last executing test programs: 23m13.808913129s ago: executing program 32 (id=28): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x90c3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5b70, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40844) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x2, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x2, 0x2, 0x1, 0x96, 0x4}, 0x20) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000700)={0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0xf0f003}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendfile(r0, r0, &(0x7f0000000140)=0x9, 0x2) 22m55.520366889s ago: executing program 33 (id=56): getcwd(&(0x7f0000000140)=""/22, 0x16) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r0 = syz_create_resource$binfmt(0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) r6 = fsopen(&(0x7f0000000000)='jffs2\x00', 0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000080)='%\x00', 0x0, 0x0) execve(&(0x7f0000000140)='./file1\x00', &(0x7f00000002c0)={[&(0x7f0000000180)='jffs2\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='\\3\x06\xc7F\xb2?=']}, &(0x7f0000000580)={[&(0x7f0000000300)='(\':.{\x00', &(0x7f0000000340)='/dev/kvm\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\\.\'\x00', 0x0, &(0x7f0000000480)='%\xb5\\\x00', &(0x7f00000004c0)='\\3\x06\xc7F\xb2?=', &(0x7f0000000500)='jffs2\x00', 0x0]}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000280)={[&(0x7f00000000c0)='\\3\x06\xc7F\xb2?=']}, 0x1000) 22m38.126727155s ago: executing program 1 (id=78): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 22m36.494501878s ago: executing program 1 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) writev(0xffffffffffffffff, 0x0, 0x0) 22m35.148137784s ago: executing program 1 (id=83): mknod(0x0, 0x1ffa, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x5d}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) getpid() mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) 22m33.247088343s ago: executing program 1 (id=87): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x10000, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc04c561a, &(0x7f00000000c0)=0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000002100)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000004100)={0x50, 0x0, 0xb3400, {0x7, 0x2d, 0x5, 0x201, 0xbcbf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000001}}, 0x30) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) 22m30.643930322s ago: executing program 1 (id=91): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 22m27.536129953s ago: executing program 1 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) 22m10.50254678s ago: executing program 34 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) 21m42.70748314s ago: executing program 6 (id=151): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000007100000225bd70ff505e4b477a132db767481c66", @ANYRES32=0x0, @ANYBLOB="0c0001800800010027000300100001800c00048008000200110000000c00018005000300020000000c00018005000300040000000c00018008000100400001000c0001800800010017"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000180), 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r4}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000d80)=@get={0x1, 0x0, 0x4000000000000000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 21m40.646079874s ago: executing program 6 (id=152): ioprio_get$uid(0x3, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = epoll_create(0x628) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x30000009}) userfaultfd(0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000}, 0x40110) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0e0000000300edff037e2d001a7ea4845f80e06e85b6d05a0ac0088e1c5e2a72975bd1e58201000000490f6c13f0ae615cf631671c92621c11bf97279fe713fbaf4a88892a89ac91ff01000040e40000d14ae000"], 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0xe, 0x0, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21m38.493154841s ago: executing program 6 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYBLOB="431f07000b02000008000a00", @ANYBLOB, @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/102, 0x66, 0x0, 0x1, 0x2}}, 0xfffffeca) 21m32.683263123s ago: executing program 6 (id=164): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0xe5b, 0xac, 0x1b) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x38, 0x0, &(0x7f00000007c0)) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x3, 0x20000008, 0x4) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, &(0x7f0000000040)=0x122) 21m30.716973595s ago: executing program 6 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000003740)) r4 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)) chdir(&(0x7f00000003c0)='./bus\x00') socket$alg(0x26, 0x5, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000001540)=""/4100, 0x1004) sendmmsg$inet(r4, &(0x7f0000004840)=[{{&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000480)="c034f4f9eb149a9cb491d01aa2feba2527af3a855a0cc59137b111ff61d19b667a836d174a3f8347bdb7782233820ea5394bdba02ae6ad1dd4cc351bec2b2dd1bd6c06ee10ac942f98c6c3ca0552b985743bad30aa7550ead3fdbda5003831", 0x5f}, {&(0x7f0000000540)="fd7746b7827b11950deaee1beb6296512918a6655e96fe7bed3a479d0323926b825b24e2790b51e6e9adad", 0x2b}, {&(0x7f0000000680)}, {0x0}, {&(0x7f00000007c0)="f4852b24132e639391cafb3883d15cb179", 0x11}], 0x5, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd4f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6cc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000003640)=[{0x0}, {0x0}, {&(0x7f0000001300)="156f36971a685ba594f340", 0xb}, {&(0x7f0000001340)}, {&(0x7f0000001400)}], 0x5, &(0x7f00000036c0)}}, {{0x0, 0x0, &(0x7f0000004780), 0x0, &(0x7f00000047c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x140000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}], 0x48}}], 0x3, 0x48000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x9}, 0xc) 21m29.095768367s ago: executing program 6 (id=170): socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x4000010) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000)={0xffffffff}, 0xfffffffffffffedf}, 0x48) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 21m12.948717061s ago: executing program 35 (id=170): socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x4000010) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000)={0xffffffff}, 0xfffffffffffffedf}, 0x48) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 10m14.054837707s ago: executing program 3 (id=1167): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801) signalfd(r3, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x40030000000000}, 0x4000) 10m11.201086342s ago: executing program 3 (id=1171): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = signalfd(r0, &(0x7f00000001c0)={[0x9]}, 0x8) pidfd_send_signal(r4, 0xffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_open_dev$ndb(0x0, 0x0, 0x14401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10m9.304824302s ago: executing program 3 (id=1172): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x168503) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000240)=0x200b8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x800, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x6, 0x5}]}}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @loopback}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) setresgid(0x0, 0xee00, 0x0) r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x10000000) pread64(r1, 0x0, 0x0, 0x2f6) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 10m7.435288431s ago: executing program 3 (id=1177): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read$nci(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="be54", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000f0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000061c000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00007c8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) landlock_restrict_self(0xffffffffffffffff, 0x5) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0xf0, 0x9, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x15, 0x1a, '/dev/virtual_nci\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8d1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x613}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x59}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}]}]}, 0xf0}}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) 