last executing test programs: 13m58.994866346s ago: executing program 3 (id=59): setns(0xc9, 0x40000000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20048a, &(0x7f0000000080), 0x1, 0x51a, &(0x7f0000000480)="$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") syz_mount_image$exfat(0x0, &(0x7f00000009c0)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000a00)) renameat2(0xffffffffffffff9c, &(0x7f0000000a40)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x4) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x4b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x21, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2b0d0, r0, 0x0, 0x0, 0x0, 0x10, 0x10004a6}, 0x94) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0x1000, 0x7) 13m57.671452972s ago: executing program 3 (id=61): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000079d000/0x2000)=nil, 0x2000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, 0xffffffffffffffff, 0x9dc0d000) 13m56.103694709s ago: executing program 3 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/address_bits', 0x210600, 0x98) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x5a, 0xf7, 0x5, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xc, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0x8}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x6, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xc7, 0x4, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x0, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0x1c}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 13m55.371179539s ago: executing program 32 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/address_bits', 0x210600, 0x98) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x5a, 0xf7, 0x5, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xc, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0x8}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x6, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xc7, 0x4, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x0, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0x1c}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 12m13.071908754s ago: executing program 33 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x42) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m17.840493665s ago: executing program 34 (id=528): r0 = socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4cc, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000cc0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000d00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, 0x0, 0x4001) connect$unix(r2, &(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000e00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000e40), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000e80)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000f40)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x4, 0x0, 0x4, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000001000)=0x3f, 0x8112) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x90) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040001}, 0x0) 7m27.084420983s ago: executing program 35 (id=734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r1, 0x40186f40, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0xfffffff8, 0x25dfdbfe, {0x2, 0x0, 0x3}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x83}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mknodat(0xffffffffffffffff, 0x0, 0xa000, 0x4) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x40000070, 0x0, 0xfffffffffffffffd}]}) 6m48.661694962s ago: executing program 1 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400e1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000195c0)={&(0x7f0000019600)={0x30, r5, 0x5707b563827c8365, 0x1, 0xbffffffd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x50}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) write(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) gettid() socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 6m47.033776698s ago: executing program 1 (id=796): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000880), 0x0, 0x0) read$msr(r2, &(0x7f00000008c0)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000198c0), 0x88b02, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syslog(0x2, &(0x7f0000000300)=""/19, 0x13) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r4, 0x0, r4) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r6, &(0x7f00000000c0)={r5, r4, 0x800}) 6m36.718044237s ago: executing program 1 (id=803): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = gettid() ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$SO_NETNS_COOKIE(0xffffffffffffffff, 0x1, 0x47, 0x0, &(0x7f00000004c0)) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x5, 0x0, 0x34325258, 0x7, 0x2, [{0x48000, 0x101}, {0xa, 0x3f6}, {0x238, 0x80000001}, {0x1b, 0x9}, {0x9}, {0x6, 0x1ff}, {0x2}, {0x7f, 0x9}], 0xfa, 0xa6, 0x6, 0x0, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020}, 0x2020) 6m36.482373407s ago: executing program 2 (id=804): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000300)={0x2800, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setns(0xc9, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x98410, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xff, 0x4b1, &(0x7f0000001d00)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) mknod$loop(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m35.354519576s ago: executing program 2 (id=805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f000000f740)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000028740)=0x80000000000003) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000028800), 0xc2900, 0x0) 6m33.369465612s ago: executing program 1 (id=806): socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pwritev2(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 6m33.125058399s ago: executing program 2 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000004240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001d240)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000020000ade308000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00006e9000/0x3000)=nil) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f000001d380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfbfffffb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000100)={0x2, 0x1, 0x80, "36c8bda1fae21125d30f0fb69f422db318bba2df3538f97e5e17f40287a75779", 0x55595659}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 6m28.635062856s ago: executing program 1 (id=811): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000193c0), 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000033, r0, 0x0) pipe(0x0) r5 = fsopen(&(0x7f0000000340)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) 6m27.117043736s ago: executing program 1 (id=813): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x6) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 6m24.277579835s ago: executing program 2 (id=815): mkdirat(0xffffffffffffff9c, &(0x7f00000020c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002100)='./proc\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40000, 0x20) r0 = openat(0xffffffffffffffff, 0x0, 0x2001, 0xdfb9b4dac957d55) write(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x39, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40080) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000004c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000580)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000600)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x2ccc6e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000680)={0x18, r3}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000900)={0x8000, 0x0, &(0x7f0000000700)=0x0, 0x0, {0x1b}, 0x0, 0x0, &(0x7f0000000840)=""/120, 0x0, 0x0, {r0}}, 0x58) move_pages(r5, 0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0) 6m9.598788686s ago: executing program 36 (id=813): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x6) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 6m9.370198347s ago: executing program 2 (id=830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xeed7e89f6334d838}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x26020480) flock(0xffffffffffffffff, 0x1) 6m6.62797092s ago: executing program 2 (id=832): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = socket(0x23, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102392, 0x18ff8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000019500)={0x0, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r5, 0x84, 0x7d, &(0x7f0000000180)={r7, 0x9}, 0xfffffeb9) semctl$SETVAL(0x0, 0xff7f0000, 0x10, 0x0) 5m51.371210391s ago: executing program 37 (id=832): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = socket(0x23, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102392, 0x18ff8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000019500)={0x0, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r5, 0x84, 0x7d, &(0x7f0000000180)={r7, 0x9}, 0xfffffeb9) semctl$SETVAL(0x0, 0xff7f0000, 0x10, 0x0) 2m47.883223939s ago: executing program 9 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000480), 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r3) r7 = fcntl$dupfd(r2, 0x406, r5) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, 0x0) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000340)={0x0, r6}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2m42.993876073s ago: executing program 9 (id=989): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 2m38.245735417s ago: executing program 9 (id=994): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000b40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000b80), 0x0, 0x0) read$msr(r4, &(0x7f0000002300)=""/102392, 0x18ff8) read$dsp(r1, &(0x7f000001b300)=""/4117, 0x200021d5) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000a00)={0x8, 0x200, 0x401, 0xffff, 0x4, "a4104019d494892ded7cf2782f1453398d5d06", 0x4, 0xa70}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0xfffffffe, 0x0, {0xa, 0x4e20, 0xaa, @mcast2, 0x1000}}}, 0x3a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) sendmmsg(r5, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) timer_create(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x18000, &(0x7f0000000280), 0x80, 0x62d, &(0x7f00000002c0)="$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") open(0x0, 0x8000, 0x112) 2m35.624089541s ago: executing program 9 (id=996): socketpair(0x22, 0x2, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r3, &(0x7f0000000180)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x7, 0xff, 0x8b, 0x0, 0x5, 0x7, 0x0, 0xff, 0x40, 0x5, 0x2, 0x7, 0xb}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000240)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x2) write(r6, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, &(0x7f0000000000)={0x253, 0x4, 0x5, 0x8000000000000100, 0x6}) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.,:\x00', 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x2c, 0x5, 0x4) 2m35.537113988s ago: executing program 6 (id=1000): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) read(r3, &(0x7f0000000780)=""/1024, 0x400) preadv(r3, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/144, 0x90}], 0x1, 0xca, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x3, &(0x7f0000000380)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [], {0x95, 0x0, 0x74}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$lan78xx(0x7, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe46}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40045506, 0x0) sendmsg$nl_route(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 2m29.108125284s ago: executing program 6 (id=1003): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000340), 0x400000000000041, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, &(0x7f0000000380), 0x0, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f00000003c0)=0x2) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) gettid() r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x4000011}, 0x2c000010) r8 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r9, r10, r11, &(0x7f0000000600)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0x80207502, 0x0, 0x0, 0x0, 0x0, 0x3119, 0x0, 0x0, '\x00', @del_dev_cmd}) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) 2m27.743156755s ago: executing program 6 (id=1005): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() socket$inet6(0x2d, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019640)=0x7) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000019800)={0x0, 0x10, &(0x7f0000019840)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000019880)=0x10) process_vm_writev(r3, &(0x7f0000019680)=[{&(0x7f00000196c0)=""/20, 0x14}], 0x1, &(0x7f0000019700)=[{&(0x7f0000019740)=""/153, 0x99}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2b}, @in=@multicast2, 0x0, 0xfffd, 0xfffe}, {@in6=@local, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x400000000000, 0x2, 0x0, 0x1000080000}, {0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x60}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x0, 0x0, 0x70bf26}}, @algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x1a0}}, 0x20004000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x101042, 0x15) sendfile(r9, r9, 0x0, 0x2) 2m23.186294575s ago: executing program 6 (id=1006): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x2000000000008, 0x301e80) 2m20.283757146s ago: executing program 38 (id=996): socketpair(0x22, 0x2, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r3, &(0x7f0000000180)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x7, 0xff, 0x8b, 0x0, 0x5, 0x7, 0x0, 0xff, 0x40, 0x5, 0x2, 0x7, 0xb}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000240)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x2) write(r6, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, &(0x7f0000000000)={0x253, 0x4, 0x5, 0x8000000000000100, 0x6}) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.,:\x00', 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x2c, 0x5, 0x4) 2m16.269798308s ago: executing program 6 (id=1012): mkdir(&(0x7f0000000480)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000022b80)='./file0/file0\x00', 0x1000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000022bc0)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@setlink={0x30, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x4822}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000022c00), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000022c40)="e2", 0x918) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000340)='[27\xad\x9a\xae]:1:\x00\x00\x00\x00ort\x00\xf6Osu\r\x11\x93\xbe', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/kmsg\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='./dev/kmsg\x00', &(0x7f0000000300), 0x2000090, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000044) 2m13.984252113s ago: executing program 6 (id=1013): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000140), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000180), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x6, 0xfffffe0400000001, 0x2, 0xfffffffd}, 0x0) memfd_create(&(0x7f0000000200)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x34, r3, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)={0x48, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x814}, 0x20044090) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) close(0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f0000000780), 0x8000000000000000, 0x1010c2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000840)={0x8, 0x0, &(0x7f0000000880)=[@increfs]}) r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000980)=[@acquire]}) openat$sysctl(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) getsockname(r1, &(0x7f0000000a00)=@tipc=@id, &(0x7f0000000a80)=0x80) 1m57.666854447s ago: executing program 39 (id=1013): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000140), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000180), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x6, 0xfffffe0400000001, 0x2, 0xfffffffd}, 0x0) memfd_create(&(0x7f0000000200)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x34, r3, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)={0x48, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x814}, 0x20044090) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) close(0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f0000000780), 0x8000000000000000, 0x1010c2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000840)={0x8, 0x0, &(0x7f0000000880)=[@increfs]}) r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000980)=[@acquire]}) openat$sysctl(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) getsockname(r1, &(0x7f0000000a00)=@tipc=@id, &(0x7f0000000a80)=0x80) 1m54.906229096s ago: executing program 8 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x5) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000680)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000780), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000008c0)={0x2, &(0x7f0000000900)=[{0x94, 0x2, 0x9, 0xfffffff7}, {0x6, 0x2, 0x4, 0x2}]}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000007c0)={'nat\x00', 0x0, [0x9, 0x4, 0x200, 0x6, 0x1f9]}, &(0x7f0000000940)=0x54) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f00000004c0)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r9, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0xc0) 1m44.55534694s ago: executing program 8 (id=1030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) lseek(r1, 0xff, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0xfffffffd) r2 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000540), 0x10106, 0x2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(&(0x7f0000000580)=[{r5, 0xc000}], 0x1, &(0x7f00000005c0)={0x0, 0x989680}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000640)=0xfe, 0x4) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r6, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000740)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000780)=0x1, 0x4) sendto$inet(r7, 0x0, 0x0, 0x8000, &(0x7f00000007c0)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000800)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmmsg(r6, &(0x7f0000000840), 0xf000, 0x10002, 0x0) listen(r6, 0x1) recvmmsg(r6, &(0x7f0000000a40)=[{{&(0x7f00000008c0)=@alg, 0x80, 0x0}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/124, 0x7c}, {0x0}], 0x4}, 0x8ce}], 0x2, 0x140, 0x0) 1m38.257757703s ago: executing program 8 (id=1032): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r3, &(0x7f0000000300), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000480)={[{@errors_remount}, {@usrquota}, {@bh}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0xae2}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {}]}, 0x3, 0x474, &(0x7f0000000740)="$eJzs3M1vFOUfAPDvzLbw47X9Ib6AqFVibHxpaUHl4EWjiQeMJnrAY20LIRRqaE2EEKnG4MXEEPVsPJr4F3jzYtSTiVe9eTAkRLmAnmpmdgZ2l91lS7dbYD+fZLbPM/PsPs+zzzwzz8yz0wD61kj2kkRsjYjfImKoGq1PMFL9c/Xy2el/Lp+dTmJ5+c2/kjzdlctnp8uk5fu2FJHRNCL9OCkyqbdw+szxqbm52VNFfHzxxLvjC6fPPHPsxNTR2aOzJycPHjywf+L55yafbVP6jR3XM6vXld0fzO/Z9erbF16bPnzhnZ++zcq7tdheW49uGckq/vdyrmb159nL493ObJ1tqwknA+tYEFakEhFZcw3m/X8oKnG98YbilY/WtXDAmsrOTW3OokvLwF0siQ6TRWcJgTtFeaLPrn/LpUdDj9vCpRerF0BZva8WS3XLQKRFmsGG69tuGomIw0v/fpUtsUb3IQAAan06/eWheLrZ+C+N+2rSbS/mUIYj4v8RsSMi7omInRFxb0Se9v6IeKBlThuarm2cGrpx/JNevOXKdSAb/71QzG3Vj//K0V9luFLEtuX1H0yOHJub3Vd8J6MxuDGLT7TJ4/uXf/2s1bba8V+2ZPmXY8GiHBcHGm7QzUwtTuWD0i649GHE7oFm9U+uzQRkl/67ImL3yj56exk49uQ3e1olunn92+jCPNPy1xFPVNt/KRrqX0raz0+O/y/mZveNl3vFjX7+5fwbrfJfVf27IGv/zfX7f2OS4aR2vnZh5Xmc//2Tltc0t7r/b0jeytulPKq8P7W4eGoiYkNyKI/XrZ+8/t4yXqbP6j+6t3n/31ENbMpeHoyIbCd+KCIejohHirI/GhGPRcTeNvX/8aXW226H9p9pevy7tv83tP/KA5XjP3zXKv/O2v9AHhot1uTHv5votICr+e4AAADgTpHmv4FP0rFr4TQdG6v+hn9nbE7n5hcWnzoy/97Jmepv5YdjMC3vdA3V3A+dSJaKT6zGJ4t7xeX2/cV94y8qm/L42PT83Mw61x363ZYW/T/zZ2W9SwesuWbzaJNN52vrHmQD7gKN/T+tj557vZeFAXrK89rQv27S/9NelQPoPed/6F/N+v+5hri5ALg7Of9D/9L/oX/p/9C/9H/oS6t5rn9VgT8ioueZdi+QHTJX9q4k1qI8Q0U79v5LiPR2aQuBbgaa/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAO9V/AQAA//9jreNX") syz_open_dev$dvb_frontend(0x0, 0x8000003, 0x717ac2) creat(&(0x7f0000000000)='./file0\x00', 0x60) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000200), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) sendmsg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000663000/0x2000)=nil, 