwEAAP//4jZeTQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) 5.447631207s ago: executing program 0 (id=15): mknodat$loop(0xffffffffffffff9c, 0x0, 0x8, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0xd5db, 0xc, 0x9, 0xfff, 0x5c95238c, 0xa, 0x3bf, 0x802, 0x1600, 0x5, 0x20000001, 0x809, 0x400e1c8, 0x6, 0x7, 0x6, 0x199, 0x6, 0x4, 0xb, 0x402, 0x10, 0x3, 0xef, 0x0, 0xa, 0x8000003, 0xdffffffd]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 5.139475658s ago: executing program 2 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000008c0)={0x0, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d061db1177f05ae87948702105448de8e102c34bfa82c4a81126a13dff8f69c5c01d9e59e499f410de14a1bcb18ee20796bbdf082da634dee", 0x78}) 4.130855183s ago: executing program 2 (id=17): syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000200)='fuse\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000000)="0200009021ec5d37", 0x8) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000002b40)={0x0, 0x9, 0x7, 0x2, 0x4a1f5aab, 0x7fff, 0x1000, 0x8086}, &(0x7f0000002b80)={0x9, 0x2, 0xa, 0x7, 0x6, 0x49a5, 0x4, 0x8}, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x4, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000040)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000006}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="6c20ee45d229e9f16744eb00d3f1c4a4b9867c5e5b1cb15e"], 0xc) 3.888377904s ago: executing program 3 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000002000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.393790586s ago: executing program 1 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) futimesat(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) 3.147153267s ago: executing program 3 (id=20): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000000)={[{@force}, {@creator={'creator', 0x3d, "1decd79c"}}, {@umask={'umask', 0x3d, 0x1000}}, {@uid}, {@nodecompose}, {@force}]}, 0x3, 0x6b9, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getscheduler(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) poll(0x0, 0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="796100000000000000007e000000c13793b662e1b12b940a3bd19e5f9bd47e3f7f600e7406a5129bb288f78573610564130ca7a8e45dd686f4014dcd42a656f07e91858fd92337541a37b8f1c9fa300b553926"], 0x14}}, 0x4000054) llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 3.069532137s ago: executing program 0 (id=28): mknodat$loop(0xffffffffffffff9c, 0x0, 0x8, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0xd5db, 0xc, 0x9, 0xfff, 0x5c95238c, 0xa, 0x3bf, 0x802, 0x1600, 0x5, 0x20000001, 0x809, 0x400e1c8, 0x6, 0x7, 0x6, 0x199, 0x6, 0x4, 0xb, 0x402, 0x10, 0x3, 0xef, 0x0, 0xa, 0x8000003, 0xdffffffd]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.42376071s ago: executing program 1 (id=21): syz_pidfd_open(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x2c, 0x117, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.402475084s ago: executing program 1 (id=22): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) syz_mount_image$squashfs(&(0x7f0000000680), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x1fb, &(0x7f0000000280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r3, 0xd530000) syz_open_dev$I2C(&(0x7f00000001c0), 0x2800000000000000, 0x800) 1.139214776s ago: executing program 0 (id=23): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/24, @ANYRESHEX], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0xfffff000, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB='discard,nfs,allow_utime=0000000000000000000,check=relaxed,check=strict,\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 285.503739ms ago: executing program 2 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/201, 0xc9}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) openat$cgroup_ro(r6, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000f1, 0x0, 0x32feb97b}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x16000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 0s ago: executing program 2 (id=25): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 65.265643][ T5774] cgroup: Unknown subsys name 'net' [ 65.430219][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.828669][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.693784][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.714097][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.722053][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.735304][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.744516][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.751931][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.834079][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.845550][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.855116][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.863199][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.872074][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