10m3.163122714s ago: executing program 3 (id=1185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x1, 0x5003) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = signalfd(r1, &(0x7f00000001c0)={[0x9]}, 0x8) pidfd_send_signal(r4, 0xffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_open_dev$ndb(0x0, 0x0, 0x14401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10m0.186877962s ago: executing program 3 (id=1190): mknod(0x0, 0x1ffa, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sg(0x0, 0xf17, 0x100) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x25, 0x2, @val=@tcx={@void, @value=r4}}, 0x1c) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000100)) 9m42.84154894s ago: executing program 36 (id=1190): mknod(0x0, 0x1ffa, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sg(0x0, 0xf17, 0x100) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x25, 0x2, @val=@tcx={@void, @value=r4}}, 0x1c) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000100)) 6m43.313198924s ago: executing program 5 (id=1459): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004017}, 0x81) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc2663192cab715837"], 0x1c}}, 0x40000) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6m43.124011589s ago: executing program 5 (id=1461): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x4ac8, 0x2, {0xffffffffffffffff}, {0xee00}, 0xa}) process_vm_readv(r0, &(0x7f0000003640)=[{&(0x7f0000000280)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/78, 0x4e}, {&(0x7f0000002400)=""/166, 0xa6}, {0x0}, {&(0x7f00000034c0)=""/223, 0xdf}, {&(0x7f00000035c0)=""/125, 0x7d}], 0x9, &(0x7f0000004b80)=[{&(0x7f0000003700)=""/175, 0xaf}, {&(0x7f00000037c0)=""/63, 0x3f}, {&(0x7f0000003800)=""/65, 0x41}, {&(0x7f0000003880)=""/156, 0x9c}, {&(0x7f0000003a00)=""/35, 0x23}, {&(0x7f0000003a40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000004b40)}], 0x8, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r1, 0x73876000) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000042c0)={0xa, 0x10, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/171, 0xab, 0x9a) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 6m42.435724148s ago: executing program 5 (id=1462): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 6m42.217775373s ago: executing program 5 (id=1463): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffafff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @private=0xa010101}, {0x1, @multicast}, 0x70, {0x2, 0x4e24, @multicast1}, 'pim6reg0\x00'}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r5, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f000000d100)=[{{&(0x7f0000000180)=@file={0x0, 'my_sys\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000340)="13937b4c406ce0f628547656c1cd07eb33c91e", 0x13}, {&(0x7f00000003c0)="e7b74943f0b3b7f119", 0x9}, {&(0x7f0000000640)="d4854eb2bbac5489c39ac3c799a9b3b1077f90c6140444e0f6ec7dc893b3ad32c54c2e3797f26b51cfac406b7e21256af4512427dfe65f67fcfbd44744fbd1a14e51b551780935eb70827bacb753621c8a8f4690aec647d088053a4f7e110a1a6ca7310c8b034b14afd879619ed0e7876f0913428a3c319462a916781cba6e168815aea26d4e31f31305844c9bdc2a163fcb79edd01fa502df3abea3b2dfd31b41c4ac3daa56ffe7ddf1b1c9e4f2b8a2135eebcc68c895684104a2ce10c86677963a14cc555a943eeaf7523dd3848b91a649ced76342cc6ceb0d69a761106a6ed07f6613e72e", 0xe6}, {0x0}, {&(0x7f0000000880)="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", 0xff}], 0x5, 0x0, 0x81, 0x44001}}], 0x1, 0x0) 6m40.956019676s ago: executing program 5 (id=1465): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = io_uring_setup(0x4803, &(0x7f0000001240)={0x0, 0x8efc, 0x800, 0x4, 0x1d1}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001500)=""/223, 0xdf}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000380)={0x104204000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x400000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) 6m39.588959912s ago: executing program 5 (id=1469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r5, 0x1, 0x5003) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = signalfd(r1, &(0x7f00000001c0)={[0x9]}, 0x8) pidfd_send_signal(r6, 0xffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_open_dev$ndb(0x0, 0x0, 0x14401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6m22.648408399s ago: executing program 37 (id=1469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r5, 0x1, 0x5003) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = signalfd(r1, &(0x7f00000001c0)={[0x9]}, 0x8) pidfd_send_signal(r6, 0xffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_open_dev$ndb(0x0, 0x0, 0x14401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4m38.70403167s ago: executing program 0 (id=1644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x225d4e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xa, 0x4, 0xc4f, 0x1, 0x1}, 0x50) creat(0x0, 0x8) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='veth1_vlan\x00', 0x10) sendmsg$inet(r8, 0x0, 0x4048810) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000300)="28be88d029cd6bb9f2fe330cf9280905af187bd890cd8546d398ebad30465f10acbcc443ab9b69bab2a7d27ba9a56212814c8a2085c3c230255a3060476179f212cb88f2be7a58f4f426dd517e1be50b9485d024c2be4652cc1bae4a916d011470e7af9e833b6f6dbb4bf8ef870373e72a", 0x6c7, r3}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, 0x0, 0x4000035) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x20f, 0x7, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) 4m35.352544519s ago: executing program 0 (id=1648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) sched_setparam(r0, &(0x7f0000000000)=0x401) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a80)=@newae={0x164, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfe, {{@in6=@loopback, 0x4d2, 0xa, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-384-generic\x00'}, 0x0, 0x180}}, @tfcpad={0x8, 0x16, 0x8}, @policy={0xac, 0x7, {{@in=@broadcast, @in=@empty, 0x4e24, 0x6, 0x4e22, 0x7, 0x2, 0x80, 0x80, 0x32}, {0x9, 0x9, 0x8, 0x3, 0x3c, 0x6, 0x8e, 0x2}, {0x1, 0xe3d2, 0x8, 0xfff}, 0x961, 0x0, 0x1, 0x0, 0x2, 0x2}}, @lifetime_val={0x24, 0x9, {0x1, 0x9, 0x9, 0x5a2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x7a680000) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_clone(0x91902000, &(0x7f0000000300)="2a3ea9481b6c115f4a66e5969cd1cf956faf99ab7f966e079c83b28c2f08925572172bdac88510de2b4ad2db5fced5408af82269045d43e43ef3e51f100b797ed7f96e69ffc9e994586f1797b751443af718a6fcf7dc0965967650286a33ddcd42390405", 0x64, &(0x7f0000000380), &(0x7f00000003c0), 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r6, 0x0) 4m34.304026866s ago: executing program 0 (id=1650): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000080)='./file1\x00', 0x1000000, &(0x7f0000000180)=ANY=[], 0x1, 0x363, &(0x7f0000000600)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) read$FUSE(r4, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f00000002c0)={0x4, 0x7, 0x1, 0x9db, 0x7, 0x7f, 0x8}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) 4m29.852964983s ago: executing program 0 (id=1657): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000240)=0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) io_setup(0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e24, 0x68, @mcast1, 0xbc}}, 0xa, 0x0, 0x81, 0xfffffffd, 0x17, 0x9}, &(0x7f0000000380)=0x9c) writev(r4, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f07", 0x39}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x20c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x1c0, 0x8, 0x0, 0x1, [{0x170, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x9}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x8003}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 4m22.984210105s ago: executing program 0 (id=1668): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@nombcache}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}]}, 0x5, 0x4bf, &(0x7f0000000a00)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8240c4, &(0x7f00000000c0)={[{@commit={'commit', 0x3d, 0x8}}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x16) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002440)=@newsa={0x140, 0x1a, 0x633, 0x70bd25, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x4a}, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x0, 0x0, 0x3c}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in=@empty, {0x323, 0x1, 0x7, 0xfffffffffffffffd, 0xc, 0x92be, 0x3}, {0x6, 0x40000, 0x0, 0xffffffffffffffff}, {0xfffffffb, 0x3, 0xca09}, 