0x2000, 0x200000e, 0x80010, r4, 0x0) fdatasync(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 1m33.835223535s ago: executing program 8 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x42, 0x8814) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008811) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0xfffffffd, 0x9, 0x100a, 0x7, 0x8, 0x2, 0x3}}) shmctl$IPC_RMID(0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f00000001c0)={[{@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@i_version}, {@min_batch_time={'min_batch_time', 0x3d, 0xda}}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x82) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) ioctl$FITRIM(r5, 0xc0185879, 0x0) prlimit64(r0, 0xb, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x2c7, &(0x7f0000002b80)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r6, &(0x7f0000000840)={0x2020}, 0x2020) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x80010, 0xffffffffffffffff, 0x3000) 1m31.567926004s ago: executing program 8 (id=1035): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6(0x10, 0x2, 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x4010, r3, 0x42799000) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x3a) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f01f}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) sendmmsg$inet6(r7, 0x0, 0x0, 0x40080) sendmmsg$inet6(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x2, 0x24040040) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) 1m26.237935422s ago: executing program 8 (id=1037): close(0x3) r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x4) write$UHID_INPUT(r2, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x11, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xef, 0x8, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0x3, 0x4, 0x6}, {0x28, 0x98, 0x81, 0xfffffff9}, {0xc, 0x90, 0xa, 0x5}, {0xe54, 0x6a, 0x1, 0xffbffff6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc080}, 0x2400c050) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x260, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="28d65d003c70c52a48495354ad9b62423008fad009341563dd5fabadd302ac21ee34bd5a00"/60, @ANYRES16=r9, @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x48000) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0xc) dup3(r1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={r10, 0x15, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) 1m25.758503767s ago: executing program 40 (id=1037): close(0x3) r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x4) write$UHID_INPUT(r2, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x11, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xef, 0x8, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0x3, 0x4, 0x6}, {0x28, 0x98, 0x81, 0xfffffff9}, {0xc, 0x90, 0xa, 0x5}, {0xe54, 0x6a, 0x1, 0xffbffff6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc080}, 0x2400c050) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x260, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="28d65d003c70c52a48495354ad9b62423008fad009341563dd5fabadd302ac21ee34bd5a00"/60, @ANYRES16=r9, @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x48000) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0xc) dup3(r1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={r10, 0x15, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) 37.005605659s ago: executing program 5 (id=1038): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/211, 0xd3}], 0x1, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/87, 0x57}, {0x0}, {0x0}], 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r5, &(0x7f0000000cc0), 0xfd45) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/sync_on_suspend', 0x141a82, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 34.771767065s ago: executing program 5 (id=1059): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x60442, 0x0) r6 = dup(r5) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000480)=""/121, 0x79}, {0x0}], 0x2, 0x401, 0x6) lseek(r3, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 32.442984067s ago: executing program 7 (id=1060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2}) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0x33) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000980)={[0x60000000004, 0x1000000000, 0x8001, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000a40)=@x86={0xe, 0xa, 0x5, 0x0, 0x2, 0xf0, 0x1, 0x0, 0x80, 0x4, 0x6, 0xc6, 0x0, 0x1, 0x3, 0x5, 0x3, 0x7, 0x4, '\x00', 0x9, 0x4}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000a80)={{0xffff1000, 0xeeee0000, 0xe, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x6000, 0xd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7, 0x7}, {0x1000, 0x3000, 0xa, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x0, 0x25000, 0x0, 0x0, 0x0, 0x94, 0xff, 0x0, 0x8, 0x8, 0x6, 0xfc}, {0x80a0000, 0xffff1000, 0x9, 0x55, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0x60000, 0x3000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x9000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, [0x8, 0x0, 0x1, 0x40]}) 29.225688512s ago: executing program 7 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x4040000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000005e80)=ANY=[@ANYBLOB="020d0000100000002f3144e90000000003000600eb1f00000200403fe0000001000000f5000000000800120002000100000000000000000030006c100201009f6eae02000000adb20200000000152c000000ffffffff00010a0014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) 25.516494068s ago: executing program 5 (id=1063): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 24.208410514s ago: executing program 5 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x6) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x8) landlock_restrict_self(r4, 0x1) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000680)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000006c0)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x2) setns(r2, 0x20000) 23.663785805s ago: executing program 4 (id=1067): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000200)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000019200), 0x80000005, 0x20040) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000019240)={0x0, 0x0, &(0x7f0000019280)={&(0x7f00000192c0)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000019340)={0x0, 0x0, &(0x7f0000019380)={&(0x7f00000193c0)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r6) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000040)=@other={'decodes', ' ', 'io+mem'}, 0xf) lseek(r7, 0xffffffffffffffff, 0x2) 23.565067203s ago: executing program 7 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) socket$kcm(0x29, 0x7, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xb, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x1, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, r7, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x1e0, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x3, 0x6, 0x0, 0x2, 0x9, 0x8}}, {0x14, 0x2, [0x641, 0x9ec, 0x0, 0x2, 0x2, 0x6, 0x2, 0x7fff]}}, {{0x1c, 0x1, {0x3, 0x3, 0x53b0, 0xa97, 0x0, 0x7, 0x4b, 0x4}}, {0xc, 0x2, [0x1e0, 0x7, 0x80f, 0x0]}}, {{0x1c, 0x1, {0xe, 0x3, 0x84a6, 0x8, 0x1, 0x9, 0x1ff, 0x5}}, {0xe, 0x2, [0x0, 0xee, 0x98b7, 0x4, 0xe8]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x61}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x21}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x401}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7}]}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x98, 0xc4, 0x7, 0x7, 0x2, 0x7c, 0x3, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x80, 0x7, 0x6, 0x3, 0x0, 0x3, 0x0, 0x5}}, {0xe, 0x2, [0x9, 0x9, 0x8, 0x400, 0x80]}}, {{0x1c, 0x1, {0x1, 0xfb, 0x2, 0x3, 0x1, 0x9, 0x2000}}, {0x4}}, {{0x1c, 0x1, {0xdf, 0x5, 0x3, 0x4, 0x2, 0x66d, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x7, 0xcc, 0xe9f, 0x1, 0x0, 0x81, 0xa0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0xa, 0x4, 0x0, 0x7f, 0x2, 0x0, 0xff}}, {0x4}}]}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x4, "fc40b33c17d5acdf7ef0f696da54a4c8"}}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0xc011}, 0x4000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 21.558660598s ago: executing program 0 (id=1069): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newaddr={0x2c, 0x14, 0x100, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0x0, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) 20.076929548s ago: executing program 5 (id=1070): setns(0xc9, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0xc015, 0x3}, 0x18, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) gettid() r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x400000041) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000019400)=@bloom_filter={0x1e, 0x3, 0x3742, 0xffffff86, 0x401, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x6}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040850) iopl(0xe) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r5 = socket(0x15, 0x803, 0xfffffffe) sendto(r5, 0x0, 0x0, 0x8800, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2000, &(0x7f00000198c0)={0x77359400}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000019900)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000019940)={'pcl812\x00', [0x100, 0x2, 0x2, 0x10, 0x9, 0x5, 0x0, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100003, 0x80000003, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0x1, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000019a00)={0x0, 0x0, &(0x7f0000019a40)={&(0x7f0000019a80)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x10800, &(0x7f0000001180)=ANY=[], 0x1, 0x188, &(0x7f0000000200)="$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") 19.959151942s ago: executing program 4 (id=1071): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f00000003c0)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000400)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000440)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 17.231451078s ago: executing program 5 (id=1072): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) close(0xffffffffffffffff) r1 = socket(0x2c, 0x3, 0x0) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000180)=0x495, 0x8af07e93f2161987) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000280)={0x2000a210}) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0xffffffed, @mcast1, 0x406}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) close(r7) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x6, @private=0xa010100, 0x15, 0x4, 'dh\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r5, 0x84, 0x84, &(0x7f0000000640)={0x0, @in6={{0xa, 0x388f, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}}, 0x4e23}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000500)={r8, 0x9e, "ef102ceccdafadadde601bc302492857104dc6f2e7044f0adba592e637e9cd6ff21f3d1dad7b859d38d42c78a70f0c32540d19f4b708e5d4fa6b7db8403cdfa1911e9177f13d48b3dde3b5788b5a85e19f4eec5acde22e08175c6a4302f28610f37238e7b0bfa66f1e04ae66ac0394f1e28a118c430006fc075ecb57d959a0499d317c0e9ffe2b8d3f1b325d9dba2968909d66aeded838e4d349ede9a027"}, &(0x7f00000005c0)=0xa6) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) 16.187549784s ago: executing program 0 (id=1073): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x2fd, 0xea94, 0x6, 0x7, 0x4, 0xc091}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x5b, 0x0, 0xf8}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x6}}]}}}]}, 0x6c}}, 0x40844) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f00000001c0), 0x0}, 0x20) 15.817790186s ago: executing program 7 (id=1074): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40c100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r6 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000003c0)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000480)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000004c0)={0x1, 0x55, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000500)={0x105, 0x101, 0x1}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x800) 14.833886912s ago: executing program 4 (id=1075): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000140), 0x2, 0x790, &(0x7f0000000240)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000bc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) flock(r3, 0x2) socket$inet6(0xa, 0x3, 0xff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000c40)=""/169, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000000d00)={&(0x7f0000000d40)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000dc0)=0x9, 0x4) recvmmsg(r7, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0xb0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x1c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xb0}}, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 13.885660797s ago: executing program 0 (id=1076): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$P9_RSTATu(r1, 0x0, 0x6c5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) close(r0) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x2, 0x0) syz_ublk_setup_io_uring(0x31dc, &(0x7f00000008c0)={0x0, 0xedc5, 0x80, 0x3, 0x104}, &(0x7f0000000940), 0x0, &(0x7f00000009c0)) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) 13.569812414s ago: executing program 3 (id=846): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) timerfd_create(0x8, 0x80800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x97}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) read$FUSE(r0, &(0x7f000000fb40)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000db40)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) 11.243339991s ago: executing program 3 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x4040000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000005e80)=ANY=[@ANYBLOB="020d0000100000002f3144e90000000003000600eb1f00000200403fe0000001000000f5000000000800120002000100000000000000000030006c100201009f6eae02000000adb20200000000152c000000ffffffff00010a0014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) 10.913722418s ago: executing program 0 (id=1078): openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc87f957ac3e4ccf8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000004c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x200000000000, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r2, &(0x7f0000000640), 0x800001d, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) r4 = getpid() sched_setattr(r4, &(0x7f00000002c0)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 10.08363064s ago: executing program 4 (id=1079): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0xe, &(0x7f0000000340)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, 0x0, 0x44) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sched_setscheduler(0x0, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f0000000540)="$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") creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001200)='ext4\x00', &(0x7f0000001240)='./bus\x00', 0x44f, &(0x7f0000001280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resuid}, {@dax_never}], [{@subj_user={'subj_user', 0x3d, '/dev/sequencer\x00'}}]}, 0x3, 0x44b, &(0x7f0000001300)="$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") creat(&(0x7f0000001780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140) mknod$loop(&(0x7f00000018c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000001fc0)='./bus\x00') mknod$loop(&(0x7f0000001b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x0) 9.151083314s ago: executing program 7 (id=1080): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$inet6(0x2d, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000019540)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x101042, 0x15) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000100)={'8255\x00', [0x4f23, 0x5, 0x2, 0x0, 0x1, 0x4cc7, 0xfff, 0x46, 0x5, 0x3ff, 0x80, 0x600, 0x1, 0x2, 0x9, 0xe1c9, 0x7, 0x4, 0x3, 0x395, 0x80000089, 0x83, 0xa, 0xffbffff3, 0x3, 0x4, 0xfffffffc, 0xffffffec, 0x4, 0x3, 0xdffffffa]}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0xc600, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00'}, {0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x480}, 0xffffffffffffffff, {[0x9, 0x9, 0xfffffff5, 0x401, 0x5, 0x80, 0xffffffff, 0x2fff]}}, 0x5c) 6.372732344s ago: executing program 4 (id=1081): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x14, r7, 0x309, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000040000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x9, 0xfffffffffffffff7, 0x80000000, 0x100000001]}, &(0x7f0000000080)=0x78) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x200000b, 0x31, 0xffffffffffffffff, 0x2d23000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setresuid(0xee01, 0xee00, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x2) 6.316846455s ago: executing program 0 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x8000, &(0x7f00000004c0)='S\x8d\x181\x8e\t\xbd\v~\xa5\xa3\x1b\x12\x98\xeb\xf6uvF\xcc\xf6\xcd$\x16\x17') prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) 4.300927024s ago: executing program 4 (id=1083): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newaddr={0x2c, 0x14, 0x100, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0x0, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) 2.326319951s ago: executing program 7 (id=1084): msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000940), 0x6e, &(0x7f0000002bc0)=[{&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/28, 0x1c}, {&(0x7f0000000880)=""/8, 0x8}], 0x5, &(0x7f0000002c40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40012180) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x390) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x4, 0xa15, 0x0, 0x0, 0x1000, 0xc4, r1, 0x0, 0x1a2}}}, &(0x7f0000000580)) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b80)='source', &(0x7f0000000bc0)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/232, 0xe8}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000600)={0x0, 0x0, 0x100}, &(0x7f0000000680)=0x0, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000780)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000800)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f0000000840)) 29.094701ms ago: executing program 41 (id=1072): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) close(0xffffffffffffffff) r1 = socket(0x2c, 0x3, 0x0) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000180)=0x495, 0x8af07e93f2161987) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000280)={0x2000a210}) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0xffffffed, @mcast1, 0x406}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) close(r7) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x6, @private=0xa010100, 0x15, 0x4, 'dh\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r5, 0x84, 0x84, &(0x7f0000000640)={0x0, @in6={{0xa, 0x388f, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}}, 0x4e23}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000500)={r8, 0x9e, "ef102ceccdafadadde601bc302492857104dc6f2e7044f0adba592e637e9cd6ff21f3d1dad7b859d38d42c78a70f0c32540d19f4b708e5d4fa6b7db8403cdfa1911e9177f13d48b3dde3b5788b5a85e19f4eec5acde22e08175c6a4302f28610f37238e7b0bfa66f1e04ae66ac0394f1e28a118c430006fc075ecb57d959a0499d317c0e9ffe2b8d3f1b325d9dba2968909d66aeded838e4d349ede9a027"}, &(0x7f00000005c0)=0xa6) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) 1.46558ms ago: executing program 0 (id=1086): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x220}, {0x4, 0xfffb, 0x2000}, {0x4, 0xffff}], 0x55, 0x0) semop(r0, &(0x7f0000000140)=[{0x2}, {0x0, 0x181}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019380)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./sys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000019500)={0xe, 0xe, &(0x7f00000195c0)=ANY=[@ANYBLOB="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"], &(0x7f000001a0c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f000001a100), 0x0, 0x10, &(0x7f000001a140), 0xffa3}, 0x48) mount(0x0, &(0x7f0000019400)='./sys\x00', &(0x7f0000019440)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019480)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r5, &(0x7f00000194c0)='lz4', 0x3) semop(r0, &(0x7f0000000180)=[{0x2, 