.880220][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.888377][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.896207][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.903600][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.914343][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.922311][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.924252][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.938722][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.946052][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.948784][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.961581][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.979941][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.987745][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.151230][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 69.333400][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.340843][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.348596][ T5783] bridge_slave_0: entered allmulticast mode [ 69.356239][ T5783] bridge_slave_0: entered promiscuous mode [ 69.406371][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.413558][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.421307][ T5783] bridge_slave_1: entered allmulticast mode [ 69.428905][ T5783] bridge_slave_1: entered promiscuous mode [ 69.507249][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.520080][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.587753][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 69.664973][ T5783] team0: Port device team_slave_0 added [ 69.679146][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 69.707224][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 69.726668][ T5783] team0: Port device team_slave_1 added [ 69.822847][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.831411][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.838903][ T5788] bridge_slave_0: entered allmulticast mode [ 69.846243][ T5788] bridge_slave_0: entered promiscuous mode [ 69.853627][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.861531][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.868834][ T5788] bridge_slave_1: entered allmulticast mode [ 69.876232][ T5788] bridge_slave_1: entered promiscuous mode [ 69.883444][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.890622][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.916605][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.952940][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.960150][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.986349][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.032107][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.072345][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.080230][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.088377][ T5787] bridge_slave_0: entered allmulticast mode [ 70.096706][ T5787] bridge_slave_0: entered promiscuous mode [ 70.105831][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.145923][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.153097][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.160751][ T5786] bridge_slave_0: entered allmulticast mode [ 70.167744][ T5786] bridge_slave_0: entered promiscuous mode [ 70.182915][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.190321][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.197817][ T5787] bridge_slave_1: entered allmulticast mode [ 70.205118][ T5787] bridge_slave_1: entered promiscuous mode [ 70.224935][ T5783] hsr_slave_0: entered promiscuous mode [ 70.232568][ T5783] hsr_slave_1: entered promiscuous mode [ 70.239700][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.247532][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.255014][ T5786] bridge_slave_1: entered allmulticast mode [ 70.261724][ T5786] bridge_slave_1: entered promiscuous mode [ 70.281278][ T5788] team0: Port device team_slave_0 added [ 70.289630][ T5788] team0: Port device team_slave_1 added [ 70.330897][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.354932][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.367850][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.378687][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.445538][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.452547][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.479470][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.515900][ T5787] team0: Port device team_slave_0 added [ 70.522569][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.529691][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.556138][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.576006][ T5786] team0: Port device team_slave_0 added [ 70.589958][ T5787] team0: Port device team_slave_1 added [ 70.620485][ T5786] team0: Port device team_slave_1 added [ 