0x70bd25, 0x3502, 0xa, 0x1, 0x0, 0x9}, [@etimer_thresh={0x8}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x44000840}, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write(r7, &(0x7f0000000200)="c021", 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r9, 0xffffffffffffffff, 0x0, 0xe3aa6ea) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4m16.368078229s ago: executing program 0 (id=1675): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 4m15.016116695s ago: executing program 38 (id=1675): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1m49.682422637s ago: executing program 2 (id=1880): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0e653e", 0x8, 0x3a, 0xff, @dev, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x8, 0x7fff}}}}}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x9c1, 0x30) statx(r1, &(0x7f0000000240)='./file0\x00', 0x1000, 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x24040, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe2bc, 0x40, 0x3, 0x19a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4a1, 0x10000, 0x1, 0x3e0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c9b, 0x20, 0x3, 0x3cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ab4, 0x100, 0x2, 0x232}}], 0x4, &(0x7f0000001b40)={0x2e, 0x29, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x3, 0x303, 0x0, 0x0}}, &(0x7f0000001bc0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x855) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x589b, 0xc000, 0xa, 0x156}) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./dev\x00', 0x0, 0xc00, &(0x7f0000000a40)=ANY=[]) io_uring_setup(0x1e96, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m47.113245505s ago: executing program 2 (id=1873): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r1 = openat$thread_pidfd(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)="2dfd72a23a6f3ff2886b7faae0f3134a3c", 0x11, r1}, 0x64) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r3, 0x402, 0x8000003b) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000034) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x40000029) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x110) fcntl$notify(r6, 0x402, 0x41) r7 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r7, &(0x7f0000000fc0)=""/224, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000800"/20], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r9 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000740)={0x40000004}) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) rename(&(0x7f0000000000)='./file1/file4/file7\x00', &(0x7f0000000100)='./file1/file4/file7\x00') landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 1m45.913601167s ago: executing program 2 (id=1876): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000080)='./file1\x00', 0x1000000, &(0x7f0000000180)=ANY=[], 0x1, 0x363, &(0x7f0000000600)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) read$FUSE(r4, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f00000002c0)={0x4, 0x7, 0x1, 0x9db, 0x7, 0x7f, 0x8}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) 1m44.762393037s ago: executing program 2 (id=1877): open(0x0, 0x143142, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)='\b', 0x1) r1 = userfaultfd(0x80001) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) flistxattr(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x9, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x793, 0xfffff801, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1}}]}, 0x78}, 0x1, 0x7}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) close(0x3) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xf41a2000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x14032, 0xffffffffffffffff, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) 1m42.094160128s ago: executing program 2 (id=1878): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000003380), 0x0, 0x100, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x6800c101}, 0x40000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) dup(r4) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) dup2(r3, r3) sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3e07b7b9}, 0x1c, 0x0}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x9, 0x4, 0xffffffff, 0xe7, 0xd]}, 0x0) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) 1m40.48023939s ago: executing program 2 (id=1884): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) 1m23.985914495s ago: executing program 39 (id=1884): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) 15.079943742s ago: executing program 8 (id=1998): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(r0, &(0x7f0000000b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002bc0)={0xa0, 0x0, r1, {{0x3, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getcwd(&(0x7f0000000200)=""/113, 0x71) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x671}, 0x3, [0x2955, 0x2, 0x1000, 0x80000001, 0x8, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x2, 0x1, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x2, 0x3, 0x40000, 0xff, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffe, 0x10, 0x13d, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x6, 0x3, 0x2a12, 0x2, 0x8, 0x7, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x2, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0x6], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x9, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x7, 0x9, 0x9, 0x3, 0x35, 0x8001, 0x80009, 0x4, 0x0, 0x0, 0x101, 0x2, 0x0, 0x412, 0x3, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x36, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x7, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x3, 0x9, 0x3, 0x0, 0xa0, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0x10, 0xa0c2, 0xfff, 0xc, 0x1, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7f, 0x1, 0x80000001, 0x7, 0x401, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0x2, 0xe7a5, 0x1, 0x7, 0x694e1c40, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x400003, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x7, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0xcb8a, 0x1, 0x3, 0x8, 0x4, 0x8, 0xf, 0x1, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x8, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040061}, 0x10) 13.684939889s ago: executing program 7 (id=2001): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 12.451715372s ago: executing program 7 (id=2003): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r1 = getpid() brk(0x8000000000000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000080)=0x9, 0x4) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 'nicvf0\x00'}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002340)={0x2020}, 0x2020) ioctl$SIOCSIFHWADDR(r8, 0x8924, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1a27f8ca4e3a7305", "99327bc5fac62d6a6b9b6ebbaece973f7e58c49dfd4fa152a0522422c37c70f8", "e58b9f99", "a645f9c4b6c9efe1"}, 0x38) 12.449539551s ago: executing program 8 (id=2004): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801) signalfd(r3, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x40030000000000}, 0x4000) 10.566647891s ago: executing program 4 (id=2005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$dvb_demux(&(0x7f0000000040), 0x57, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000131411"], 0x18}, 0x2}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000180)={0x101, 0x7, 0xf8a, 0xca29c56, 0x2630, 0x9}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r4, 0x4a028000) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000c00)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x10, 0x81, 0x33565348, 0x8, 0xa, [{0x10, 0x7}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x202, 0x3fd}, {0x5, 0x1}, {0x4ce, 0x8}, {0x8007ff, 0xd}, {0x6, 0x1}], 0x5, 0xff, 0x6, 0x0, 0x5}}}) listen(r6, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x4d, 0x5, 0x9], [0x6, 0x0, 0x40008000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0x13e}}, 0x4c}, 0x1, 0x0, 0x0, 0x240408dd}, 0x80) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20044044) 9.45589954s ago: executing program 4 (id=2006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) flock(r3, 0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(&(0x7f0000000340)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) fchdir(0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x720, 0x12) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000"], 