0x0, 0x2000}], 0x1) r6 = semget$private(0x0, 0x2, 0x412) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000040)=[0x6, 0x6, 0x4c13, 0x3]) r7 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0x6, @sdr={0x34324948, 0x8}}) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 0s ago: executing program 3 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x157) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(r0, &(0x7f0000000f00)='control/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00') symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00') symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00') symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(0x0, &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(0x0, &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, 0x0, 0x0) nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2) r3 = syz_open_dev$video(&(0x7f0000002200), 0x1, 0x2) r4 = syz_open_dev$video(0x0, 0x2, 0x2) r5 = syz_open_dev$video(&(0x7f0000002400), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x401c565a, &(0x7f0000002600)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x401c565a, &(0x7f0000002700)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x401c565a, &(0x7f0000002800)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x401c565a, &(0x7f0000002900)={0x8000004}) kernel console output (not intermixed with test programs): 4.791251][T10108] Symlink component flag not implemented (129) [ 614.791273][T10108] Symlink component flag not implemented (6) [ 614.916000][T10103] syz_tun: entered allmulticast mode [ 615.338486][ T51] IPVS: stop unused estimator thread 0... [ 615.393659][T10103] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 617.362012][ T5615] Bluetooth: hci3: command tx timeout [ 617.441126][ T9920] hsr_slave_0: entered promiscuous mode [ 617.443930][ T9920] hsr_slave_1: entered promiscuous mode [ 617.445926][ T9920] debugfs: 'hsr0' already exists in 'hsr' [ 617.445967][ T9920] Cannot create hsr debugfs directory [ 619.349470][T10138] loop8: detected capacity change from 0 to 2048 [ 619.546083][T10138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.588893][T10050] rxe_eth0 speed is unknown, defaulting to 1000 [ 623.958593][ T5271] 8021q: adding VLAN 0 to HW filter on device eth20 [ 624.033665][T10050] lo speed is unknown, defaulting to 1000 [ 624.651116][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.651251][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.352199][T10157] overlayfs: failed to resolve './file1metacopy=off': -2 [ 628.724848][ T9920] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 629.309959][ T9920] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.342144][ T9920] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 629.373025][ T9920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.426022][ T9920] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 629.445479][ T9920] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 630.151501][T10175] 9pnet_fd: Insufficient options for proto=fd [ 631.517988][ T9920] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 631.573203][ T9920] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 633.171140][T10196] syz.6.869 (10196) used greatest stack depth: 17456 bytes left [ 633.503732][ T51] team0: Port device xfrm0 removed [ 633.610865][T10205] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 634.608254][ T51] bond0 (unregistering): Released all slaves [ 634.836711][ T51] tipc: Disabling bearer [ 634.847304][ T51] tipc: Left network mode [ 634.910477][ T5271] 8021q: adding VLAN 0 to HW filter on device eth21 [ 636.940097][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 638.211126][T10050] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.212034][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.212292][T10050] bridge_slave_0: entered allmulticast mode [ 638.218193][T10050] bridge_slave_0: entered promiscuous mode [ 640.431233][T10050] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.431449][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.431628][T10050] bridge_slave_1: entered allmulticast mode [ 640.478986][T10050] bridge_slave_1: entered promiscuous mode [ 640.652319][ T9920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.813395][T10050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.885795][T10050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.917291][ T9920] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.174278][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.174393][ T7307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.175310][ T148] IPVS: starting estimator thread 0... [ 642.241526][T10050] team0: Port device team_slave_0 added [ 642.263968][T10258] IPVS: using max 37 ests per chain, 88800 per kthread [ 642.287916][T10050] team0: Port device team_slave_1 added [ 642.393035][T10260] loop6: detected capacity change from 0 to 128 [ 642.446602][T10260] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 642.446996][T10260] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.527287][ T51] hsr_slave_0: left promiscuous mode [ 642.537481][ T51] hsr_slave_1: left promiscuous mode [ 643.766163][ T7332] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 643.947399][T10274] loop7: detected capacity change from 0 to 2048 [ 644.692640][T10277] kAFS: unable to lookup cell 'syz1' [ 644.858831][T10274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.610689][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.880'. [ 646.422000][T10288] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 646.423009][T10288] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 646.423057][T10288] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 646.423096][T10288] UDF-fs: Scanning with blocksize 512 failed [ 646.429563][T10288] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 646.430292][T10288] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 646.430317][T10288] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 646.430355][T10288] UDF-fs: Scanning with blocksize 1024 failed [ 646.433661][T10288] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 646.434105][T10288] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 646.434156][T10288] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 646.434193][T10288] UDF-fs: Scanning with blocksize 2048 failed [ 646.436331][T10288] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 646.436624][T10288] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 646.436668][T10288] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 646.436706][T10288] UDF-fs: Scanning with blocksize 4096 failed [ 646.436719][T10288] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 647.900449][T10263] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 648.372257][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.372373][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.403469][ T5271] 8021q: adding VLAN 0 to HW filter on device eth22 [ 648.467932][T10050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.467956][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.467987][T10050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.485546][T10050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.485565][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.485596][T10050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.021295][ T8262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.046796][T10050] hsr_slave_0: entered promiscuous mode [ 649.048146][T10050] hsr_slave_1: entered promiscuous mode [ 649.049019][T10050] debugfs: 'hsr0' already exists in 'hsr' [ 649.049039][T10050] Cannot create hsr debugfs directory [ 649.724006][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 649.745546][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 649.747505][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 649.748557][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 649.749380][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 650.546515][ T51] IPVS: stop unused estimator thread 0... [ 651.821269][ T4927] Bluetooth: hci4: command tx timeout [ 653.900043][ T4927] Bluetooth: hci4: command tx timeout [ 655.955888][T10337] loop7: detected capacity change from 0 to 256 [ 655.980231][ T4927] Bluetooth: hci4: command tx timeout [ 657.224019][T10344] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 657.224052][T10344] FAT-fs (loop7): Filesystem has been set read-only [ 657.224145][T10344] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 657.224173][T10344] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 657.225454][T10344] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 657.225699][T10344] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 657.225726][T10344] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 657.226403][T10344] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 657.226430][T10344] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 657.260517][ T33] kauditd_printk_skb: 253 callbacks suppressed [ 657.260541][ T33] audit: type=1800 audit(1792455739.693:620): pid=10344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.888" name="file1" dev="loop7" ino=146 res=0 errno=-5 [ 657.325888][T10344] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 658.631717][ T4927] Bluetooth: hci4: command tx timeout [ 660.025621][T10362] loop6: detected capacity change from 0 to 764 [ 660.668343][T10362] Symlink component flag not implemented [ 660.668350][T10362] Symlink component flag not implemented [ 660.668396][T10362] Symlink component flag not implemented (129) [ 660.668405][T10362] Symlink component flag not implemented (6) [ 661.139298][ T5271] 8021q: adding VLAN 0 to HW filter on device eth23 [ 661.346666][T10380] loop6: detected capacity change from 0 to 512 [ 662.958328][T10390] FAULT_INJECTION: forcing a failure. [ 662.958328][T10390] name failslab, interval 1, probability 0, space 0, times 0 [ 662.960384][T10390] CPU: 0 UID: 0 PID: 10390 Comm: syz.8.897 Not tainted syzkaller #0 PREEMPT(full) [ 662.960418][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 662.960432][T10390] Call Trace: [ 662.960442][T10390] [ 662.960454][T10390] dump_stack_lvl+0xe8/0x150 [ 662.960495][T10390] should_fail_ex+0x3eb/0x540 [ 662.960527][T10390] should_failslab+0xa8/0x100 [ 662.960558][T10390] ? skb_clone+0x212/0x3a0 [ 662.960590][T10390] kmem_cache_alloc_noprof+0x9c/0x600 [ 662.960630][T10390] ? skb_clone+0x212/0x3a0 [ 662.960668][T10390] skb_clone+0x212/0x3a0 [ 662.960704][T10390] __netlink_deliver_tap+0x355/0x6e0 [ 662.960741][T10390] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.960767][T10390] netlink_deliver_tap+0x19c/0x1b0 [ 662.960793][T10390] netlink_sendskb+0x68/0x140 [ 662.960831][T10390] netlink_rcv_skb+0x2a4/0x4a0 [ 662.960855][T10390] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.960887][T10390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.960942][T10390] ? down_read+0x2b9/0x320 [ 662.960981][T10390] genl_rcv+0x28/0x40 [ 662.961007][T10390] netlink_unicast+0x8ef/0xa80 [ 662.961061][T10390] netlink_sendmsg+0x7f0/0xb20 [ 662.961093][T10390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.961122][T10390] ? aa_sock_msg_perm+0x144/0x210 [ 662.961162][T10390] ? apparmor_socket_sendmsg+0x98/0x360 [ 662.961201][T10390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.961224][T10390] sock_sendmsg_nosec+0x14e/0x190 [ 662.961264][T10390] __sys_sendto+0x408/0x5a0 [ 662.961299][T10390] ? __pfx___sys_sendto+0x10/0x10 [ 662.961368][T10390] __x64_sys_sendto+0xde/0x100 [ 662.961401][T10390] do_syscall_64+0x166/0x520 [ 662.961431][T10390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.961455][T10390] ? clear_bhb_loop+0x70/0xc0 [ 662.961483][T10390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.961507][T10390] RIP: 0033:0x7f0ce835ed8e [ 662.961530][T10390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 662.961551][T10390] RSP: 002b:00007f0ce9306e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 662.961577][T10390] RAX: ffffffffffffffda RBX: 00007f0ce93086c0 RCX: 00007f0ce835ed8e [ 662.961595][T10390] RDX: 0000000000000020 RSI: 00007f0ce9307000 RDI: 0000000000000006 [ 662.961609][T10390] RBP: 0000000000000000 R08: 00007f0ce9306f04 R09: 000000000000000c [ 662.961622][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 662.961635][T10390] R13: 00007f0ce9306f58 R14: 00007f0ce9307000 R15: 0000000000000000 [ 662.961671][T10390] [ 666.614456][T10297] rxe_eth0 speed is unknown, defaulting to 1000 [ 667.272655][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 667.295130][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 667.297365][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 667.298597][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 667.299407][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.633500][ T1388] bridge_slave_1: left allmulticast mode [ 667.633559][ T1388] bridge_slave_1: left promiscuous mode [ 667.633858][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.691365][ T1388] bridge_slave_0: left allmulticast mode [ 667.691397][ T1388] bridge_slave_0: left promiscuous mode [ 667.691769][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.082510][ T1388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.133668][ T1388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.163649][ T1388] bond0 (unregistering): Released all slaves [ 669.233003][T10297] lo speed is unknown, defaulting to 1000 [ 669.420679][ T5615] Bluetooth: hci2: command tx timeout [ 671.886742][ T5615] Bluetooth: hci2: command tx timeout [ 672.184288][ T5271] 8021q: adding VLAN 0 to HW filter on device eth24 [ 672.430991][T10432] loop7: detected capacity change from 0 to 4096 [ 672.447911][T10432] ext4: Unknown parameter 'noacl' [ 673.915818][ T5615] Bluetooth: hci2: command tx timeout [ 676.424167][ T5615] Bluetooth: hci2: command tx timeout [ 676.554374][ T1388] hsr_slave_0: left promiscuous mode [ 676.571842][ T1388] hsr_slave_1: left promiscuous mode [ 676.572936][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.577925][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.663441][T10456] loop7: detected capacity change from 0 to 736 [ 678.549086][ T1388] team0 (unregistering): Port device team_slave_1 removed [ 678.797022][ T1388] team0 (unregistering): Port device team_slave_0 removed [ 681.756528][T10488] loop6: detected capacity change from 0 to 256 [ 681.764454][T10488] exfat: Deprecated parameter 'utf8' [ 681.764481][T10488] exfat: Unknown parameter 'iocharset}iso8859-6' [ 681.946291][ T5271] 8021q: adding VLAN 0 to HW filter on device eth25 [ 681.947138][T10493] loop7: detected capacity change from 0 to 512 [ 682.077192][T10493] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #2: block 8: comm syz.7.911: lblock 0 mapped to illegal pblock 8 (length 1) [ 682.077237][T10493] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 682.080949][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 682.080976][ C0] EXT4-fs (loop7): initial error at time 1792455764: ext4_map_blocks:867: inode 2: block 8 [ 682.081016][ C0] EXT4-fs (loop7): last error at time 1792455764: ext4_map_blocks:867: inode 2: block 8 [ 682.565845][T10491] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 682.566083][T10491] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 682.701166][T10399] rxe_eth0 speed is unknown, defaulting to 1000 [ 682.740305][T10493] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.911: error -EUCLEAN reading directory block [ 682.741063][T10493] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 682.741144][T10493] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #2: block 8: comm syz.7.911: lblock 0 mapped to illegal pblock 8 (length 1) [ 682.741180][T10493] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 682.851335][T10493] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.911: error -EUCLEAN reading directory block [ 682.851414][T10493] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 682.891025][T10493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.953527][T10491] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 682.953681][T10491] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 683.172860][T10491] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 683.173025][T10491] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 683.328034][T10507] ip_tables: iptables: counters copy to user failed while replacing table [ 683.528835][T10507] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #2: block 8: comm syz.7.911: lblock 0 mapped to illegal pblock 8 (length 1) [ 683.725471][T10507] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.911: error -EUCLEAN reading directory block [ 684.295234][T10491] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 684.295401][T10491] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 684.474972][T10512] fuse: Bad value for 'fd' [ 684.540456][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 685.020236][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 685.180161][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 685.265363][T10399] lo speed is unknown, defaulting to 1000 [ 685.403335][ T8262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.439906][T10491] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 685.581783][T10491] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 685.581878][T10491] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 685.721601][T10491] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 685.842052][T10526] loop7: detected capacity change from 0 to 512 [ 685.843084][T10526] EXT4-fs: Ignoring removed bh option [ 685.889428][T10526] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 686.187896][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.188030][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.453612][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 686.750428][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 686.813124][T10530] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #2: block 18: comm syz.7.913: lblock 23 mapped to illegal pblock 18 (length 1) [ 686.818456][T10530] EXT4-fs (loop7): Remounting filesystem read-only [ 687.002333][ T8262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.100667][ T4927] Bluetooth: hci0: command 0x0406 tx timeout [ 687.106273][ T1388] bridge_slave_1: left allmulticast mode [ 687.106306][ T1388] bridge_slave_1: left promiscuous mode [ 687.106549][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.363228][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 687.660490][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout [ 687.757315][ T1388] bridge_slave_0: left allmulticast mode [ 687.757346][ T1388] bridge_slave_0: left promiscuous mode [ 687.759874][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.243541][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 691.298106][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 691.298106][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout [ 691.484006][ T1388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.757284][ T1388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.267347][ T1388] bond0 (unregistering): Released all slaves [ 692.959665][T10567] loop6: detected capacity change from 0 to 1024 [ 693.067888][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.068074][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.068247][T10297] bridge_slave_0: entered allmulticast mode [ 693.141522][T10297] bridge_slave_0: entered promiscuous mode [ 693.147540][T10567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.174060][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.174174][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.174343][T10297] bridge_slave_1: entered allmulticast mode [ 693.217449][T10297] bridge_slave_1: entered promiscuous mode [ 693.340689][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout [ 694.380168][ T33] audit: type=1800 audit(1792455776.833:621): pid=10578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.919" name="file1" dev="loop6" ino=15 res=0 errno=-4 [ 694.569255][ T7332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.907338][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.034117][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.939483][ T1388] hsr_slave_0: left promiscuous mode [ 696.002477][ T1388] hsr_slave_1: left promiscuous mode [ 696.096985][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.247736][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.066334][ T1388] team0 (unregistering): Port device team_slave_1 removed [ 699.178377][ T1388] team0 (unregistering): Port device team_slave_0 removed [ 701.386001][T10297] team0: Port device team_slave_0 added [ 701.408436][T10297] team0: Port device team_slave_1 added [ 701.505184][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.505205][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.505235][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.507919][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.507935][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.507966][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.795730][T10297] hsr_slave_0: entered promiscuous mode [ 702.808061][T10297] hsr_slave_1: entered promiscuous mode [ 702.809053][T10297] debugfs: 'hsr0' already exists in 'hsr' [ 702.809074][T10297] Cannot create hsr debugfs directory [ 704.311427][T10635] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 704.390452][T10624] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 704.659044][T10637] loop8: detected capacity change from 0 to 16 [ 704.677334][T10637] erofs (device loop8): mounted with root inode @ nid 36. [ 704.701187][T10637] erofs (device loop8): xattr_isize 12 of nid 86 is not supported yet [ 704.818014][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.8.927'. [ 705.868297][T10644] FAULT_INJECTION: forcing a failure. [ 705.868297][T10644] name failslab, interval 1, probability 0, space 0, times 0 [ 705.868360][T10644] CPU: 0 UID: 0 PID: 10644 Comm: syz.7.928 Not tainted syzkaller #0 PREEMPT(full) [ 705.868389][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 705.868404][T10644] Call Trace: [ 705.868413][T10644] [ 705.868422][T10644] dump_stack_lvl+0xe8/0x150 [ 705.868460][T10644] should_fail_ex+0x3eb/0x540 [ 705.868495][T10644] ? __alloc_skb+0x1db/0x7a0 [ 705.868514][T10644] should_failslab+0xa8/0x100 [ 705.868569][T10644] ? __alloc_skb+0x1db/0x7a0 [ 705.868593][T10644] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 705.868629][T10644] ? __alloc_skb+0x18d/0x7a0 [ 705.868658][T10644] ? __alloc_skb+0x1db/0x7a0 [ 705.868681][T10644] __alloc_skb+0x1db/0x7a0 [ 705.868718][T10644] sock_wmalloc+0xb2/0x130 [ 705.868752][T10644] pppoe_sendmsg+0x2cd/0x830 [ 705.868778][T10644] ? __lock_acquire+0x747/0x2de0 [ 705.868816][T10644] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 705.868839][T10644] ? apparmor_socket_sendmsg+0x98/0x360 [ 705.868883][T10644] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 705.868909][T10644] sock_sendmsg_nosec+0x14e/0x190 [ 705.868946][T10644] ____sys_sendmsg+0x54e/0x850 [ 705.868981][T10644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.869009][T10644] ? import_iovec+0x73/0xa0 [ 705.869047][T10644] ___sys_sendmsg+0x2a5/0x360 [ 705.869076][T10644] ? __pfx___schedule+0x10/0x10 [ 705.869105][T10644] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.869133][T10644] ? __lock_acquire+0x747/0x2de0 [ 705.869156][T10644] ? irqentry_exit+0x2a0/0x9b0 [ 705.869236][T10644] __sys_sendmmsg+0x273/0x4d0 [ 705.869271][T10644] ? __pfx___sys_sendmmsg+0x10/0x10 [ 705.869299][T10644] ? do_futex+0x3e7/0x4e0 [ 705.869332][T10644] ? __sys_connect+0x3a1/0x450 [ 705.869389][T10644] ? rcu_is_watching+0x16/0xb0 [ 705.869428][T10644] __x64_sys_sendmmsg+0xa0/0xc0 [ 705.869459][T10644] do_syscall_64+0x166/0x520 [ 705.869479][T10644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.869510][T10644] ? clear_bhb_loop+0x70/0xc0 [ 705.869540][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.869561][T10644] RIP: 0033:0x7fc03319e559 [ 705.869582][T10644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.869605][T10644] RSP: 002b:00007fc034059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 705.869622][T10644] RAX: ffffffffffffffda RBX: 00007fc033426090 RCX: 00007fc03319e559 [ 705.869633][T10644] RDX: 00000000000003e8 RSI: 0000200000000640 RDI: 0000000000000005 [ 705.869643][T10644] RBP: 00007fc033235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 705.869667][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.869682][T10644] R13: 00007fc033426128 R14: 00007fc033426090 R15: 00007ffd27a4c3b8 [ 705.869718][T10644] [ 707.318334][ T51] rpcbind: server 127.0.0.1 not responding, timed out [ 707.702237][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.702354][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.702495][T10399] bridge_slave_0: entered allmulticast mode [ 707.723012][T10399] bridge_slave_0: entered promiscuous mode [ 707.775121][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.775277][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.775502][T10399] bridge_slave_1: entered allmulticast mode [ 707.778854][T10399] bridge_slave_1: entered promiscuous mode [ 707.936395][T10653] netlink: 68 bytes leftover after parsing attributes in process `syz.6.930'. [ 708.033573][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.060923][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.261821][ T26] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 708.407347][T10399] team0: Port device team_slave_0 added [ 708.424254][ T26] usb 7-1: New USB device found: idVendor=174c, idProduct=55aa, bcdDevice=1.00 [ 708.440932][ T26] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.441003][ T26] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 708.443881][T10399] team0: Port device team_slave_1 added [ 708.483113][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.483142][ T26] usb 7-1: Product: syz [ 708.483158][ T26] usb 7-1: Manufacturer: syz [ 708.483199][ T26] usb 7-1: SerialNumber: syz [ 708.515984][ T26] usb-storage 7-1:1.0: USB Mass Storage device detected [ 708.554563][ T26] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 708.558382][ T26] scsi host1: usb-storage 7-1:1.0 [ 708.621003][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.621031][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.621061][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.628844][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.628863][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.628893][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.944332][T10670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 710.397735][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 710.412659][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 710.415177][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 710.416336][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 710.417062][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 710.577893][T10399] hsr_slave_0: entered promiscuous mode [ 710.587414][T10399] hsr_slave_1: entered promiscuous mode [ 710.588246][T10399] debugfs: 'hsr0' already exists in 'hsr' [ 710.588268][T10399] Cannot create hsr debugfs directory [ 710.834671][ T5748] usb 7-1: USB disconnect, device number 4 [ 712.540072][ T4927] Bluetooth: hci3: command tx timeout [ 714.622653][ T4927] Bluetooth: hci3: command tx timeout [ 714.721172][ T1381] bridge_slave_1: left allmulticast mode [ 714.721233][ T1381] bridge_slave_1: left promiscuous mode [ 714.721534][ T1381] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.725873][ T1381] bridge_slave_0: left allmulticast mode [ 714.725903][ T1381] bridge_slave_0: left promiscuous mode [ 714.728403][ T1381] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.083767][ T1381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.088196][ T1381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.108697][ T1381] bond0 (unregistering): Released all slaves [ 715.223682][T10399] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.325484][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.343258][T10399] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 716.314607][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 716.430636][T10399] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 716.525924][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 716.527382][T10399] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 716.613265][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 716.716400][ T4927] Bluetooth: hci3: command tx timeout [ 717.350830][T10716] loop8: detected capacity change from 0 to 512 [ 717.353589][T10716] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 717.353611][T10716] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 717.454864][T10716] EXT4-fs (loop8): 1 truncate cleaned up [ 717.460711][T10716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.369850][ T9388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.585624][T10671] rxe_eth0 speed is unknown, defaulting to 1000 [ 718.800121][ T4927] Bluetooth: hci3: command tx timeout [ 718.943371][T10399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.690274][ T5727] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 719.752544][ T1381] hsr_slave_0: left promiscuous mode [ 719.755458][ T1381] hsr_slave_1: left promiscuous mode [ 719.756415][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.774077][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.795180][T10737] loop6: detected capacity change from 0 to 1024 [ 719.864692][ T5727] usb 8-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 719.866264][ T5727] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.896263][ T5727] usb 8-1: config 0 descriptor?? [ 719.943195][ T5727] cp210x 8-1:0.0: cp210x converter detected [ 721.759305][ T5727] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 721.759455][ T5727] cp210x 8-1:0.0: querying part number failed [ 721.827746][ T5727] usb 8-1: cp210x converter now attached to ttyUSB0 [ 721.875895][ T5727] usb 8-1: USB disconnect, device number 4 [ 721.916138][ T5727] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 721.933258][ T5727] cp210x 8-1:0.0: device disconnected [ 722.302676][T10762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.168455][ T1381] team0 (unregistering): Port device team_slave_1 removed [ 723.258073][T10765] comedi comedi1: pc212e: a I/O base address must be specified [ 723.291752][T10765] overlayfs: failed to resolve './file1/file0': -2 [ 723.413638][ T1381] team0 (unregistering): Port device team_slave_0 removed [ 725.848861][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.944'. [ 725.848963][T10671] lo speed is unknown, defaulting to 1000 [ 725.994527][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.150726][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.150843][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.175478][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.175588][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.094381][T10808] loop8: detected capacity change from 0 to 256 [ 728.269834][T10813] nvmet: adding nsid 1 to subsystem testsubsys [ 728.305633][T10813] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 728.307294][T10813] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 728.319834][T10813] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 728.343137][T10813] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 728.345791][T10813] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 728.643176][T10816] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 728.643245][T10816] FAT-fs (loop8): Filesystem has been set read-only [ 728.644055][T10816] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 728.644107][T10816] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 728.644328][T10816] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 728.644397][T10816] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 728.647495][T10816] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000006) [ 728.670321][ T33] audit: type=1800 audit(1792455811.113:622): pid=10816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.951" name="file2" dev="loop8" ino=147 res=0 errno=-5 [ 729.248246][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 729.277628][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 729.291127][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 729.316871][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 729.319575][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 731.629414][ T5615] Bluetooth: hci4: command tx timeout [ 733.049065][T10840] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 733.049065][T10840] [ 733.049539][T10840] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 733.070435][T10840] CIFS: Attempting to mount //172.20.20.170/share [ 733.477942][T10671] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.478097][T10671] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.478298][T10671] bridge_slave_0: entered allmulticast mode [ 733.499225][T10671] bridge_slave_0: entered promiscuous mode [ 733.662383][ T5615] Bluetooth: hci4: command tx timeout [ 733.725338][T10671] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.727042][T10671] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.766568][T10671] bridge_slave_1: entered allmulticast mode [ 733.886955][T10671] bridge_slave_1: entered promiscuous mode [ 734.894298][T10840] CIFS: VFS: cifs_mount failed w/return code = -512 [ 735.032794][T10671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.055757][T10671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.164429][T10671] team0: Port device team_slave_0 added [ 735.196513][T10671] team0: Port device team_slave_1 added [ 735.270658][ T5748] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 735.422085][ T5748] usb 7-1: Using ep0 maxpacket: 16 [ 735.429872][ T5748] usb 7-1: New USB device found: idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 735.451166][ T5748] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.474734][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 735.474818][ T5748] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 735.474891][ T5748] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.499532][ T5748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.499581][ T5748] usb 7-1: Product: syz [ 735.499598][ T5748] usb 7-1: Manufacturer: syz [ 735.499697][ T5748] usb 7-1: SerialNumber: syz [ 735.740090][ T5615] Bluetooth: hci4: command tx timeout [ 735.821698][T10872] loop8: detected capacity change from 0 to 128 [ 735.908514][T10872] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 735.949753][T10872] qnx6: wrong signature (magic) in superblock #1. [ 735.949810][T10872] qnx6: unable to read the first superblock [ 736.056462][ T5748] usb 7-1: config 0 descriptor?? [ 736.421829][ T5748] mcba_usb 7-1:0.0: Can't find endpoints [ 737.233991][T10671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.234052][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.378921][T10671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.551107][T10671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.551130][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.551161][T10671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.826045][ T5615] Bluetooth: hci4: command tx timeout [ 737.959298][T10671] hsr_slave_0: entered promiscuous mode [ 737.968104][T10671] hsr_slave_1: entered promiscuous mode [ 737.969344][T10671] debugfs: 'hsr0' already exists in 'hsr' [ 737.969395][T10671] Cannot create hsr debugfs directory [ 738.738503][ T868] usb 7-1: USB disconnect, device number 5 [ 740.723551][T10907] loop7: detected capacity change from 0 to 256 [ 742.738033][T10907] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0x110eabd0, checksum : 0x1119abd0) [ 742.738088][T10907] exFAT-fs (loop7): invalid boot region [ 742.738097][T10907] exFAT-fs (loop7): failed to recognize exfat type [ 742.769073][T10817] rxe_eth0 speed is unknown, defaulting to 1000 [ 742.786873][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.966'. [ 742.786985][T10906] warning: `syz.7.967' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 747.086443][T10817] lo speed is unknown, defaulting to 1000 [ 747.246561][ T1381] bridge_slave_1: left allmulticast mode [ 747.246592][ T1381] bridge_slave_1: left promiscuous mode [ 747.246880][ T1381] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.276450][ T1381] bridge_slave_0: left allmulticast mode [ 747.276485][ T1381] bridge_slave_0: left promiscuous mode [ 747.280765][ T1381] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.701367][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.701487][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.699231][ T1381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.715066][ T1381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.731749][ T1381] bond0 (unregistering): Released all slaves [ 750.340320][T10957] loop7: detected capacity change from 0 to 32768 [ 750.344159][T10957] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.972 (10957) [ 750.397200][T10954] bridge0: port 3(wlan0) entered blocking state [ 750.397331][T10954] bridge0: port 3(wlan0) entered disabled state [ 750.397533][T10954] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 750.428063][T10957] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 750.428165][T10957] BTRFS info (device loop7): using sha256 checksum algorithm [ 750.451979][T10954] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 750.467464][T10954] bridge0: port 3(wlan0) entered blocking state [ 750.467592][T10954] bridge0: port 3(wlan0) entered forwarding state [ 750.581032][T10957] BTRFS info (device loop7): enabling ssd optimizations [ 750.581065][T10957] BTRFS info (device loop7): turning on sync discard [ 750.581106][T10957] BTRFS info (device loop7): enabling free space tree [ 750.581224][T10957] BTRFS info (device loop7): use zlib compression, level 3 [ 753.484439][ T868] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 753.549640][ T8262] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 753.669252][ T868] usb 9-1: Using ep0 maxpacket: 8 [ 753.669728][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 753.675427][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 753.760966][ T868] usb 9-1: device descriptor read/all, error -71 [ 755.918797][T10994] tipc: Started in network mode [ 755.918863][T10994] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 755.919695][T10994] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 755.925699][T10994] tipc: Enabled bearer , priority 10 [ 758.141388][ T1381] hsr_slave_0: left promiscuous mode [ 758.169555][ T1381] hsr_slave_1: left promiscuous mode [ 758.183147][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.217898][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.236707][ T1381] team0 (unregistering): Port device team_slave_1 removed [ 759.298099][ T1381] team0 (unregistering): Port device team_slave_0 removed [ 759.655378][ T7983] tipc: Node number set to 1 [ 763.260312][T11034] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 763.260697][T11034] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 763.268892][T11034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 763.269289][T11034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 763.269446][T11034] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 763.341239][T11034] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 763.481680][T11034] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 763.481767][T11034] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 763.522446][T11034] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 763.578901][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.579000][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.579145][T10817] bridge_slave_0: entered allmulticast mode [ 763.606483][T10817] bridge_slave_0: entered promiscuous mode [ 763.629564][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.629640][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.629781][T10817] bridge_slave_1: entered allmulticast mode [ 763.670614][T10817] bridge_slave_1: entered promiscuous mode [ 763.757819][T10671] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 763.785723][T10671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.879404][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.879512][T10671] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 763.921951][T10671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.439663][T11048] could not allocate digest TFM handle hmac(streebog512) [ 764.687318][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.687556][T10671] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 764.741092][T10671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 765.523500][T11060] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 