70.648386][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.655737][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.683139][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.696073][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.703102][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.729597][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.780642][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.787807][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.815205][ T51] Bluetooth: hci0: command tx timeout [ 70.818654][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.848656][ T5788] hsr_slave_0: entered promiscuous mode [ 70.855345][ T5788] hsr_slave_1: entered promiscuous mode [ 70.861706][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.869862][ T5788] Cannot create hsr debugfs directory [ 70.893230][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.900565][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.926768][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.002208][ T5786] hsr_slave_0: entered promiscuous mode [ 71.009030][ T5786] hsr_slave_1: entered promiscuous mode [ 71.015400][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.023058][ T5786] Cannot create hsr debugfs directory [ 71.042606][ T5787] hsr_slave_0: entered promiscuous mode [ 71.048689][ T51] Bluetooth: hci1: command tx timeout [ 71.048704][ T5106] Bluetooth: hci3: command tx timeout [ 71.054856][ T5106] Bluetooth: hci2: command tx timeout [ 71.066854][ T5787] hsr_slave_1: entered promiscuous mode [ 71.072931][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.081945][ T5787] Cannot create hsr debugfs directory [ 71.348977][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.389390][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.421567][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.432721][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.500445][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.516598][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.536009][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.550893][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.626392][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.656850][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.667658][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.690916][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.697738][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.714534][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.788442][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.800536][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.812309][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.823370][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.866543][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.918687][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.945817][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.958420][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.980368][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.987781][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.014362][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.021518][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.032759][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.039987][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.077578][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.084919][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.167900][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.223337][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.243506][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.273435][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.289808][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.297028][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.326925][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.334163][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.347455][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.354688][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.437520][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.444770][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.527449][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.678501][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.698244][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.821351][ T5788] veth0_vlan: entered promiscuous mode [ 72.857014][ T5788] veth1_vlan: entered promiscuous mode [ 72.884160][ T51] Bluetooth: hci0: command tx timeout [ 72.911410][ T5783] veth0_vlan: entered promiscuous mode [ 72.938751][ T5783] veth1_vlan: entered promiscuous mode [ 72.982071][ T5788] veth0_macvtap: entered promiscuous mode [ 73.000852][ T5788] veth1_macvtap: entered promiscuous mode [ 73.018732][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.060876][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.070846][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.083249][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.100380][ T5783] veth0_macvtap: entered promiscuous mode [ 73.111352][ T5783] veth1_macvtap: entered promiscuous mode [ 73.125649][ T51] Bluetooth: hci2: command tx timeout [ 73.125672][ T5106] Bluetooth: hci3: command tx timeout [ 73.125702][ T5106] Bluetooth: hci1: command tx timeout [ 73.141202][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.153022][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.161997][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.171729][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.220153][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.231502][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.246057][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.280567][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.293128][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.307022][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.349268][ T5786] veth0_vlan: entered promiscuous mode [ 73.370285][ T5787] veth0_vlan: entered promiscuous mode [ 73.378987][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.390049][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.399650][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.408518][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.434339][ T5786] veth1_vlan: entered promiscuous mode [ 73.466231][ T5787] veth1_vlan: entered promiscuous mode [ 73.494961][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.504238][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.539242][ T5786] veth0_macvtap: entered promiscuous mode [ 73.558742][ T5786] veth1_macvtap: entered promiscuous mode [ 73.590025][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.598737][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.610007][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.619990][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.621332][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.639366][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.651026][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.681792][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.693229][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.703573][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.714204][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.725459][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.736403][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.746546][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.790461][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.800111][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.813458][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.822281][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.876071][ T5787] veth0_macvtap: entered promiscuous mode [ 73.900014][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.912999][ T5787] veth1_macvtap: entered promiscuous mode [ 73.914957][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.999215][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.012977][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.028531][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.039553][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.055785][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.070868][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.087898][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.121185][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.147324][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.161391][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.180890][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.193356][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.208603][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.221475][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.263448][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301847][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.329703][ T5874] syz.3.4[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.356316][ T5874] loop3: detected capacity change from 0 to 8 [ 74.608583][ T27] audit: type=1800 audit(1761702725.786:2): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 74.670089][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.850883][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.964768][ T5106] Bluetooth: hci0: command tx timeout [ 75.016300][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.048762][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.059835][ T5880] loop3: detected capacity change from 0 to 256 [ 75.167993][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.186681][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.204766][ T5106] Bluetooth: hci1: command tx timeout [ 75.205056][ T51] Bluetooth: hci2: command tx timeout [ 75.210202][ T5106] Bluetooth: hci3: command tx timeout [ 75.225173][ T5880] FAT-fs (loop3): Directory bread(block 64) failed [ 75.243404][ T5880] FAT-fs (loop3): Directory bread(block 65) failed [ 75.251733][ T5880] FAT-fs (loop3): Directory bread(block 66) failed [ 75.258839][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.259038][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.279397][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.279971][ T5880] FAT-fs (loop3): Directory bread(block 67) failed [ 75.308386][ T5880] FAT-fs (loop3): Directory bread(block 68) failed [ 75.327248][ T5880] FAT-fs (loop3): Directory bread(block 69) failed [ 75.334593][ T5880] FAT-fs (loop3): Directory bread(block 70) failed [ 75.342259][ T5880] FAT-fs (loop3): Directory bread(block 71) failed [ 75.351673][ T5880] FAT-fs (loop3): Directory bread(block 72) failed [ 75.362258][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.370765][ T5880] FAT-fs (loop3): Directory bread(block 73) failed [ 75.377791][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.674064][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 75.682988][ T8] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 75.692036][ T8] usb 2-1: config 0 has no interface number 0 [ 75.756096][ T5887] process 'syz.3.5' launched './file0' with NULL argv: empty string added [ 75.967533][ T5886] loop0: detected capacity change from 0 to 1024 [ 76.232045][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 76.245370][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.263942][ T8] usb 2-1: Product: syz [ 76.268146][ T8] usb 2-1: Manufacturer: syz [ 76.272749][ T8] usb 2-1: SerialNumber: syz [ 76.309656][ T8] usb 2-1: config 0 descriptor?? [ 76.359332][ T8] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 76.438367][ T5890] loop3: detected capacity change from 0 to 256 [ 76.513032][ T5890] FAT-fs (loop3): Directory bread(block 64) failed [ 76.534312][ T5890] FAT-fs (loop3): Directory bread(block 65) failed [ 76.551261][ T5890] FAT-fs (loop3): Directory bread(block 66) failed [ 76.571987][ T5891] loop2: detected capacity change from 0 to 8 [ 76.581494][ T5890] FAT-fs (loop3): Directory bread(block 67) failed [ 76.601157][ T5890] FAT-fs (loop3): Directory bread(block 68) failed [ 76.619607][ T5890] FAT-fs (loop3): Directory bread(block 69) failed [ 76.641894][ T5890] FAT-fs (loop3): Directory bread(block 70) failed [ 76.668996][ T5890] FAT-fs (loop3): Directory bread(block 71) failed [ 76.736322][ T5890] FAT-fs (loop3): Directory bread(block 72) failed [ 76.830688][ T5890] FAT-fs (loop3): Directory bread(block 73) failed [ 77.043953][ T5106] Bluetooth: hci0: command tx timeout [ 77.222664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 77.284141][ T5106] Bluetooth: hci3: command tx timeout [ 77.289654][ T5794] Bluetooth: hci1: command tx timeout [ 77.295359][ T51] Bluetooth: hci2: command tx timeout [ 77.366285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 77.403775][ T27] audit: type=1800 audit(1761702728.596:3): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 77.446599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 77.604070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.722693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 77.875948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.081779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.490358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.592712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.724161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.628172][ T8] usb 2-1: qt2_attach - failed to power on unit: -71 [ 79.644295][ T8] quatech2: probe of 2-1:0.51 failed with error -71 [ 79.673980][ T8] usb 2-1: USB disconnect, device number 2 [ 80.079663][ T79] hfsplus: b-tree write err: -5, ino 4 [ 81.241393][ T5907] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.568365][ T5916] loop1: detected capacity change from 0 to 8 [ 82.663531][ T9] cfg80211: failed to load regulatory.db [ 82.764026][ T27] audit: type=1800 audit(1761702733.986:4): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 83.088398][ T5918] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 83.112564][ T5920] loop1: detected capacity change from 0 to 256 [ 83.119141][ T5918] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 83.130642][ T5918] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 83.149888][ T5918] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 83.170182][ T5923] loop0: detected capacity change from 0 to 512 [ 83.177623][ T5923] ======================================================= [ 83.177623][ T5923] WARNING: The mand mount option has been deprecated and [ 83.177623][ T5923] and is ignored by this kernel. Remove the mand [ 83.177623][ T5923] option from the mount to silence this warning. [ 83.177623][ T5923] ======================================================= [ 83.223156][ T5918] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 