0x10}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000000080)=[{0x0}], 0x1, 0x65, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) socket$unix(0x1, 0x1, 0x0) 8.465390217s ago: executing program 9 (id=2007): syz_mount_image$fuse(0x0, 0x0, 0x100801, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002280)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x48, 0x0, 0x0, 0xfffffffe}, 0x28) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', '', [{0x20, '\x18pT\x1c\xd9\xc4b\x16\x9c\x04f\x84\x10\t'}, {0x20, '#! '}]}, 0x17) close(r7) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003bc0), 0x0, 0x5d2dd0c54751f8e3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000000)={[{@noquota}, {@noblock_validity}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@sb={'sb', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000001000)="$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") 8.463527957s ago: executing program 7 (id=2008): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000ffffffff0500"/20, @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001980), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf254b000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x80) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x8000000, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40480, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) unshare(0x6040580) socket$alg(0x26, 0x5, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000001d00)={'batadv_slave_1\x00'}) 7.923419971s ago: executing program 4 (id=2009): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 7.447975664s ago: executing program 9 (id=2010): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 7.446326813s ago: executing program 8 (id=2019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x400, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009000000000000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000001000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018390000040000000000000000000000b7e3754188262253aa54a048d9080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018290000", @ANYRES32=r1, @ANYBLOB="000000008e0040009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0xffffffffffffffff, 0x100000000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001e8, 0x12) r5 = socket$inet(0x2, 0x2, 0x1) socket$packet(0x11, 0xa, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x4, 0x2, 0x2, {0xa, 0x4e23, 0x8, @empty, 0xe5}}}, 0x3a) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xea, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x820) 5.983949132s ago: executing program 9 (id=2011): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) preadv2(r3, &(0x7f0000001840)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000000680)=""/24, 0x18}, {&(0x7f00000006c0)=""/119, 0x77}], 0x3, 0x1, 0x7fffffff, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) 5.983028062s ago: executing program 4 (id=2021): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 5.906353984s ago: executing program 8 (id=2012): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f00000003c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, 0x0, 0x2, 0x0, 0x9}}) shmctl$SHM_UNLOCK(r3, 0xc) semget(0x1, 0x1, 0x39c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) socket$unix(0x1, 0x5, 0x0) 5.834231556s ago: executing program 7 (id=2013): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x74) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x12443) pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x300, 0x0, 0x10000000, 0xfffffffffffffffd, 0xb}, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) 4.825417342s ago: executing program 4 (id=2014): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x305295080, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000280)={0xffffcf93, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x20040840) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r4) getrandom(&(0x7f0000000040)=""/29, 0x1d, 0x3) r5 = gettid() r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) io_uring_setup(0x344f, &(0x7f0000000440)={0x0, 0x1539, 0x0, 0x2, 0x97}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYRESOCT=r0, @ANYBLOB="90677326fdda104adf5a38bf3a790b4b9a6d65b9fc769fa57f425516aba554761251bc56a77f570ab9a4e969946e90d1999f500e7e07b791183ff44c76e437", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r7, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140), 0x0, 0x0}, 0x40) 3.218086675s ago: executing program 4 (id=2015): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00') preadv(r8, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0x9d, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 2.64192984s ago: executing program 7 (id=2016): socket(0x23, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) exit(0xc) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/29) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00') 2.612129021s ago: executing program 9 (id=2017): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYBLOB="010000400000000000eb13000000180001801400"], 0x2c}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@dax}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}]}, 0xfe, 0x468, &(0x7f0000001200)="$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") r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x31, &(0x7f0000000240)=0x2, 0x2) 2.596228021s ago: executing program 8 (id=2018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) flock(r3, 0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(&(0x7f0000000340)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) fchdir(0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x720, 0x12) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000"], 0x10}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000000080)=[{0x0}], 0x1, 0x65, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) socket$unix(0x1, 0x1, 0x0) 1.379858984s ago: executing program 8 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 1.376723333s ago: executing program 9 (id=2022): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 1.262844947s ago: executing program 7 (id=2023): io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000018, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x96}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='n\x00', 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18}) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f00006d8000/0x2000)=nil, r10, 0xd, 0x4000010, r9, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/page_idle/bitmap\x00', 0x2, 0x0) 0s ago: executing program 9 (id=2024): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) kernel console output (not intermixed with test programs): 40][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1004.459097][T11241] loop8: detected capacity change from 0 to 131072 [ 1004.491698][T11241] F2FS-fs (loop8): invalid crc value [ 1004.530678][T11241] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1004.576556][T11241] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 1004.624370][T11241] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 1004.887052][ T8979] Bluetooth: hci3: command 0x0409 tx timeout [ 1005.812262][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1310'. [ 1006.165430][T11227] chnl_net:caif_netlink_parms(): no params data found [ 1007.427585][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 1009.609598][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 1009.794018][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1314'. [ 1010.026442][T11227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.033837][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.053282][T11227] device bridge_slave_0 entered promiscuous mode [ 1010.074330][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.085004][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.249225][T11227] device bridge_slave_1 entered promiscuous mode [ 1010.361351][T11293] loop0: detected capacity change from 0 to 512 [ 1010.387285][T11293] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1010.938745][T11293] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #17: comm syz.0.1316: inode has both inline data and extents flags [ 1010.952548][T11293] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1316: couldn't read orphan inode 17 (err -117) [ 1010.965151][T11293] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1011.016390][T11291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1316: bg 0: block 65: padding at end of block bitmap is not set [ 1011.035062][T11291] __quota_error: 47 callbacks suppressed [ 1011.035078][T11291] Quota error (device loop0): write_blk: dquota write failed [ 1011.048819][T11291] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1011.058934][T11291] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1316: Failed to acquire dquot type 0 [ 1011.140047][T11227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.396708][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1011.416600][T11227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.865835][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 1012.207357][T11227] team0: Port device team_slave_0 added [ 1012.223886][T11227] team0: Port device team_slave_1 added [ 1012.368095][T11227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.403421][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.390319][T11309] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1319'. [ 1013.473366][T11227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.645737][T11227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.662972][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.788704][T11319] tmpfs: Unknown parameter 'quota' [ 1013.811908][T11227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.813329][T11227] device hsr_slave_0 entered promiscuous mode [ 1015.734692][T11325] loop8: detected capacity change from 0 to 128 [ 1015.765417][T11227] device hsr_slave_1 entered promiscuous mode [ 1015.776356][T11227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.445368][T11227] Cannot create hsr debugfs directory [ 1017.471547][T11325] FAT-fs (loop8): Directory bread(block 414) failed [ 1017.482105][T11325] FAT-fs (loop8): Directory bread(block 415) failed [ 1017.508619][T11325] FAT-fs (loop8): Directory bread(block 416) failed [ 1017.534140][T11325] FAT-fs (loop8): Directory bread(block 417) failed [ 1017.540838][T11325] FAT-fs (loop8): Directory bread(block 418) failed [ 1017.602779][T11325] FAT-fs (loop8): Directory bread(block 419) failed [ 1017.629965][T11325] FAT-fs (loop8): Directory bread(block 420) failed [ 1017.660320][T11325] FAT-fs (loop8): Directory bread(block 421) failed [ 1018.161196][T11340] FAT-fs (loop8): Directory bread(block 414) failed [ 1018.168672][T11340] FAT-fs (loop8): Directory bread(block 415) failed [ 1021.656576][T11342] /dev/nullb0: Can't open blockdev [ 1022.086093][T11364] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1022.104804][T11364] cramfs: wrong magic [ 1022.948041][T11368] loop0: detected capacity change from 0 to 32768 [ 1022.974947][T11368] (syz.0.1324,11368,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1022.988785][T11368] (syz.0.1324,11368,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1023.021348][T11368] JBD2: Ignoring recovery information on journal [ 1023.050319][T11368] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1025.752843][ T9] device hsr_slave_0 left promiscuous mode [ 1025.847644][ T9] device hsr_slave_1 left promiscuous mode [ 1025.883253][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.905317][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.962012][ T9] device bridge_slave_1 left promiscuous mode [ 1025.986103][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.210738][ T9] device bridge_slave_0 left promiscuous mode [ 1027.222325][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.276090][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 1027.348014][ T9] device veth1_vlan left promiscuous mode [ 1027.391682][ T9] device veth0_vlan left promiscuous mode [ 1031.250429][T11422] loop8: detected capacity change from 0 to 256 [ 1031.411770][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1031.499965][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1031.630736][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.749622][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.851130][ T9] bond0 (unregistering): Released all slaves [ 1035.854734][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1350'. [ 1035.906595][T11227] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1036.240397][T11227] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1036.999810][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1354'. [ 1037.198000][T11227] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1037.233830][T11227] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1037.554434][T11466] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1356'. [ 1038.759007][T11470] SET target dimension over the limit! [ 1039.543363][T11227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.583872][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1039.605225][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1039.636005][T11227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.660564][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1040.190895][T11482] netlink: 'syz.0.1359': attribute type 5 has an invalid length. [ 1040.198902][T11482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1359'. [ 1040.531594][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1040.606297][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.613496][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.373059][T11484] loop7: detected capacity change from 0 to 32768 [ 1041.398948][T11484] (syz.7.1344,11484,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1041.413369][T11484] (syz.7.1344,11484,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1041.434834][T11484] JBD2: Ignoring recovery information on journal [ 1041.480360][T11484] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1041.504603][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1041.800216][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1041.840976][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1041.899622][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.906873][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.987167][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1042.087487][ T4282] Bluetooth: hci5: unexpected subevent 0x0e length: 32 > 15 [ 1042.621797][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1042.654848][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1042.666422][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1042.709891][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1043.719537][T11499] atomic_op ffff888055559198 conn xmit_atomic 0000000000000000 [ 1044.465879][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1044.483616][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1044.527470][T11227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1044.546269][ T5955] ocfs2: Unmounting device (7,7) on (node local) [ 1044.616535][T11227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1044.653719][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1044.664152][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1044.686470][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1044.730181][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1044.742969][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1045.271036][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1045.279760][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1045.307214][T11227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.816993][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1045.826688][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1045.855806][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1045.864837][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1045.877591][T11227] device veth0_vlan entered promiscuous mode [ 1045.887569][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1045.899871][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1045.913760][T11227] device veth1_vlan entered promiscuous mode [ 1045.941683][T11227] device veth0_macvtap entered promiscuous mode [ 1045.950027][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1045.971067][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1045.979348][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1045.989120][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1046.001355][T11227] device veth1_macvtap entered promiscuous mode [ 