766.774983][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 766.775165][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 766.775251][ T4927] Bluetooth: hci0: command 0x0406 tx timeout [ 766.775324][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 766.775806][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 766.922380][T10671] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 766.967687][T10671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 767.055005][T10817] team0: Port device team_slave_0 added [ 767.090289][T10817] team0: Port device team_slave_1 added [ 768.444096][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.444117][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.444148][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.523160][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.523180][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.523211][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.780091][T10400] Bluetooth: hci3: command 0x0c1a tx timeout [ 768.780208][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 769.054164][T10817] hsr_slave_0: entered promiscuous mode [ 769.069216][T10817] hsr_slave_1: entered promiscuous mode [ 769.098227][T10817] debugfs: 'hsr0' already exists in 'hsr' [ 769.098270][T10817] Cannot create hsr debugfs directory [ 769.423262][T10400] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 769.451931][T10400] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 769.463022][T10400] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 769.464109][T10400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 769.464839][T10400] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 770.760070][T11106] netlink: 200 bytes leftover after parsing attributes in process `syz.8.987'. [ 770.864215][T11107] netlink: 'syz.8.987': attribute type 10 has an invalid length. [ 770.975555][T10400] Bluetooth: hci4: command 0x0c1a tx timeout [ 771.115148][T11097] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 771.522711][T10400] Bluetooth: hci2: command tx timeout [ 771.757534][T11107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.794550][T11107] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 773.580430][T10400] Bluetooth: hci2: command tx timeout [ 774.288541][T11126] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 775.660200][T10400] Bluetooth: hci2: command tx timeout [ 776.531639][T11090] rxe_eth0 speed is unknown, defaulting to 1000 [ 777.740655][T10400] Bluetooth: hci2: command tx timeout [ 777.792839][ T1381] bridge_slave_1: left allmulticast mode [ 777.792869][ T1381] bridge_slave_1: left promiscuous mode [ 777.793159][ T1381] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.821646][ T1381] bridge_slave_0: left allmulticast mode [ 777.821666][ T1381] bridge_slave_0: left promiscuous mode [ 777.821916][ T1381] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.255702][ T1381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.286650][ T1381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.301379][ T1381] bond0 (unregistering): Released all slaves [ 778.333805][T11090] lo speed is unknown, defaulting to 1000 [ 779.388818][T10817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 779.417344][T10817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 779.419406][T10817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 779.469208][T10817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 779.566093][T10817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 779.611299][T10817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 779.614026][T10817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 779.702710][T10817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 779.762767][ T1381] hsr_slave_0: left promiscuous mode [ 779.779196][ T1381] hsr_slave_1: left promiscuous mode [ 779.790759][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.792849][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.413784][ T1381] team0 (unregistering): Port device team_slave_1 removed [ 780.465692][ T1381] team0 (unregistering): Port device team_slave_0 removed [ 781.046634][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 781.809106][T11090] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.809276][T11090] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.809423][T11090] bridge_slave_0: entered allmulticast mode [ 781.845064][T11090] bridge_slave_0: entered promiscuous mode [ 781.902559][T11090] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.904100][T11090] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.904268][T11090] bridge_slave_1: entered allmulticast mode [ 781.932688][T11090] bridge_slave_1: entered promiscuous mode [ 782.064229][T11090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.097393][T11090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.391286][T11090] team0: Port device team_slave_0 added [ 782.424409][T11090] team0: Port device team_slave_1 added [ 782.660967][T11090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.660987][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.661015][T11090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.728360][T10817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.738817][T11090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.738854][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.738908][T11090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.880260][T11090] hsr_slave_0: entered promiscuous mode [ 782.885004][T11090] hsr_slave_1: entered promiscuous mode [ 782.886855][T11090] debugfs: 'hsr0' already exists in 'hsr' [ 782.887055][T11090] Cannot create hsr debugfs directory [ 783.036706][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.219369][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.219474][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.251483][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 783.319840][ T1388] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.320011][ T1388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.968686][T11090] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 784.983236][T11090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.984239][T11090] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 784.987959][T11090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.988976][T11090] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 785.026958][T11090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.028013][T11090] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 785.050147][T11090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.204085][T11090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.250774][T11090] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.277265][ T1381] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.277419][ T1381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.314686][ T1388] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.314815][ T1388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.363762][T10817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.515881][T10817] veth0_vlan: entered promiscuous mode [ 785.547917][T10817] veth1_vlan: entered promiscuous mode [ 785.634853][T10817] veth0_macvtap: entered promiscuous mode [ 785.657917][T10817] veth1_macvtap: entered promiscuous mode [ 785.714780][T10817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.749511][T10817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.834942][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.979425][ T1381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.981501][ T1381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.040764][ T1381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.139571][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.139596][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.254399][ T298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.254423][ T298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.543587][T11090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.975668][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 786.991028][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 787.001054][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 787.009437][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 787.018264][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 787.237892][T11090] veth0_vlan: entered promiscuous mode [ 787.258510][T11090] veth1_vlan: entered promiscuous mode [ 787.323729][T11090] veth0_macvtap: entered promiscuous mode [ 787.329361][T11090] veth1_macvtap: entered promiscuous mode [ 787.370946][T11090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.379569][T11090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.560715][ T28] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.562011][ T28] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.566776][ T28] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.567193][ T28] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.701276][ T9416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.701302][ T9416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.752080][ T9416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.752105][ T9416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.736174][T11285] block nbd6: NBD_DISCONNECT [ 790.704718][T10400] Bluetooth: hci3: command tx timeout [ 791.050740][T11284] loop7: detected capacity change from 0 to 2048 [ 791.111025][ T9416] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.369081][T11284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 792.657868][ T9416] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.784318][T10400] Bluetooth: hci3: command tx timeout [ 792.834842][ T9416] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.009479][T11307] Process accounting resumed [ 795.497809][T10400] Bluetooth: hci3: command tx timeout [ 796.566464][ T9416] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.680698][T11258] rxe_eth0 speed is unknown, defaulting to 1000 [ 797.508045][T10400] Bluetooth: hci3: command tx timeout [ 798.483521][T11332] loop9: detected capacity change from 0 to 1024 [ 799.940326][T11332] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 799.993608][T11332] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 799.994018][T11332] EXT4-fs (loop9): orphan cleanup on readonly fs [ 799.994915][T11332] EXT4-fs error (device loop9): ext4_free_blocks:6717: comm syz.9.994: Freeing blocks not in datazone - block = 0, count = 4096 [ 799.994952][T11332] loop9: lost filesystem error report for type 5 error -117 [ 800.016125][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 800.016155][ C0] EXT4-fs (loop9): initial error at time 1792455882: ext4_free_blocks:6717 [ 800.016172][ C0] EXT4-fs (loop9): last error at time 1792455882: ext4_free_blocks:6717 [ 800.095353][T11332] EXT4-fs (loop9): 1 orphan inode deleted [ 800.116963][T11332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 802.140146][T11090] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.307036][T11338] Process accounting resumed [ 802.576778][ T9416] bridge_slave_1: left allmulticast mode [ 802.576836][ T9416] bridge_slave_1: left promiscuous mode [ 802.577115][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.664973][ T9416] bridge_slave_0: left allmulticast mode [ 802.665006][ T9416] bridge_slave_0: left promiscuous mode [ 802.667152][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.834636][ T9416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.870646][ T9416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.893009][ T9416] bond0 (unregistering): Released all slaves [ 805.924167][T11351] lo: entered promiscuous mode [ 805.926700][T11351] tunl0: entered promiscuous mode [ 805.928041][T11351] gre0: entered promiscuous mode [ 805.937654][T11351] gretap0: entered promiscuous mode [ 805.955278][T11351] erspan0: entered promiscuous mode [ 805.958382][T11351] ip_vti0: entered promiscuous mode [ 805.960614][T11351] ip6_vti0: entered promiscuous mode [ 805.963078][T11351] sit0: entered promiscuous mode [ 805.966369][T11351] ip6tnl0: entered promiscuous mode [ 805.968825][T11351] ip6gre0: entered promiscuous mode [ 805.982694][T11351] syz_tun: entered promiscuous mode [ 806.006809][T11351] ip6gretap0: entered promiscuous mode [ 806.012967][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.014666][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.015942][T11351] bridge0: entered promiscuous mode [ 806.023611][T11351] vcan0: entered promiscuous mode [ 806.100883][T11351] bond0: entered promiscuous mode [ 806.100909][T11351] bond_slave_0: entered promiscuous mode [ 806.101219][T11351] bond_slave_1: entered promiscuous mode [ 806.106481][T11351] team0: entered promiscuous mode [ 806.106506][T11351] team_slave_0: entered promiscuous mode [ 806.106768][T11351] team_slave_1: entered promiscuous mode [ 806.111751][T11351] dummy0: entered promiscuous mode [ 806.169596][T11351] nlmon0: entered promiscuous mode [ 806.175199][T11351] batadv0: entered promiscuous mode [ 806.183717][T11351] vxcan0: entered promiscuous mode [ 806.184896][T11351] vxcan1: entered promiscuous mode [ 806.185686][T11351] veth0: entered promiscuous mode [ 806.187674][T11351] veth1: entered promiscuous mode [ 806.225202][T11351] wg0: entered promiscuous mode [ 806.242422][T11351] wg1: entered promiscuous mode [ 806.246675][T11351] wg2: entered promiscuous mode [ 806.248431][T11351] veth0_to_bridge: entered promiscuous mode [ 806.262673][T11351] veth1_to_bridge: entered promiscuous mode [ 806.273911][T11351] veth0_to_bond: entered promiscuous mode [ 806.276397][T11351] veth1_to_bond: entered promiscuous mode [ 806.278798][T11351] veth0_to_team: entered promiscuous mode [ 806.290522][T11351] veth1_to_team: entered promiscuous mode [ 806.304223][T11351] veth0_to_batadv: entered promiscuous mode [ 806.306034][T11351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.306077][T11351] batadv_slave_0: entered promiscuous mode [ 806.308002][T11351] veth1_to_batadv: entered promiscuous mode [ 806.309557][T11351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.309594][T11351] batadv_slave_1: entered promiscuous mode [ 806.318080][T11351] xfrm0: entered promiscuous mode [ 806.325968][T11351] veth0_to_hsr: entered promiscuous mode [ 806.340877][T11351] veth1_to_hsr: entered promiscuous mode [ 806.360750][T11351] hsr0: entered promiscuous mode [ 806.369599][T11351] veth1_virt_wifi: entered promiscuous mode [ 806.377774][T11351] veth0_virt_wifi: entered promiscuous mode [ 806.379586][T11351] virt_wifi0: entered promiscuous mode [ 806.393365][T11351] vlan0: entered promiscuous mode [ 806.395483][T11351] vlan1: entered promiscuous mode [ 806.425917][T11351] macvlan0: entered promiscuous mode [ 806.448523][T11351] macvlan1: entered promiscuous mode [ 806.461606][T11351] ipvlan0: entered promiscuous mode [ 806.461853][T11351] ipvlan1: entered promiscuous mode [ 806.494087][T11351] macvtap0: entered promiscuous mode [ 806.497160][T11351] macsec0: entered promiscuous mode [ 806.500908][T11351] geneve0: entered promiscuous mode [ 806.506929][T11351] geneve1: entered promiscuous mode [ 806.524062][T11351] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 806.542427][T11351] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 806.545483][T11351] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 806.548335][T11351] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 806.589454][T11351] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 806.598137][T11351] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 806.599302][T11351] gtp0: entered promiscuous mode [ 806.618179][T11351] bond1: left allmulticast mode [ 806.618199][T11351] ip6gretap1: left allmulticast mode [ 806.631778][T11351] bond3: entered promiscuous mode [ 806.651129][ T63] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.651188][ T63] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.651230][ T63] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.651272][ T63] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.753801][T11258] lo speed is unknown, defaulting to 1000 [ 807.459570][T11380] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1003'. [ 808.162572][T11382] loop8: detected capacity change from 0 to 512 [ 808.878215][T11382] EXT4-fs: test_dummy_encryption requires encrypt feature [ 808.968398][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.444404][T11394] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[11395] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[11394] [ 815.574753][T11407] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 815.996710][ T9416] hsr_slave_0: left promiscuous mode [ 816.007489][ T9416] hsr_slave_1: left promiscuous mode [ 816.008529][ T9416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.008558][ T9416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.024868][ T9416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.024896][ T9416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.114185][ T9416] veth1_macvtap: left promiscuous mode [ 816.114238][ T9416] veth0_macvtap: left promiscuous mode [ 816.114349][ T9416] veth1_vlan: left promiscuous mode [ 816.114423][ T9416] veth0_vlan: left promiscuous mode [ 816.473960][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 816.487362][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 816.507747][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 816.512527][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 816.525382][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 817.527332][ T9416] team0 (unregistering): Port device team_slave_1 removed [ 817.582084][ T9416] team0 (unregistering): Port device team_slave_0 removed [ 818.620798][T10400] Bluetooth: hci4: command tx timeout [ 819.573161][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 819.714566][T11447] FAULT_INJECTION: forcing a failure. [ 819.714566][T11447] name failslab, interval 1, probability 0, space 0, times 0 [ 819.714608][T11447] CPU: 0 UID: 0 PID: 11447 Comm: syz.8.1011 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.714656][T11447] Tainted: [L]=SOFTLOCKUP [ 819.714665][T11447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 819.714685][T11447] Call Trace: [ 819.714694][T11447] [ 819.714705][T11447] dump_stack_lvl+0xe8/0x150 [ 819.714748][T11447] should_fail_ex+0x3eb/0x540 [ 819.714781][T11447] should_failslab+0xa8/0x100 [ 819.714815][T11447] __kmalloc_cache_noprof+0x9e/0x600 [ 819.714842][T11447] ? init_srcu_struct_fields+0x83/0xbd0 [ 819.714870][T11447] ? init_srcu_struct_fields+0x83/0xbd0 [ 819.714916][T11447] init_srcu_struct_fields+0x83/0xbd0 [ 819.714972][T11447] hci_alloc_dev_priv+0x4a/0x2150 [ 819.715030][T11447] hci_uart_tty_ioctl+0x3b7/0xa80 [ 819.715068][T11447] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 819.715100][T11447] tty_ioctl+0x9bd/0xde0 [ 819.715127][T11447] ? __pfx_tty_ioctl+0x10/0x10 [ 819.715154][T11447] __se_sys_ioctl+0xfc/0x170 [ 819.715188][T11447] do_syscall_64+0x166/0x520 [ 819.715217][T11447] ? trace_irq_disable+0x3b/0x140 [ 819.715246][T11447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.715269][T11447] ? clear_bhb_loop+0x70/0xc0 [ 819.715296][T11447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.715320][T11447] RIP: 0033:0x7f0ce839e559 [ 819.715343][T11447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.715362][T11447] RSP: 002b:00007f0ce9329028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 819.715389][T11447] RAX: ffffffffffffffda RBX: 00007f0ce8625fa0 RCX: 00007f0ce839e559 [ 819.715517][T11447] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 819.715544][T11447] RBP: 00007f0ce8435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 819.715560][T11447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.715572][T11447] R13: 00007f0ce8626038 R14: 00007f0ce8625fa0 R15: 00007ffdd13008c8 [ 819.715614][T11447] [ 819.718407][T11447] Bluetooth: Can't allocate HCI device [ 821.759855][T10400] Bluetooth: hci4: command tx timeout [ 822.062025][T11258] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.062206][T11258] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.062398][T11258] bridge_slave_0: entered allmulticast mode [ 822.093933][T11258] bridge_slave_0: entered promiscuous mode [ 822.118740][T11258] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.118957][T11258] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.119155][T11258] bridge_slave_1: entered allmulticast mode [ 822.142765][T11258] bridge_slave_1: entered promiscuous mode [ 822.271479][T11258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.298564][T11258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.468720][T11258] team0: Port device team_slave_0 added [ 822.492580][T11258] team0: Port device team_slave_1 added [ 822.585587][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1014'. [ 822.845856][T11258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.845878][T11258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.845910][T11258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.105966][T11258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.106572][T11258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.106745][T11258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.823309][T10400] Bluetooth: hci4: command tx timeout [ 824.015499][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1016'. [ 825.148920][ T9416] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.569261][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1017'. [ 825.808348][T11258] hsr_slave_0: entered promiscuous mode [ 825.822967][T11258] hsr_slave_1: entered promiscuous mode [ 825.833166][T11258] debugfs: 'hsr0' already exists in 'hsr' [ 825.833186][T11258] Cannot create hsr debugfs directory [ 825.833448][T11425] rxe_eth0 speed is unknown, defaulting to 1000 [ 825.900085][ T5615] Bluetooth: hci4: command tx timeout [ 827.122347][T11488] netlink: 'syz.7.1018': attribute type 2 has an invalid length. [ 828.789466][ T9416] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.999493][ T33] audit: type=1326 audit(1792455911.463:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.6.