83.284307][ T5918] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 83.291413][ T5918] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 83.309146][ T5923] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.323871][ T5923] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.15: bg 0: block 248: padding at end of block bitmap is not set [ 83.340698][ T5923] Quota error (device loop0): write_blk: dquota write failed [ 83.348614][ T5923] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 83.358739][ T5923] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.15: Failed to acquire dquot type 1 [ 83.389616][ T5923] EXT4-fs (loop0): 1 truncate cleaned up [ 83.397199][ T5920] FAT-fs (loop1): Directory bread(block 64) failed [ 83.403783][ T5920] FAT-fs (loop1): Directory bread(block 65) failed [ 83.416075][ T5923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.459695][ T5920] FAT-fs (loop1): Directory bread(block 66) failed [ 83.469770][ T5918] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 84.145512][ T5918] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 84.152049][ T5918] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 84.159655][ T5920] FAT-fs (loop1): Directory bread(block 67) failed [ 84.193558][ T5920] FAT-fs (loop1): Directory bread(block 68) failed [ 84.201723][ T5920] FAT-fs (loop1): Directory bread(block 69) failed [ 84.211985][ T5920] FAT-fs (loop1): Directory bread(block 70) failed [ 84.227296][ T5918] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 84.236811][ T5918] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 84.245288][ T5918] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 84.256498][ T5920] FAT-fs (loop1): Directory bread(block 71) failed [ 84.263329][ T5920] FAT-fs (loop1): Directory bread(block 72) failed [ 84.281660][ T5920] FAT-fs (loop1): Directory bread(block 73) failed [ 84.290812][ T5918] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 84.309759][ T5918] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 84.325002][ T5918] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 84.344305][ T5918] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 84.523097][ T5918] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 84.533935][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.551883][ T5918] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 84.566497][ T5918] comedi comedi3: 8255: I/O port conflict (0xef,4) [ 85.004092][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 85.140642][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 85.156202][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.181218][ T9] usb 3-1: config 0 has no interface number 0 [ 85.238401][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 85.306111][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.507648][ T9] usb 3-1: Product: syz [ 85.652659][ T9] usb 3-1: Manufacturer: syz [ 85.774773][ T9] usb 3-1: SerialNumber: syz [ 85.797879][ T9] usb 3-1: config 0 descriptor?? [ 85.809498][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 85.823091][ T5941] loop3: detected capacity change from 0 to 1024 [ 85.859974][ T5943] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 85.868675][ T5943] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 85.875608][ T5943] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 85.882909][ T5943] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 85.889561][ T5943] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 85.896815][ T5943] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 85.904401][ T5943] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 85.912317][ T5943] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 85.919730][ T5943] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 85.946387][ T5943] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 85.953568][ T5943] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 85.960839][ T5943] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 85.990500][ T5944] loop0: detected capacity change from 0 to 512 [ 85.998343][ T5943] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 86.008449][ T5943] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 86.034662][ T5944] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.043480][ T5944] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.28: bg 0: block 248: padding at end of block bitmap is not set [ 86.056393][ T5943] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 86.060854][ T5944] Quota error (device loop0): write_blk: dquota write failed [ 86.072158][ T5944] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 86.079440][ T5943] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 86.082380][ T5944] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.28: Failed to acquire dquot type 1 [ 86.095484][ T5943] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 86.105255][ T5944] EXT4-fs (loop0): 1 truncate cleaned up [ 86.174193][ T5943] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 86.279479][ T5943] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 86.286966][ T5943] comedi comedi3: 8255: I/O port conflict (0xef,4) [ 86.313230][ T5944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.926999][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.091684][ T9] usb 3-1: qt2_attach - failed to power on unit: -71 [ 88.114164][ T9] quatech2: probe of 3-1:0.51 failed with error -71 [ 88.162228][ T9] usb 3-1: USB disconnect, device number 2 [ 88.300722][ T5961] loop0: detected capacity change from 0 to 512 [ 88.620757][ T5962] hfsplus: invalid length 256 has been corrected to 255 [ 88.625848][ T5966] --map-set only usable from mangle table [ 88.690871][ T5962] ================================================================== [ 88.698972][ T5962] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x5bd/0x1240 [ 88.706698][ T5962] Read of size 2 at addr ffff88807aeaba18 by task syz.3.20/5962 [ 88.714322][ T5962] [ 88.716654][ T5962] CPU: 0 PID: 5962 Comm: syz.3.20 Not tainted syzkaller #0 [ 88.723866][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.733989][ T5962] Call Trace: [ 88.737271][ T5962] [ 88.740240][ T5962] dump_stack_lvl+0x16c/0x230 [ 88.744918][ T5962] ? __lock_acquire+0x7c80/0x7c80 [ 88.749944][ T5962] ? show_regs_print_info+0x20/0x20 [ 88.755159][ T5962] ? load_image+0x3b0/0x3b0 [ 88.759655][ T5962] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 88.765021][ T5962] ? __virt_addr_valid+0x18c/0x540 [ 88.770124][ T5962] ? __virt_addr_valid+0x469/0x540 [ 88.775335][ T5962] print_report+0xac/0x220 [ 88.779773][ T5962] ? hfsplus_uni2asc+0x5bd/0x1240 [ 88.784795][ T5962] kasan_report+0x117/0x150 [ 88.789293][ T5962] ? hfsplus_uni2asc+0x5bd/0x1240 [ 88.794310][ T5962] hfsplus_uni2asc+0x5bd/0x1240 [ 88.799156][ T5962] ? hfsplus_bnode_read+0x1c2/0x6f0 [ 88.804352][ T5962] hfsplus_listxattr+0x58f/0xb80 [ 88.809320][ T5962] ? hfsplus_getxattr+0x160/0x160 [ 88.814351][ T5962] ? kasan_save_free_info+0x2e/0x50 [ 88.819560][ T5962] ? slab_free_freelist_hook+0x130/0x1b0 [ 88.825221][ T5962] ? user_path_at_empty+0x4c/0x60 [ 88.830273][ T5962] ? kmem_cache_free+0xf8/0x280 [ 88.835144][ T5962] ? bpf_lsm_inode_listxattr+0x9/0x10 [ 88.840518][ T5962] ? hfsplus_getxattr+0x160/0x160 [ 88.845552][ T5962] listxattr+0x107/0x280 [ 88.849793][ T5962] path_listxattr+0xdd/0x1b0 [ 88.854382][ T5962] ? path_getxattr+0x400/0x400 [ 88.859140][ T5962] ? lockdep_hardirqs_on+0x98/0x150 [ 88.864329][ T5962] do_syscall_64+0x55/0xb0 [ 88.868768][ T5962] ? clear_bhb_loop+0x40/0x90 [ 88.873468][ T5962] ? clear_bhb_loop+0x40/0x90 [ 88.878150][ T5962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.884058][ T5962] RIP: 0033:0x7ff35998efc9 [ 88.888505][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.908108][ T5962] RSP: 002b:00007ff35a7e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 88.916509][ T5962] RAX: ffffffffffffffda RBX: 00007ff359be6180 RCX: 00007ff35998efc9 [ 88.924470][ T5962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 88.932444][ T5962] RBP: 00007ff359a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 88.940412][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.948380][ T5962] R13: 00007ff359be6218 R14: 00007ff359be6180 R15: 00007ffc1e1f26a8 [ 88.956344][ T5962] [ 88.959349][ T5962] [ 88.961673][ T5962] Allocated by task 5962: [ 88.966011][ T5962] kasan_set_track+0x4e/0x70 [ 88.970592][ T5962] __kasan_kmalloc+0x8f/0xa0 [ 88.975194][ T5962] __kmalloc+0xb4/0x240 [ 88.979382][ T5962] hfsplus_find_init+0x89/0x1d0 [ 88.984251][ T5962] hfsplus_listxattr+0x390/0xb80 [ 88.989212][ T5962] listxattr+0x107/0x280 [ 88.993477][ T5962] path_listxattr+0xdd/0x1b0 [ 88.998085][ T5962] do_syscall_64+0x55/0xb0 [ 89.002513][ T5962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.008420][ T5962] [ 89.010748][ T5962] The buggy address belongs to the object at ffff88807aeab800 [ 89.010748][ T5962] which belongs to the cache kmalloc-1k of size 1024 [ 89.024820][ T5962] The buggy address is located 0 bytes to the right of [ 89.024820][ T5962] allocated 536-byte region [ffff88807aeab800, ffff88807aeaba18) [ 89.039336][ T5962] [ 89.041670][ T5962] The buggy address belongs to the physical page: [ 89.048115][ T5962] page:ffffea0001ebaa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7aea8 [ 89.058283][ T5962] head:ffffea0001ebaa00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.067203][ T5962] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 89.075222][ T5962] page_type: 0xffffffff() [ 89.079534][ T5962] raw: 00fff00000000840 ffff888017841dc0 dead000000000122 0000000000000000 [ 89.088096][ T5962] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 89.096654][ T5962] page dumped because: kasan: bad access detected [ 89.103077][ T5962] page_owner tracks the page as allocated [ 89.108793][ T5962] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 49, tgid 49 (kworker/u4:3), ts 88527339718, free_ts 