1046.009834][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1046.018895][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1046.042314][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.059865][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.072569][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.085418][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.095390][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.105950][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.116373][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.126896][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.138166][T11227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.149482][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1046.159451][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1046.173356][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.184455][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.196009][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.207013][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.217426][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.228184][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.238300][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.249091][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.260606][T11227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.270960][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1046.288175][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1046.303230][T11227] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.313419][T11227] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.323194][T11227] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.332807][T11227] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.429373][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.446977][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.476852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1046.487069][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.501081][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.511404][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1046.861841][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1367'. [ 1047.345668][T11554] loop0: detected capacity change from 0 to 8 [ 1049.494570][T11577] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1352'. [ 1049.752710][ T4282] Bluetooth: hci3: command 0x0405 tx timeout [ 1051.058952][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1355'. [ 1051.068004][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1355'. [ 1051.079972][T11572] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.088754][T11572] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.097507][T11572] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.106202][T11572] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.137437][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1355'. [ 1051.146783][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1355'. [ 1051.769293][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1051.775863][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1052.143303][T11588] fuse: Bad value for 'fd' [ 1052.351498][T11594] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1360'. [ 1054.880022][T11615] loop7: detected capacity change from 0 to 512 [ 1055.048336][T11615] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1055.341631][T11615] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #17: comm syz.7.1363: inode has both inline data and extents flags [ 1055.371153][T11615] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1363: couldn't read orphan inode 17 (err -117) [ 1055.384026][T11615] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1055.431260][T11613] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1363: bg 0: block 65: padding at end of block bitmap is not set [ 1055.446614][T11613] Quota error (device loop7): write_blk: dquota write failed [ 1055.454170][T11613] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1055.464253][T11613] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1363: Failed to acquire dquot type 0 [ 1056.480860][ T5955] EXT4-fs (loop7): unmounting filesystem. [ 1057.015657][T11638] tmpfs: Unknown parameter 'usrquota' [ 1058.011898][T11640] loop8: detected capacity change from 0 to 4096 [ 1058.159696][T11640] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1059.058822][T11650] loop7: detected capacity change from 0 to 4096 [ 1059.068554][T11650] ntfs3: Unknown parameter 'windows_names' [ 1062.807964][T11664] overlayfs: missing 'lowerdir' [ 1067.185567][T11675] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1067.421860][T11691] binder: 11684:11691 unknown command 32 [ 1067.427628][T11691] binder: 11684:11691 ioctl c0306201 2000000001c0 returned -22 [ 1068.191902][T11675] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1068.245330][T11675] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1068.323203][T11675] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1068.373187][T11675] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1068.421375][T11675] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1068.593060][T11675] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1073.428520][T11734] bridge0: port 3(syz_tun) entered blocking state [ 1073.435321][T11734] bridge0: port 3(syz_tun) entered disabled state [ 1073.442621][T11734] device syz_tun entered promiscuous mode [ 1073.448829][T11734] bridge0: port 3(syz_tun) entered blocking state [ 1073.455336][T11734] bridge0: port 3(syz_tun) entered forwarding state [ 1074.356299][T11747] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1395'. [ 1074.653847][T11755] fuse: Bad value for 'fd' [ 1074.800212][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1398'. [ 1074.872416][ T27] audit: type=1326 audit(1786820616.732:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.9.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x0 [ 1075.981454][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1401'. [ 1076.048259][T11769] tmpfs: Unknown parameter 'quota' [ 1078.814742][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1404'. [ 1079.372600][T11794] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1405'. [ 1079.510946][T11799] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1407'. [ 1081.918384][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1413'. [ 1083.976146][T11832] tmpfs: Unknown parameter 'quota' [ 1085.152880][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1417'. [ 1086.031233][T11843] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1419'. [ 1086.150458][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1418'. [ 1089.551931][T11868] SET target dimension over the limit! [ 1090.376514][T11873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1425'. [ 1092.844937][T11889] tmpfs: Unknown parameter 'quota' [ 1095.441463][T11902] loop0: detected capacity change from 0 to 8 [ 1097.391449][T11920] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1432'. [ 1098.568605][T11925] sctp_transport_update_pmtu: 47 callbacks suppressed [ 1098.568661][T11925] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1098.586617][T11925] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1098.689006][T11925] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1098.701042][T11925] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1098.786047][T11929] loop8: detected capacity change from 0 to 2048 [ 1098.803499][T11925] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1098.814695][T11925] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1098.826305][T11925] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1098.839573][T11925] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1098.851474][T11925] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1098.863456][T11925] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1099.180462][T11929] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1099.189496][T11929] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.443170][T11938] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1428'. [ 1100.561802][ T5942] EXT4-fs (loop8): unmounting filesystem. [ 1101.744768][T11949] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1439'. [ 1102.057940][T11954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1442'. [ 1105.442513][T11985] bridge0: port 3(syz_tun) entered blocking state [ 1105.455300][T11985] bridge0: port 3(syz_tun) entered disabled state [ 1105.788395][T11985] device syz_tun entered promiscuous mode [ 1105.796333][T11985] bridge0: port 