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b779e559 code=0x7ffc0000 [ 828.999715][ T33] audit: type=1326 audit(1792455911.463:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.6.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b779e559 code=0x7ffc0000 [ 829.101599][ T33] audit: type=1326 audit(1792455911.573:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.6.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7b779e559 code=0x7ffc0000 [ 829.101665][ T33] audit: type=1326 audit(1792455911.573:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.6.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b779e559 code=0x7ffc0000 [ 829.101715][ T33] audit: type=1326 audit(1792455911.573:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.6.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b779e559 code=0x7ffc0000 [ 829.112136][ T33] audit: type=1326 audit(1792455911.573:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.6.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb7b779e559 code=0x7ffc0000 [ 829.124768][ T33] audit: type=1326 audit(1792455911.573:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.6.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b779e559 code=0x7ffc0000 [ 829.124931][ T33] audit: type=1326 audit(1792455911.573:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.6.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b779e559 code=0x7ffc0000 [ 829.140815][ T33] audit: type=1326 audit(1792455911.603:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.6.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb7b779e559 code=0x7ffc0000 [ 829.141000][ T33] audit: type=1326 audit(1792455911.603:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.6.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b779e559 code=0x7ffc0000 [ 829.769269][ T9416] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.992859][T11425] lo speed is unknown, defaulting to 1000 [ 830.404235][ T9416] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.635594][T10400] Bluetooth: hci1: unexpected event for opcode 0x200c [ 838.191446][T10239] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 838.322289][T10239] usb 9-1: device descriptor read/64, error -71 [ 838.629619][T10239] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 838.690579][ T9416] bridge_slave_1: left allmulticast mode [ 838.690601][ T9416] bridge_slave_1: left promiscuous mode [ 838.690811][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.767975][ T9416] bridge_slave_0: left allmulticast mode [ 838.767999][ T9416] bridge_slave_0: left promiscuous mode [ 838.768251][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.782512][T10239] usb 9-1: device descriptor read/64, error -71 [ 838.893165][T10239] usb usb9-port1: attempt power cycle [ 839.629231][T10239] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 840.955036][T10239] usb 9-1: device descriptor read/8, error -71 [ 841.232682][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 841.253828][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 841.277171][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 841.294579][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 841.299225][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 841.876665][ T9416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.968100][ T9416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.999442][ T9416] bond0 (unregistering): Released all slaves [ 842.098944][T11538] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 842.098986][T11538] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 842.099032][T11538] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 842.688261][T11493] syz_tun (unregistering): left allmulticast mode [ 843.420116][T10400] Bluetooth: hci2: command tx timeout [ 845.166108][T11425] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.166294][T11425] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.166529][T11425] bridge_slave_0: entered allmulticast mode [ 845.206543][T11425] bridge_slave_0: entered promiscuous mode [ 845.243745][ T5271] 8021q: adding VLAN 0 to HW filter on device eth27 [ 845.288257][ T9416] hsr_slave_0: left promiscuous mode [ 845.301373][ T9416] hsr_slave_1: left promiscuous mode [ 845.302390][ T9416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.302422][ T9416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.303329][ T9416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.303343][ T9416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.354407][ T9416] veth1_macvtap: left promiscuous mode [ 845.354473][ T9416] veth0_macvtap: left promiscuous mode [ 845.354585][ T9416] veth1_vlan: left promiscuous mode [ 845.354658][ T9416] veth0_vlan: left promiscuous mode [ 845.500700][T10400] Bluetooth: hci2: command tx timeout [ 846.156288][ T9416] team0 (unregistering): Port device team_slave_1 removed [ 846.221328][T11575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7973 instead [ 846.221627][T11575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0003 instead [ 846.221672][T11575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x0003 instead [ 846.221738][T11575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x001e instead [ 846.221781][T11575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000005c: 0x387a instead [ 846.221823][T11575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000060: 0x0400 instead [ 846.221897][T11575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000064: 0xf9dc instead [ 846.221939][T11575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000068: 0x000d instead [ 846.221982][T11575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000006c: 0x8b48 instead [ 846.222058][T11575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x0002 instead [ 846.222186][T11575] jffs2: Further such events for this erase block will not be printed [ 846.222828][T11575] jffs2: Empty flash at 0x00000200 ends at 0x00000204 [ 846.223607][T11575] jffs2: Empty flash at 0x00000420 ends at 0x00000424 [ 846.229363][T11575] jffs2: notice: (11575) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 846.407432][ T9416] team0 (unregistering): Port device team_slave_0 removed [ 847.495842][T11425] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.518616][T11425] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.518852][T11425] bridge_slave_1: entered allmulticast mode [ 847.572655][T11425] bridge_slave_1: entered promiscuous mode [ 847.585789][T10400] Bluetooth: hci2: command tx timeout [ 849.708118][T10400] Bluetooth: hci2: command tx timeout [ 850.306849][T10400] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 850.345317][T10400] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 850.346990][T10400] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 850.370612][T10400] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 850.371943][T10400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 850.854432][T11425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.989470][T11425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.989589][T11542] rxe_eth0 speed is unknown, defaulting to 1000 [ 851.513552][T11425] team0: Port device team_slave_0 added [ 851.653248][T11425] team0: Port device team_slave_1 added [ 851.843536][T11425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.843561][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.843590][T11425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.045608][T11425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.045628][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.045662][T11425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.422014][T11425] hsr_slave_0: entered promiscuous mode [ 852.435222][T11425] hsr_slave_1: entered promiscuous mode [ 852.440302][T11425] debugfs: 'hsr0' already exists in 'hsr' [ 852.440329][T11425] Cannot create hsr debugfs directory [ 852.465491][ T5615] Bluetooth: hci5: command tx timeout [ 853.198631][T11542] lo speed is unknown, defaulting to 1000 [ 854.461945][T11623] loop7: detected capacity change from 0 to 4096 [ 854.468175][T11623] ntfs3: unknown option "sjowmeta". Use uid,gid,umask,dmask,fmask,sys_immutable,discard,force,sparse,nohidden,hide_dot_files,windows_names,showmeta,acl,iocharset,prealloc,nocase,delalloc,ads,ugm [ 854.468305][T11623] ntfs3: Unknown parameter 'sjowmeta' [ 855.673391][ T5615] Bluetooth: hci5: command tx timeout [ 856.086810][T11587] rxe_eth0 speed is unknown, defaulting to 1000 [ 857.249057][T11587] lo speed is unknown, defaulting to 1000 [ 857.740419][T10400] Bluetooth: hci5: command tx timeout [ 860.125644][T10400] Bluetooth: hci5: command tx timeout [ 860.385644][T11645] loop8: detected capacity change from 0 to 512 [ 860.408649][T11645] EXT4-fs: Ignoring removed bh option [ 860.410201][T11645] EXT4-fs: quotafile must be on filesystem root [ 860.592892][T11645] loop8: detected capacity change from 0 to 512 [ 861.045551][T11645] EXT4-fs error (device loop8): ext4_orphan_get:1404: inode #15: comm syz.8.1032: iget: bad i_size value: 38620345925642 [ 861.045674][T11645] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 861.049962][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 861.049985][ C1] EXT4-fs (loop8): initial error at time 1792455943: ext4_orphan_get:1404: inode 15 [ 861.050019][ C1] EXT4-fs (loop8): last error at time 1792455943: ext4_orphan_get:1404: inode 15 [ 861.132153][T11645] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.1032: couldn't read orphan inode 15 (err -117) [ 861.132246][T11645] loop8: lost filesystem error report for type 5 error -117 [ 861.211507][T11645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.136830][ T9388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.043386][T11662] loop8: detected capacity change from 0 to 1024 [ 863.048069][T11662] EXT4-fs: Ignoring removed i_version option [ 863.953187][T11662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.419501][ T9388] EXT4-fs error (device loop8): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /71/file0/lost+found: bad entry in directory: directory entry overrun - offset=792, inode=0, rec_len=1024, size=1024 fake=0 [ 864.444220][ T9388] VFS: Lookup of '.' in ext4 loop8 would have caused loop [ 864.444462][ T9388] VFS: Lookup of '.' in ext4 loop8 would have caused loop [ 864.746836][ T5271] 8021q: adding VLAN 0 to HW filter on device eth28 [ 865.118179][ T9388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.396789][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.489296][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 870.512174][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 870.519719][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 870.538153][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 870.555847][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 872.865826][T10400] Bluetooth: hci1: command tx timeout [ 873.568986][T11542] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.569239][T11542] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.569397][T11542] bridge_slave_0: entered allmulticast mode [ 873.606909][T11542] bridge_slave_0: entered promiscuous mode [ 873.640563][ T9416] bridge_slave_1: left allmulticast mode [ 873.640594][ T9416] bridge_slave_1: left promiscuous mode [ 873.640832][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.647177][ T9416] bridge_slave_0: left allmulticast mode [ 873.647209][ T9416] bridge_slave_0: left promiscuous mode [ 873.647434][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.806712][T10400] Bluetooth: hci1: command tx timeout [ 876.616617][ T9416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.619809][ T9416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.645111][ T9416] bond0 (unregistering): Released all slaves [ 876.701462][T11587] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.701586][T11587] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.701751][T11587] bridge_slave_0: entered allmulticast mode [ 876.703619][T11587] bridge_slave_0: entered promiscuous mode [ 876.738286][T11542] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.740153][T11542] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.740333][T11542] bridge_slave_1: entered allmulticast mode [ 876.765611][T11542] bridge_slave_1: entered promiscuous mode [ 876.873695][T10400] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 876.911151][T10400] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 876.930724][T10400] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 876.935456][T10400] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 876.939033][T10400] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 877.015034][T11587] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.015172][T11587] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.015365][T11587] bridge_slave_1: entered allmulticast mode [ 877.059203][T11587] bridge_slave_1: entered promiscuous mode [ 877.389048][T11587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.437399][T11542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.492476][T11587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.569324][T11542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.821032][ T5615] Bluetooth: hci1: command tx timeout [ 879.900365][ T5615] Bluetooth: hci3: command tx timeout [ 879.910052][ T5615] Bluetooth: hci1: command tx timeout [ 880.473619][T11542] team0: Port device team_slave_0 added [ 880.491025][T11542] team0: Port device team_slave_1 added [ 880.528215][T11587] team0: Port device team_slave_0 added [ 880.557321][ T9416] hsr_slave_0: left promiscuous mode [ 880.565785][ T9416] hsr_slave_1: left promiscuous mode [ 880.566833][ T9416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.583471][ T9416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.004408][ T9416] team0 (unregistering): Port device team_slave_1 removed [ 881.028663][ T9416] team0 (unregistering): Port device team_slave_0 removed [ 881.248330][T11542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.248352][T11542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.248383][T11542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.294754][T11542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.294774][T11542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.294806][T11542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.353241][T11587] team0: Port device team_slave_1 added [ 882.008373][ T5615] Bluetooth: hci3: command tx timeout [ 882.082134][T11587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.082154][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.082185][T11587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.219770][T11542] hsr_slave_0: entered promiscuous mode [ 882.226428][T11542] hsr_slave_1: entered promiscuous mode [ 882.227569][T11542] debugfs: 'hsr0' already exists in 'hsr' [ 882.227591][T11542] Cannot create hsr debugfs directory [ 882.229623][T11587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.229638][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.229669][T11587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.499047][T11697] rxe_eth0 speed is unknown, defaulting to 1000 [ 883.745805][T11587] hsr_slave_0: entered promiscuous mode [ 883.748561][T11587] hsr_slave_1: entered promiscuous mode [ 883.749516][T11587] debugfs: 'hsr0' already exists in 'hsr' [ 883.749540][T11587] Cannot create hsr debugfs directory [ 883.918132][T11697] lo speed is unknown, defaulting to 1000 [ 883.918188][T11724] rxe_eth0 speed is unknown, defaulting to 1000 [ 884.060053][T10400] Bluetooth: hci3: command tx timeout [ 886.223043][T10400] Bluetooth: hci3: command tx timeout [ 886.827862][T11724] lo speed is unknown, defaulting to 1000 [ 891.916450][ T9416] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.137336][T11587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 892.156408][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 892.300504][T11587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 892.324772][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 892.402807][ T9416] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.664263][T11587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 892.679079][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 892.719674][T11724] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.727244][T11724] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.727448][T11724] bridge_slave_0: entered allmulticast mode [ 892.751118][T11724] bridge_slave_0: entered promiscuous mode [ 892.767765][T11697] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.767883][T11697] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.768069][T11697] bridge_slave_0: entered allmulticast mode [ 892.793793][T11697] bridge_slave_0: entered promiscuous mode [ 892.804929][T11697] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.805050][T11697] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.805210][T11697] bridge_slave_1: entered allmulticast mode [ 892.807038][T11697] bridge_slave_1: entered promiscuous mode [ 892.878432][T11697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.895634][T11697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.964652][T11587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 892.985635][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 893.057650][ T9416] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.119654][T11724] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.119805][T11724] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.137375][T11724] bridge_slave_1: entered allmulticast mode [ 893.139287][T11724] bridge_slave_1: entered promiscuous mode [ 893.149117][T11697] team0: Port device team_slave_0 added [ 893.591189][T11697] team0: Port device team_slave_1 added [ 893.645620][T11697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.645644][T11697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.645675][T11697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.780146][T11724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.794851][T11697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.794904][T11697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.795050][T11697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.939631][ T9416] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.974754][T11888] loop7: detected capacity change from 0 to 1024 [ 893.994602][T11724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.065736][T11888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.300098][T11724] team0: Port device team_slave_0 added [ 894.303196][T11724] team0: Port device team_slave_1 added [ 894.381036][T11724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.381065][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.381093][T11724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.387668][T11697] hsr_slave_0: entered promiscuous mode [ 894.388964][T11697] hsr_slave_1: entered promiscuous mode [ 894.389649][T11697] debugfs: 'hsr0' already exists in 'hsr' [ 894.389684][T11697] Cannot create hsr debugfs directory [ 894.699481][T11587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.149789][T11724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.149811][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.149843][T11724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.327330][ T8262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.382483][T11587] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.512573][T11724] hsr_slave_0: entered promiscuous mode [ 895.514237][T11724] hsr_slave_1: entered promiscuous mode [ 895.515296][T11724] debugfs: 'hsr0' already exists in 'hsr' [ 895.515317][T11724] Cannot create hsr debugfs directory [ 895.716828][T11896] loop7: detected capacity change from 0 to 32768 [ 895.718032][T11896] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 895.718769][T11896] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1052 (11896) [ 895.752329][T11896] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 895.752366][T11896] BTRFS info (device loop7): using crc32c checksum algorithm [ 895.841708][ T1388] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.841842][ T1388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.882050][ T9416] bridge_slave_1: left allmulticast mode [ 895.882081][ T9416] bridge_slave_1: left promiscuous mode [ 895.882289][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.897538][ T9416] bridge_slave_0: left allmulticast mode [ 895.897566][ T9416] bridge_slave_0: left promiscuous mode [ 895.897776][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.944348][ T9416] bridge_slave_1: left allmulticast mode [ 895.944377][ T9416] bridge_slave_1: left promiscuous mode [ 895.944588][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.993735][ T9416] bridge_slave_0: left allmulticast mode [ 895.993762][ T9416] bridge_slave_0: left promiscuous mode [ 895.994029][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.995879][T11896] BTRFS info (device loop7): rebuilding free space tree [ 896.032650][T11896] BTRFS info (device loop7): disabling free space tree [ 896.032835][T11896] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 896.032892][T11896] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 896.068717][T11896] BTRFS info (device loop7): enabling ssd optimizations [ 896.068749][T11896] BTRFS info (device loop7): turning on async discard [ 896.068769][T11896] BTRFS info (device loop7): force clearing of disk cache [ 896.068790][T11896] BTRFS info (device loop7): use zstd compression, level 3 [ 896.400323][ T9416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.428207][ T9416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.443701][ T9416] bond0 (unregistering): Released all slaves [ 897.202204][ T8262] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 897.309092][ T9416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.349546][ T9416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.404921][ T9416] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 897.430561][ T9416] bond0 (unregistering): Released all slaves [ 897.658761][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.658868][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.925415][ T33] kauditd_printk_skb: 2 callbacks suppressed [ 897.925446][ T33] audit: type=1326 audit(1792455980.393:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1054" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03319e559 code=0x7ffc0000 [ 897.925609][ T33] audit: type=1326 audit(1792455980.393:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1054" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03319e559 code=0x7ffc0000 [ 898.026242][ T33] audit: type=1326 audit(1792455980.473:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1054" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03319e559 code=0x7ffc0000 [ 898.026302][ T33] audit: type=1326 audit(1792455980.473:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1054" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03319e559 code=0x7ffc0000 [ 898.026344][ T33] audit: type=1326 audit(1792455980.473:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1054" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03319e559 code=0x7ffc0000 [ 898.026415][ T33] audit: type=1326 audit(1792455980.473:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1054" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03319e559 code=0x7ffc0000 [ 898.026461][ T33] audit: type=1326 audit(1792455980.473:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1054" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03319e559 code=0x7ffc0000 [ 898.026504][ T33] audit: type=1326 audit(1792455980.473:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1054" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03319e559 code=0x7ffc0000 [ 898.026566][ T33] audit: type=1326 audit(1792455980.473:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1054" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03319e559 code=0x7ffc0000 [ 898.026606][ T33] audit: type=1326 audit(1792455980.473:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.7.1054" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc03319e559 code=0x7ffc0000 [ 898.327696][T11587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 898.397650][T11918] loop7: detected capacity change from 0 to 4096 [ 898.855789][T11924] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 899.046093][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 899.072849][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 899.074065][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 899.078578][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 899.087992][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 899.314532][T11927] NILFS (loop7): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 900.141135][ T9416] hsr_slave_0: left promiscuous mode [ 900.145137][ T9416] hsr_slave_1: left promiscuous mode [ 900.148744][ T9416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.176420][ T9416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.235647][ T9416] hsr_slave_0: left promiscuous mode [ 900.243505][ T9416] hsr_slave_1: left promiscuous mode [ 900.255928][ T9416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.255957][ T9416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.276068][ T9416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.276095][ T9416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.327579][ T9416] veth1_macvtap: left promiscuous mode [ 900.327620][ T9416] veth0_macvtap: left promiscuous mode [ 900.327738][ T9416] veth1_vlan: left promiscuous mode [ 900.327810][ T9416] veth0_vlan: left promiscuous mode [ 900.544265][T11945] xt_hashlimit: size too large, truncated to 1048576 [ 900.852353][ T9416] team0 (unregistering): Port device team_slave_1 removed [ 900.879219][ T9416] team0 (unregistering): Port device team_slave_0 removed [ 901.260962][ T5615] Bluetooth: hci4: command tx timeout [ 901.780446][T10241] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 901.940370][ T9416] team0 (unregistering): Port device team_slave_1 removed [ 901.958713][T10241] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 901.964440][ T9416] team0 (unregistering): Port device team_slave_0 removed [ 901.978308][T10241] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 901.978345][T10241] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 901.978374][T10241] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 901.978397][T10241] usb 8-1: config 0 interface 0 has no altsetting 0 [ 902.022855][T10241] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 902.022886][T10241] usb 8-1: Product: syz [ 902.022896][T10241] usb 8-1: Manufacturer: syz [ 902.022907][T10241] usb 8-1: SerialNumber: syz [ 902.028244][T10241] usb 8-1: config 0 descriptor?? [ 902.068535][T10241] usb 8-1: selecting invalid altsetting 0 [ 902.494012][T11925] rxe_eth0 speed is unknown, defaulting to 1000 [ 902.564016][T11587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.007591][T11587] veth0_vlan: entered promiscuous mode [ 903.139505][T11587] veth1_vlan: entered promiscuous mode [ 903.154517][T11925] lo speed is unknown, defaulting to 1000 [ 903.340340][ T5615] Bluetooth: hci4: command tx timeout [ 903.477449][T11697] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 903.498057][T11697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 903.532669][T11697] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 903.551018][T11697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 903.605799][T11697] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 903.652795][T11697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 903.799032][T11697] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 903.815484][T11697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 903.858595][T11587] veth0_macvtap: entered promiscuous mode [ 903.963387][ T1388] bridge_slave_1: left allmulticast mode [ 903.963419][ T1388] bridge_slave_1: left promiscuous mode [ 903.963666][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.966521][ T1388] bridge_slave_0: left allmulticast mode [ 903.966549][ T1388] bridge_slave_0: left promiscuous mode [ 903.966784][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.030771][T11370] usb 8-1: USB disconnect, device number 5 [ 904.365394][ T1388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.375784][ T1388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.398716][ T1388] bond0 (unregistering): Released all slaves [ 904.723231][T11587] veth1_macvtap: entered promiscuous mode [ 905.304444][T11982] ptp ptp0: new virtual clock ptp1 [ 905.304587][T11982] ptp ptp0: guarantee physical clock free running [ 905.449834][ T5615] Bluetooth: hci4: command tx timeout [ 906.703461][ T1388] hsr_slave_0: left promiscuous mode [ 906.704418][ T1388] hsr_slave_1: left promiscuous mode [ 906.707386][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.741879][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.797813][T11997] loop7: detected capacity change from 0 to 2048 [ 906.847239][T11997] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 906.851761][T11997] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 907.940826][ T5615] Bluetooth: hci4: command tx timeout [ 908.218627][ T1388] team0 (unregistering): Port device team_slave_1 removed [ 908.272834][ T1388] team0 (unregistering): Port device team_slave_0 removed [ 908.634606][T11587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.127409][T11925] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.128357][T11925] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.128571][T11925] bridge_slave_0: entered allmulticast mode [ 909.167917][T11925] bridge_slave_0: entered promiscuous mode [ 909.200426][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 909.203932][T11925] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.204034][T11925] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.204194][T11925] bridge_slave_1: entered allmulticast mode [ 909.256658][T11925] bridge_slave_1: entered promiscuous mode [ 909.268654][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 909.284481][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 909.297697][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 909.302276][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 909.387452][T11697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.954716][T11925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.957094][T11697] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.993272][T11925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.217845][T11925] team0: Port device team_slave_0 added [ 910.239710][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.239833][ T9416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.374426][T11925] team0: Port device team_slave_1 added [ 910.418337][ T1426] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.418453][ T1426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.509822][T11724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 910.598920][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 910.663098][T11724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 910.688315][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 910.937303][T11925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.937320][T11925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.937345][T11925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.938010][T11724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 910.969397][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 911.006664][T11724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 911.028148][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 911.052181][T11925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.052230][T11925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.052262][T11925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.267053][T12023] rxe_eth0 speed is unknown, defaulting to 1000 [ 911.373624][T11925] hsr_slave_0: entered promiscuous mode [ 911.378643][T11925] hsr_slave_1: entered promiscuous mode [ 911.379781][T11925] debugfs: 'hsr0' already exists in 'hsr' [ 911.379805][T11925] Cannot create hsr debugfs directory [ 911.500277][ T5615] Bluetooth: hci2: command tx timeout [ 911.971054][T12023] lo speed is unknown, defaulting to 1000 [ 912.809490][ T1388] bridge_slave_1: left allmulticast mode [ 912.809560][ T1388] bridge_slave_1: left promiscuous mode [ 912.809917][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.846562][ T1388] bridge_slave_0: left allmulticast mode [ 912.846604][ T1388] bridge_slave_0: left promiscuous mode [ 912.846924][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.168301][ T1388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.188287][ T1388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.202814][ T1388] bond0 (unregistering): Released all slaves [ 913.581328][ T5615] Bluetooth: hci2: command tx timeout [ 913.784387][T11724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.784977][T11925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 913.849554][T11925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 913.859780][T11925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 913.883057][T11925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 913.886118][T11925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 913.925035][T11925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.968171][T11925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 913.999837][T11925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 914.169066][T11697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.191994][T11724] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.244535][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.244666][ T9416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.346634][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.346722][ T9416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.549400][ T1388] hsr_slave_0: left promiscuous mode [ 914.558838][ T1388] hsr_slave_1: left promiscuous mode [ 914.567643][ T1388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.567742][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.569338][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.604702][ T1388] veth1_macvtap: left promiscuous mode [ 914.604768][ T1388] veth0_macvtap: left promiscuous mode [ 914.604908][ T1388] veth1_vlan: left promiscuous mode [ 914.604981][ T1388] veth0_vlan: left promiscuous mode [ 915.163726][ T1388] team0 (unregistering): Port device team_slave_1 removed [ 915.196442][ T1388] team0 (unregistering): Port device team_slave_0 removed [ 915.660603][ T5615] Bluetooth: hci2: command tx timeout [ 915.926343][T12023] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.926615][T12023] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.926797][T12023] bridge_slave_0: entered allmulticast mode [ 915.928910][T12023] bridge_slave_0: entered promiscuous mode [ 915.941665][T12023] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.941788][T12023] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.941965][T12023] bridge_slave_1: entered allmulticast mode [ 915.948536][T12023] bridge_slave_1: entered promiscuous mode [ 916.109296][T12023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.117123][T12023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.236006][T12023] team0: Port device team_slave_0 added [ 916.268715][T12023] team0: Port device team_slave_1 added [ 916.414491][T12023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.414512][T12023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.414544][T12023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.418465][T12023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.418486][T12023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.418545][T12023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.439757][T11925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.616137][T11925] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.639701][T12023] hsr_slave_0: entered promiscuous mode [ 916.648099][T12023] hsr_slave_1: entered promiscuous mode [ 916.649673][T12023] debugfs: 'hsr0' already exists in 'hsr' [ 916.649697][T12023] Cannot create hsr debugfs directory [ 916.743648][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.743771][ T7307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.778906][T11697] veth0_vlan: entered promiscuous mode [ 916.828975][ T1388] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.829098][ T1388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.894795][T11697] veth1_vlan: entered promiscuous mode [ 917.059819][T11925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 917.160909][T11697] veth0_macvtap: entered promiscuous mode [ 917.184660][T11697] veth1_macvtap: entered promiscuous mode [ 917.441874][T11697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.492963][T11697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.560641][ T1413] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.562612][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.562668][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.562740][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.740678][ T5615] Bluetooth: hci2: command tx timeout [ 918.198909][ T7307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.198935][ T7307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.392672][ T1426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.392696][ T1426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.418932][T11724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.681427][T11925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.938091][T12023] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 918.973220][T12023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 919.531834][T12198] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[12199] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[12198] [ 920.112944][T12023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 921.130803][T12023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 921.155392][T12023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 921.967856][T12202] ip_tables: iptables: counters copy to user failed while replacing table [ 924.169474][T12023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 924.177421][T12023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 924.225479][T12023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 924.306851][T11925] veth0_vlan: entered promiscuous mode [ 924.338461][T11925] veth1_vlan: entered promiscuous mode [ 924.475725][T12213] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 924.583074][T11925] veth0_macvtap: entered promiscuous mode [ 924.585850][ T148] Bluetooth: hci5: Frame reassembly failed (-84) [ 924.646020][T11925] veth1_macvtap: entered promiscuous mode [ 924.801737][T12023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.863820][T11925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.957557][T11925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.981741][T12023] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.097083][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.097205][ T1426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.165261][ T1426] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.165388][ T1426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.175724][ T1426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.175809][ T1426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.175861][ T1426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.175901][ T1426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.253126][T11724] veth0_vlan: entered promiscuous mode [ 925.273991][T11724] veth1_vlan: entered promiscuous mode [ 925.530852][T11724] veth0_macvtap: entered promiscuous mode [ 925.641736][T11724] veth1_macvtap: entered promiscuous mode [ 925.726213][ T1426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.726267][ T1426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.828573][T11724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.874694][T11724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.927040][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.927064][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.022877][ T7307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.153755][ T1381] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.234450][ T1426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.234702][ T1426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.540397][T10400] Bluetooth: hci5: command 0x1003 tx timeout [ 926.541190][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 926.735271][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.735295][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.887368][T12254] Cannot find add_set index 0 as target [ 928.098623][ T1381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.098647][ T1381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.672582][T12023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.097999][T12278] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 931.710894][T12023] veth0_vlan: entered promiscuous mode [ 931.726700][T12023] veth1_vlan: entered promiscuous mode [ 931.822786][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.160086][T12300] loop0: detected capacity change from 0 to 32768 [ 932.196211][T12300] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 932.237950][T12023] veth0_macvtap: entered promiscuous mode [ 932.252645][T12023] veth1_macvtap: entered promiscuous mode [ 932.275519][T12300] XFS (loop0): Ending clean mount [ 932.287370][T12300] XFS (loop0): Quotacheck needed: Please wait. [ 932.294972][T12023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.361841][T12023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.450153][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.451253][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.451297][ T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.451329][ T63] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.222805][T12300] XFS (loop0): Quotacheck: Done. [ 933.979598][ T33] kauditd_printk_skb: 188 callbacks suppressed [ 933.979674][ T33] audit: type=1800 audit(1792456016.163:833): pid=12321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1064" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=-22 [ 934.463483][T12319] loop7: detected capacity change from 0 to 32768 [ 934.468964][T12319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1068 (12319) [ 934.503742][T12319] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 934.503780][T12319] BTRFS info (device loop7): using sha256 checksum algorithm [ 935.036697][T12328] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 935.552642][T11925] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 935.713225][T12319] BTRFS info (device loop7): enabling ssd optimizations [ 935.713247][T12319] BTRFS info (device loop7): turning on sync discard [ 935.713260][T12319] BTRFS info (device loop7): enabling free space tree [ 935.713292][T12319] BTRFS info (device loop7): use zlib compression, level 3 [ 936.117387][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.117411][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.872284][T12349] loop5: detected capacity change from 0 to 8 [ 939.049762][T12355] loop4: detected capacity change from 0 to 256 [ 939.774522][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.774548][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.199634][ T8262] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 943.283855][T12373] loop4: detected capacity change from 0 to 2048 [ 943.656485][T12373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.711165][T12386] netlink: del zone limit has 4 unknown bytes [ 945.858154][T11724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.169810][T12404] loop4: detected capacity change from 0 to 2048 [ 948.372370][T12404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 956.369021][T12423] [ 956.371425][T12423] ====================================================== [ 956.378494][T12423] WARNING: possible circular locking dependency detected [ 956.385577][T12423] syzkaller #0 Tainted: G L [ 956.391672][T12423] ------------------------------------------------------ [ 956.398973][T12423] syz.3.1087/12423 is trying to acquire lock: [ 956.405084][T12423] ffffffff90c2a628 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x75/0x4d0 [ 956.416379][T12423] [ 956.416379][T12423] but task is already holding lock: [ 956.423780][T12423] ffff88804884e740 (&sb->s_type->i_mutex_key#42){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 956.434297][T12423] [ 956.434297][T12423] which lock already depends on the new lock. [ 956.434297][T12423] [ 956.444737][T12423] [ 956.444737][T12423] the existing dependency chain (in reverse order) is: [ 956.453781][T12423] [ 956.453781][T12423] -> #3 (&sb->s_type->i_mutex_key#42){++++}-{4:4}: [ 956.462533][T12423] down_write+0x91/0x200 [ 956.467355][T12423] configfs_depend_item_unlocked+0x153/0x420 [ 956.473947][T12423] usbg_make_tpg+0x1e0/0x550 [ 956.479531][T12423] target_fabric_make_tpg+0xa8/0x6d0 [ 956.485390][T12423] configfs_mkdir+0x4f6/0x9e0 [ 956.491025][T12423] vfs_mkdir+0x40e/0x630 [ 956.496001][T12423] filename_mkdirat+0x285/0x510 [ 956.501419][T12423] __se_sys_mkdirat+0x35/0x150 [ 956.506759][T12423] do_syscall_64+0x166/0x520 [ 956.511927][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.518387][T12423] [ 956.518387][T12423] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 956.526470][T12423] __mutex_lock+0x197/0x15a0 [ 956.531645][T12423] tcm_alloc_inst+0x65/0x1a0 [ 956.536817][T12423] usb_get_function_instance+0xe3/0x2f0 [ 956.542929][T12423] function_make+0x127/0x360 [ 956.548104][T12423] configfs_mkdir+0x4f6/0x9e0 [ 956.553451][T12423] vfs_mkdir+0x40e/0x630 [ 956.558282][T12423] filename_mkdirat+0x285/0x510 [ 956.563707][T12423] __se_sys_mkdirat+0x35/0x150 [ 956.569046][T12423] do_syscall_64+0x166/0x520 [ 956.574205][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.580666][T12423] [ 956.580666][T12423] -> #1 (func_lock){+.+.}-{4:4}: [ 956.587837][T12423] __mutex_lock+0x197/0x15a0 [ 956.592995][T12423] usb_get_function_instance+0x2e/0x2f0 [ 956.599118][T12423] function_make+0x127/0x360 [ 956.604284][T12423] configfs_mkdir+0x4f6/0x9e0 [ 956.609537][T12423] vfs_mkdir+0x40e/0x630 [ 956.614362][T12423] filename_mkdirat+0x285/0x510 [ 956.619790][T12423] __se_sys_mkdirat+0x35/0x150 [ 956.625134][T12423] do_syscall_64+0x166/0x520 [ 956.630298][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.636800][T12423] [ 956.636800][T12423] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 956.645115][T12423] __lock_acquire+0x164c/0x2de0 [ 956.650576][T12423] lock_acquire+0x115/0x350 [ 956.655648][T12423] __mutex_lock+0x197/0x15a0 [ 956.660822][T12423] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 956.667554][T12423] configfs_symlink+0x74e/0x11d0 [ 956.673064][T12423] vfs_symlink+0x18e/0x330 [ 956.678064][T12423] filename_symlinkat+0x1cd/0x410 [ 956.683662][T12423] __se_sys_symlink+0x4d/0x2b0 [ 956.689090][T12423] do_syscall_64+0x166/0x520 [ 956.694259][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.700723][T12423] [ 956.700723][T12423] other info that might help us debug this: [ 956.700723][T12423] [ 956.710994][T12423] Chain exists of: [ 956.710994][T12423] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#42 [ 956.710994][T12423] [ 956.726015][T12423] Possible unsafe locking scenario: [ 956.726015][T12423] [ 956.733509][T12423] CPU0 CPU1 [ 956.738928][T12423] ---- ---- [ 956.744333][T12423] lock(&sb->s_type->i_mutex_key#42); [ 956.749840][T12423] lock(tpg_instances_lock); [ 956.757077][T12423] lock(&sb->s_type->i_mutex_key#42); [ 956.765114][T12423] lock(gadget_subsys.su_mutex); [ 956.770181][T12423] [ 956.770181][T12423] *** DEADLOCK *** [ 956.770181][T12423] [ 956.778359][T12423] locks held by syz.3.1087/12423: 2, last CPU#1: [ 956.784731][T12423] #0: ffff88801e7d4460 (sb_writers#33){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 956.794038][T12423] #1: ffff88804884e740 (&sb->s_type->i_mutex_key#42){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 956.804970][T12423] [ 956.804970][T12423] stack backtrace: [ 956.810906][T12423] CPU: 1 UID: 0 PID: 12423 Comm: syz.3.1087 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.821976][T12423] Tainted: [L]=SOFTLOCKUP [ 956.826335][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.836437][T12423] Call Trace: [ 956.839763][T12423] [ 956.842741][T12423] dump_stack_lvl+0xe8/0x150 [ 956.847398][T12423] print_circular_bug+0x2e2/0x300 [ 956.852484][T12423] check_noncircular+0x12f/0x150 [ 956.857567][T12423] __lock_acquire+0x164c/0x2de0 [ 956.862488][T12423] ? __pfx_stack_trace_save+0x10/0x10 [ 956.867945][T12423] ? stack_depot_save_flags+0x33/0x7f0 [ 956.873425][T12423] ? __lock_acquire+0x670/0x2de0 [ 956.878383][T12423] lock_acquire+0x115/0x350 [ 956.882905][T12423] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 956.889254][T12423] __mutex_lock+0x197/0x15a0 [ 956.893946][T12423] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 956.900296][T12423] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 956.906694][T12423] ? __pfx___mutex_lock+0x10/0x10 [ 956.911744][T12423] ? make_vfsuid+0x49/0xa0 [ 956.916182][T12423] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 956.922348][T12423] ? inode_permission+0x2b8/0x600 [ 956.927747][T12423] ? bpf_lsm_inode_permission+0x9/0x20 [ 956.933218][T12423] configfs_symlink+0x74e/0x11d0 [ 956.938184][T12423] ? lookup_one_qstr_excl+0x1d4/0x360 [ 956.943566][T12423] ? make_vfsuid+0x49/0xa0 [ 956.948016][T12423] ? generic_permission+0x2ba/0x660 [ 956.953222][T12423] ? __pfx_configfs_symlink+0x10/0x10 [ 956.958608][T12423] ? bpf_lsm_inode_symlink+0x9/0x20 [ 956.963813][T12423] ? security_inode_symlink+0xc3/0x340 [ 956.969287][T12423] vfs_symlink+0x18e/0x330 [ 956.973719][T12423] ? security_path_symlink+0xfd/0x360 [ 956.979116][T12423] filename_symlinkat+0x1cd/0x410 [ 956.984201][T12423] ? __might_fault+0xaf/0x130 [ 956.988910][T12423] ? __pfx_filename_symlinkat+0x10/0x10 [ 956.994475][T12423] ? do_getname+0x151/0x250 [ 956.999000][T12423] __se_sys_symlink+0x4d/0x2b0 [ 957.003779][T12423] do_syscall_64+0x166/0x520 [ 957.008387][T12423] ? trace_irq_disable+0x3b/0x140 [ 957.013431][T12423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.019511][T12423] ? clear_bhb_loop+0x70/0xc0 [ 957.024197][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.030098][T12423] RIP: 0033:0x7f4a8019e559 [ 957.034529][T12423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.054233][T12423] RSP: 002b:00007f4a7e3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 957.062675][T12423] RAX: ffffffffffffffda RBX: 00007f4a80425fa0 RCX: 00007f4a8019e559 [ 957.070684][T12423] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000001400 [ 957.078660][T12423] RBP: 00007f4a80235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 957.086643][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.094627][T12423] R13: 00007f4a80426038 R14: 00007f4a80425fa0 R15: 00007ffeff628e78 [ 957.102618][T12423] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 957.201999][T10400] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 957.202252][T10400] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 957.202484][T10400] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 957.203119][T10400] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 957.203553][T10400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 958.086802][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.212037][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.353008][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.519542][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.955569][ T51] bridge_slave_1: left allmulticast mode [ 958.955599][ T51] bridge_slave_1: left promiscuous mode [ 958.955785][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.994565][ T51] bridge_slave_0: left allmulticast mode [ 958.994595][ T51] bridge_slave_0: left promiscuous mode [ 958.994768][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.424639][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.453768][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.462672][ T51] bond0 (unregistering): Released all slaves [ 960.139011][ T51] hsr_slave_0: left promiscuous mode [ 960.146854][ T51] hsr_slave_1: left promiscuous mode [ 960.149145][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.149196][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.176753][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.176778][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.204875][ T51] veth1_macvtap: left promiscuous mode [ 960.204909][ T51] veth0_macvtap: left promiscuous mode [ 960.204996][ T51] veth1_vlan: left promiscuous mode [ 960.205046][ T51] veth0_vlan: left promiscuous mode [ 960.542555][ T51] team0 (unregistering): Port device team_slave_1 removed [ 960.574708][ T51] team0 (unregistering): Port device team_slave_0 removed [ 961.201828][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.254287][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.338926][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.413398][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.613212][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.657599][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.747522][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.812483][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.899781][ T51] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.936693][ T51] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.982442][ T51] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.029407][ T51] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.142752][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.209309][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.309062][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.366787][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.485473][ T51] bridge_slave_1: left allmulticast mode [ 962.485500][ T51] bridge_slave_1: left promiscuous mode [ 962.485711][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.507412][ T51] bridge_slave_0: left allmulticast mode [ 962.510706][ T51] bridge_slave_0: left promiscuous mode [ 962.512769][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.542822][ T51] bridge_slave_1: left allmulticast mode [ 962.542851][ T51] bridge_slave_1: left promiscuous mode [ 962.543061][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.545023][ T51] bridge_slave_0: left allmulticast mode [ 962.545056][ T51] bridge_slave_0: left promiscuous mode [ 962.545277][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.591185][ T51] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 962.591282][ T51] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 962.591505][ T51] bridge0: port 3(wlan0) entered disabled state [ 962.593136][ T51] bridge_slave_1: left allmulticast mode [ 962.593159][ T51] bridge_slave_1: left promiscuous mode [ 962.593320][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.594989][ T51] bridge_slave_0: left allmulticast mode [ 962.595009][ T51] bridge_slave_0: left promiscuous mode [ 962.595155][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.677831][ T51] bridge_slave_1: left allmulticast mode [ 962.677857][ T51] bridge_slave_1: left promiscuous mode [ 962.678023][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.706332][ T51] bridge_slave_0: left allmulticast mode [ 962.706438][ T51] bridge_slave_0: left promiscuous mode [ 962.707045][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.925229][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.927318][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.928751][ T51] bond0 (unregistering): Released all slaves [ 963.021149][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.023129][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.024381][ T51] bond0 (unregistering): Released all slaves [ 963.118839][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.133608][T12388] smbdirect: ib_dev[syz1] removed [ 963.135494][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.136839][ T51] bond0 (unregistering): Released all slaves [ 963.220525][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.222202][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.223296][ T51] bond0 (unregistering): Released all slaves [ 963.345000][ T51] tipc: Left network mode [ 964.511649][ T51] hsr_slave_0: left promiscuous mode [ 964.512136][ T51] hsr_slave_1: left promiscuous mode [ 964.512754][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.512773][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.513349][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.513366][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.516847][ T51] hsr_slave_0: left promiscuous mode [ 964.517356][ T51] hsr_slave_1: left promiscuous mode [ 964.517950][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.517969][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.518540][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.518558][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.655630][ T51] hsr_slave_0: left promiscuous mode [ 964.656108][ T51] hsr_slave_1: left promiscuous mode [ 964.656654][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.656668][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.659036][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.659057][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.719009][ T51] hsr_slave_0: left promiscuous mode [ 964.719659][ T51] hsr_slave_1: left promiscuous mode [ 964.735784][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.735815][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.739479][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.739500][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.809007][ T51] veth1_macvtap: left promiscuous mode [ 964.809042][ T51] veth0_macvtap: left promiscuous mode [ 964.809113][ T51] veth1_vlan: left promiscuous mode [ 964.809172][ T51] veth0_vlan: left promiscuous mode [ 964.839005][ T51] veth1_macvtap: left promiscuous mode [ 964.839041][ T51] veth0_macvtap: left promiscuous mode [ 964.839126][ T51] veth1_vlan: left promiscuous mode [ 964.839177][ T51] veth0_vlan: left promiscuous mode [ 964.867002][ T51] veth1_macvtap: left promiscuous mode [ 964.867038][ T51] veth0_macvtap: left promiscuous mode [ 964.867107][ T51] veth1_vlan: left promiscuous mode [ 964.867214][ T51] veth0_vlan: left promiscuous mode [ 964.869185][ T51] veth1_macvtap: left promiscuous mode [ 964.869213][ T51] veth0_macvtap: left promiscuous mode [ 964.869284][ T51] veth1_vlan: left promiscuous mode [ 964.869332][ T51] veth0_vlan: left promiscuous mode [ 965.299102][ T51] team0 (unregistering): Port device team_slave_1 removed [ 965.312968][ T51] team0 (unregistering): Port device team_slave_0 removed [ 965.524607][ T51] team0 (unregistering): Port device team_slave_1 removed [ 965.543004][ T51] team0 (unregistering): Port device team_slave_0 removed [ 965.764709][ T51] team_slave_1 (unregistering): left allmulticast mode [ 965.765509][ T51] team0 (unregistering): Port device team_slave_1 removed [ 965.814924][ T51] team_slave_0 (unregistering): left allmulticast mode [ 965.815938][ T51] team0 (unregistering): Port device team_slave_0 removed [ 966.067759][ T51] team0 (unregistering): Port device team_slave_1 removed [ 966.103834][ T51] team0 (unregistering): Port device team_slave_0 removed