88386453926 [ 89.129121][ T5962] post_alloc_hook+0x1cd/0x210 [ 89.133879][ T5962] get_page_from_freelist+0x195c/0x19f0 [ 89.139415][ T5962] __alloc_pages+0x1e3/0x460 [ 89.143993][ T5962] alloc_slab_page+0x5d/0x170 [ 89.148657][ T5962] new_slab+0x87/0x2e0 [ 89.152707][ T5962] ___slab_alloc+0xc6d/0x1300 [ 89.157365][ T5962] __kmem_cache_alloc_node+0x1a2/0x260 [ 89.162804][ T5962] __kmalloc+0xa4/0x240 [ 89.166943][ T5962] ieee802_11_parse_elems_full+0xb9/0x2080 [ 89.172727][ T5962] ieee80211_inform_bss+0x107/0x1060 [ 89.177990][ T5962] rdev_inform_bss+0x106/0x410 [ 89.182732][ T5962] cfg80211_inform_bss_frame_data+0xb33/0x12b0 [ 89.188865][ T5962] ieee80211_bss_info_update+0x70b/0x930 [ 89.194473][ T5962] ieee80211_ibss_rx_queued_mgmt+0x17c9/0x2ac0 [ 89.200604][ T5962] ieee80211_iface_work+0x717/0xc70 [ 89.205778][ T5962] cfg80211_wiphy_work+0x225/0x260 [ 89.210867][ T5962] page last free stack trace: [ 89.215512][ T5962] free_unref_page_prepare+0x7ce/0x8e0 [ 89.220947][ T5962] free_unref_page+0x32/0x2e0 [ 89.225603][ T5962] __unfreeze_partials+0x1cf/0x210 [ 89.230697][ T5962] put_cpu_partial+0x17c/0x250 [ 89.235440][ T5962] __slab_free+0x31d/0x410 [ 89.239841][ T5962] qlist_free_all+0x75/0xe0 [ 89.244323][ T5962] kasan_quarantine_reduce+0x143/0x160 [ 89.249758][ T5962] __kasan_slab_alloc+0x22/0x80 [ 89.254601][ T5962] slab_post_alloc_hook+0x6e/0x4d0 [ 89.259689][ T5962] kmem_cache_alloc+0x11e/0x2e0 [ 89.264515][ T5962] getname_flags+0xbb/0x500 [ 89.268997][ T5962] user_path_at_empty+0x2c/0x60 [ 89.273832][ T5962] do_readlinkat+0xd8/0x480 [ 89.278334][ T5962] __x64_sys_readlink+0x7f/0x90 [ 89.283187][ T5962] do_syscall_64+0x55/0xb0 [ 89.287613][ T5962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.293507][ T5962] [ 89.295835][ T5962] Memory state around the buggy address: [ 89.301459][ T5962] ffff88807aeab900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.309518][ T5962] ffff88807aeab980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.317579][ T5962] >ffff88807aeaba00: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.325638][ T5962] ^ [ 89.330480][ T5962] ffff88807aeaba80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.338538][ T5962] ffff88807aeabb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.346592][ T5962] ================================================================== [ 89.469775][ T5962] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.477066][ T5962] CPU: 1 PID: 5962 Comm: syz.3.20 Not tainted syzkaller #0 [ 89.484274][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.494330][ T5962] Call Trace: [ 89.497598][ T5962] [ 89.500528][ T5962] dump_stack_lvl+0x16c/0x230 [ 89.505203][ T5962] ? show_regs_print_info+0x20/0x20 [ 89.510392][ T5962] ? load_image+0x3b0/0x3b0 [ 89.514937][ T5962] panic+0x2c0/0x710 [ 89.518842][ T5962] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.524993][ T5962] ? bpf_jit_dump+0xd0/0xd0 [ 89.529499][ T5962] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 89.535381][ T5962] ? _raw_spin_unlock+0x40/0x40 [ 89.540246][ T5962] ? hfsplus_uni2asc+0x5bd/0x1240 [ 89.545260][ T5962] check_panic_on_warn+0x84/0xa0 [ 89.550192][ T5962] ? hfsplus_uni2asc+0x5bd/0x1240 [ 89.555212][ T5962] end_report+0x6f/0x140 [ 89.559444][ T5962] kasan_report+0x128/0x150 [ 89.563937][ T5962] ? hfsplus_uni2asc+0x5bd/0x1240 [ 89.568952][ T5962] hfsplus_uni2asc+0x5bd/0x1240 [ 89.573790][ T5962] ? hfsplus_bnode_read+0x1c2/0x6f0 [ 89.578989][ T5962] hfsplus_listxattr+0x58f/0xb80 [ 89.583925][ T5962] ? hfsplus_getxattr+0x160/0x160 [ 89.588941][ T5962] ? kasan_save_free_info+0x2e/0x50 [ 89.594144][ T5962] ? slab_free_freelist_hook+0x130/0x1b0 [ 89.599774][ T5962] ? user_path_at_empty+0x4c/0x60 [ 89.604795][ T5962] ? kmem_cache_free+0xf8/0x280 [ 89.609639][ T5962] ? bpf_lsm_inode_listxattr+0x9/0x10 [ 89.615109][ T5962] ? hfsplus_getxattr+0x160/0x160 [ 89.620126][ T5962] listxattr+0x107/0x280 [ 89.624363][ T5962] path_listxattr+0xdd/0x1b0 [ 89.628943][ T5962] ? path_getxattr+0x400/0x400 [ 89.633699][ T5962] ? lockdep_hardirqs_on+0x98/0x150 [ 89.638904][ T5962] do_syscall_64+0x55/0xb0 [ 89.643313][ T5962] ? clear_bhb_loop+0x40/0x90 [ 89.648004][ T5962] ? clear_bhb_loop+0x40/0x90 [ 89.652672][ T5962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.658560][ T5962] RIP: 0033:0x7ff35998efc9 [ 89.662967][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.682565][ T5962] RSP: 002b:00007ff35a7e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 89.690971][ T5962] RAX: ffffffffffffffda RBX: 00007ff359be6180 RCX: 00007ff35998efc9 [ 89.698931][ T5962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 89.706894][ T5962] RBP: 00007ff359a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 89.714854][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.722814][ T5962] R13: 00007ff359be6218 R14: 00007ff359be6180 R15: 00007ffc1e1f26a8 [ 89.730789][ T5962] [ 89.734118][ T5962] Kernel Offset: disabled [ 89.738439][ T5962] Rebooting in 86400 seconds..