3(syz_tun) entered blocking state [ 1105.803177][T11985] bridge0: port 3(syz_tun) entered forwarding state [ 1105.954592][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1449'. [ 1106.240438][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1460'. [ 1108.832631][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1454'. [ 1109.791664][T12013] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1455'. [ 1113.072354][T12048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1462'. [ 1113.439438][T12057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1468'. [ 1116.002286][T12067] XFS (nullb0): Invalid superblock magic number [ 1116.525555][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1466'. [ 1118.340164][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.250407][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1475'. [ 1121.342095][T12117] loop0: detected capacity change from 0 to 1024 [ 1121.349691][T12117] hfsplus: unable to find HFS+ superblock [ 1122.867713][T12025] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1124.679462][T12142] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1481'. [ 1124.880402][ T4328] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1125.140158][ T4328] usb 1-1: Using ep0 maxpacket: 16 [ 1125.178820][ T4328] usb 1-1: config 111 has too many interfaces: 116, using maximum allowed: 32 [ 1125.311081][ T4328] usb 1-1: config 111 has an invalid descriptor of length 47, skipping remainder of the config [ 1125.421873][ T4328] usb 1-1: config 111 has 0 interfaces, different from the descriptor's value: 116 [ 1125.500293][ T4328] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1125.542375][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1125.595744][ T4328] usb 1-1: Product: syz [ 1125.639613][ T4328] usb 1-1: Manufacturer: syz [ 1125.644926][ T4328] usb 1-1: SerialNumber: syz [ 1126.120016][ T4328] usb 1-1: USB disconnect, device number 2 [ 1126.662730][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1474'. [ 1127.890826][T12158] block device autoloading is deprecated and will be removed. [ 1128.648977][T12164] overlayfs: missing 'lowerdir' [ 1131.404852][T12172] Mass Storage Function, version: 2009/09/11 [ 1131.411601][T12172] LUN: removable file: (no medium) [ 1131.474219][ T27] audit: type=1800 audit(1786820668.707:74): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1487" name="cdrom" dev="configfs" ino=57603 res=0 errno=0 [ 1133.122753][ T8990] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1134.005335][ T8990] usb 1-1: Using ep0 maxpacket: 32 [ 1134.029862][ T8990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1134.122335][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1492'. [ 1134.267308][ T8990] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 1134.276597][ T8990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.288635][ T8990] usb 1-1: config 0 descriptor?? [ 1134.627112][T12203] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 1136.261113][ T8990] usbhid 1-1:0.0: can't add hid device: -71 [ 1136.269274][ T8990] usbhid: probe of 1-1:0.0 failed with error -71 [ 1136.455806][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1495'. [ 1137.177875][ T8990] usb 1-1: USB disconnect, device number 3 [ 1137.235023][ T8979] Bluetooth: hci3: command 0x0406 tx timeout [ 1137.318176][T12209] Process accounting resumed [ 1137.726603][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1137.802202][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1138.666384][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1138.676080][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1138.699802][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1138.709465][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1140.964877][ T8979] Bluetooth: hci4: command 0x0409 tx timeout [ 1143.217600][ T8979] Bluetooth: hci4: command 0x041b tx timeout [ 1145.109537][T12254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1501'. [ 1145.472115][ T8979] Bluetooth: hci4: command 0x040f tx timeout [ 1145.561079][T12262] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1506'. [ 1147.122620][T12270] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1507'. [ 1147.326349][T12267] tmpfs: Unknown parameter 'quota' [ 1149.016192][ T8979] Bluetooth: hci4: command 0x0419 tx timeout [ 1149.287958][T12224] chnl_net:caif_netlink_parms(): no params data found [ 1149.944801][ T4426] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.955746][ T4426] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.549649][T12302] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1514'. [ 1152.032498][ T4426] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.153207][ T4426] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.483914][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1517'. [ 1152.713622][T12315] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1519'. [ 1152.748743][ T4426] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1153.329720][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1520'. [ 1153.671524][ T4426] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.004911][T12326] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1530'. [ 1154.385316][ T4426] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.546510][ T4426] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.731793][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.919790][T12224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.930924][T12224] device bridge_slave_0 entered promiscuous mode [ 1155.974993][T12224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.982286][T12224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.021799][T12224] device bridge_slave_1 entered promiscuous mode [ 1156.981762][T12224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.993922][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 1157.018494][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1525'. [ 1157.179420][T12224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.270291][T12224] team0: Port device team_slave_0 added [ 1157.588476][T12224] team0: Port device team_slave_1 added [ 1159.033165][T12361] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1528'. [ 1160.755067][T12224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.970346][T12378] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1531'. [ 1162.098172][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.140207][T12224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.153441][T12224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.160865][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.186810][ C1] vkms_vblank_simulate: vblank timer overrun [ 1162.203715][T12224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.577230][T12399] tmpfs: Unknown parameter 'quota' [ 1164.586886][T12224] device hsr_slave_0 entered promiscuous mode [ 1165.981648][ T8979] Bluetooth: hci4: command 0x0405 tx timeout [ 1166.264220][T12224] device hsr_slave_1 entered promiscuous mode [ 1166.307652][T12224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1166.316165][T12224] Cannot create hsr debugfs directory [ 1166.857705][T12424] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1542'. [ 1170.266995][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1545'. [ 1171.757213][T12454] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1546'. [ 1174.365931][T12479] tmpfs: Unknown parameter 'quota' [ 1176.594460][ T4426] bridge0: port 3(erspan0) entered disabled state [ 1177.102142][ T4426] device erspan0 left promiscuous mode [ 1177.190029][ T4426] bridge0: port 3(erspan0) entered disabled state [ 1177.444679][T12491] loop7: detected capacity change from 0 to 512 [ 1177.803188][T12491] FAT-fs (loop7): Directory bread(block 199916) failed [ 1177.810090][T12491] FAT-fs (loop7): Directory bread(block 199917) failed [ 1177.817076][T12491] FAT-fs (loop7): Directory bread(block 199918) failed [ 1177.824285][T12491] FAT-fs (loop7): Directory bread(block 199919) failed [ 1177.831170][T12491] FAT-fs (loop7): Directory bread(block 199920) failed [ 1177.838289][T12491] FAT-fs (loop7): Directory bread(block 199921) failed [ 1177.845314][T12491] FAT-fs (loop7): Directory bread(block 199922) failed [ 1177.852175][T12491] FAT-fs (loop7): Directory bread(block 199923) failed [ 1177.899550][T12488] FAT-fs (loop7): FAT read failed (blocknr 128) [ 1178.178383][T12498] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1555'. [ 1179.003182][T12496] loop7: detected capacity change from 0 to 256 [ 1179.520268][T12501] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1179.902437][T12504] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 1180.652253][T12513] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1559'. [ 1185.556274][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.910763][T12537] tmpfs: Unknown parameter 'quota' [ 1187.527876][T12544] loop8: detected capacity change from 0 to 256 [ 1187.956880][T12550] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1189.712013][T12559] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1570'. [ 1190.370541][T12576] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1574'. [ 1196.907548][ T4426] device hsr_slave_0 left promiscuous mode [ 1197.078768][ T4426] device hsr_slave_1 left promiscuous mode [ 1197.135489][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.154032][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.173205][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.309024][T12606] futex_wake_op: syz.7.1582 tries to shift op by 144; fix this program [ 1197.340691][T12606] loop7: detected capacity change from 0 to 256 [ 1197.383397][T12606] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1197.491372][ T27] audit: type=1800 audit(1786820730.092:75): pid=12606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1582" name="file1" dev="loop7" ino=1048766 res=0 errno=0 [ 1197.550019][T12606] syz.7.1582: attempt to access beyond end of device [ 1197.550019][T12606] loop7: rw=0, sector=184, nr_sectors = 120 limit=256 [ 1197.645437][T12606] syz.7.1582: attempt to access beyond end of device [ 1197.645437][T12606] loop7: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 1197.659175][T12605] syz.7.1582: attempt to access beyond end of device [ 1197.659175][T12605] loop7: rw=524288, sector=2976, nr_sectors = 256 limit=256 [ 1197.667204][T12606] syz.7.1582: attempt to access beyond end of device [ 1197.667204][T12606] loop7: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 1197.675631][T12605] syz.7.1582: attempt to access beyond end of device [ 1197.675631][T12605] loop7: rw=0, sector=3104, nr_sectors = 8 limit=256 [ 1197.687285][T12606] syz.7.1582: attempt to access beyond end of device [ 1197.687285][T12606] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1197.702967][T12605] syz.7.1582: attempt to access beyond end of device [ 1197.702967][T12605] loop7: rw=0, sector=3104, nr_sectors = 8 limit=256 [ 1197.713664][T12606] syz.7.1582: attempt to access beyond end of device [ 1197.713664][T12606] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1197.727924][T12605] syz.7.1582: attempt to access beyond end of device [ 1197.727924][T12605] loop7: rw=0, sector=3104, nr_sectors = 8 limit=256 [ 1197.740580][T12606] syz.7.1582: attempt to access beyond end of device [ 1197.740580][T12606] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1199.557680][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.890834][ T4426] device bridge_slave_1 left promiscuous mode [ 1199.897213][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.951081][T12610] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1581'. [ 1200.233656][T12615] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1583'. [ 1201.044684][ T4426] device bridge_slave_0 left promiscuous mode [ 1201.087534][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.445544][ T4426] device veth1_macvtap left promiscuous mode [ 1201.458062][ T4426] device veth0_macvtap left promiscuous mode [ 1201.603834][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1585'. [ 1202.339484][ T4426] device veth1_vlan left promiscuous mode [ 1202.646237][ T53] block nbd7: Attempted send on invalid socket [ 1202.652688][ T53] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1202.663265][T12626] efs: cannot read volume header [ 1203.158664][ T4426] device veth0_vlan left promiscuous mode [ 1203.170449][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1203.180347][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1203.188395][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1203.214829][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1203.223390][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1203.236501][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1203.360309][T12630] sctp: [Deprecated]: syz.9.1587 (pid 12630) Use of int in max_burst socket option deprecated. [ 1203.360309][T12630] Use struct sctp_assoc_value instead [ 1203.709730][T12637] netlink: 204 bytes leftover after parsing attributes in process `syz.9.1587'. [ 1205.534525][ T4291] Bluetooth: hci5: command 0x0409 tx timeout [ 1206.971608][ T4426] team0 (unregistering): Port device team_slave_1 removed [ 1207.046012][ T4426] team0 (unregistering): Port device team_slave_0 removed [ 1207.140217][ T4426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.226157][ T4426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.681737][ T4426] bond0 (unregistering): Released all slaves [ 1207.783043][ T4291] Bluetooth: hci5: command 0x041b tx timeout [ 1207.789620][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1586'. [ 1207.808295][T12624] device syz_tun left promiscuous mode [ 1207.813984][T12624] bridge0: port 3(syz_tun) entered disabled state [ 1207.839219][T12624] device bridge_slave_1 left promiscuous mode [ 1207.855562][T12624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.883701][T12624] device bridge_slave_0 left promiscuous mode [ 1207.904175][T12624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.029160][T12640] lo speed is unknown, defaulting to 1000 [ 1208.029872][T12642] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1208.170487][T12640] lo speed is unknown, defaulting to 1000 [ 1208.273142][T12640] lo speed is unknown, defaulting to 1000 [ 1208.302665][T12640] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1208.359385][T12640] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1208.704876][T12692] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1593'. [ 1209.380542][T12640] lo speed is unknown, defaulting to 1000 [ 1209.473699][T12640] lo speed is unknown, defaulting to 1000 [ 1209.556253][T12702] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1595'. [ 1210.035989][ T4291] Bluetooth: hci5: command 0x040f tx timeout [ 1210.359187][T12640] lo speed is unknown, defaulting to 1000 [ 1210.421053][T12640] lo speed is unknown, defaulting to 1000 [ 1210.521051][T12640] lo speed is unknown, defaulting to 1000 [ 1210.968167][T12640] lo speed is unknown, defaulting to 1000 [ 1211.884257][T12719] futex_wake_op: syz.9.1599 tries to shift op by 144; fix this program [ 1212.062103][T12721] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1600'. [ 1212.290600][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 1213.286937][ T5771] block nbd0: Attempted send on invalid socket [ 1213.293250][ T5771] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1213.302999][T12733] efs: cannot read volume header [ 1214.246108][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 1214.255750][T12728] device bridge_slave_1 left promiscuous mode [ 1214.262407][T12728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.531458][ T4291] Bluetooth: hci5: command 0x0405 tx timeout [ 1214.544169][T12728] device bridge_slave_0 left promiscuous mode [ 1214.552883][T12728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.724755][T12743] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1605'. [ 1214.860534][T12627] chnl_net:caif_netlink_parms(): no params data found [ 1215.090693][ T4466] Bluetooth: (null): Invalid header checksum [ 1215.098103][ T4466] Bluetooth: (null): Invalid header checksum [ 1215.402019][ T4676] Bluetooth: (null): Invalid header checksum [ 1215.430791][ T4466] Bluetooth: (null): Invalid header checksum [ 1215.598829][T12750] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1607'. [ 1217.613405][T12775] tmpfs: Unknown parameter 'quota' [ 1217.852293][T12776] tmpfs: Unknown parameter 'quota' [ 1217.982979][T12774] tmpfs: Unknown parameter 'quota' [ 1218.516380][T12627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.847540][T12627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.856456][T12627] device bridge_slave_0 entered promiscuous mode [ 1218.892184][T12627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.911306][T12627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.924115][T12627] device bridge_slave_1 entered promiscuous mode [ 1219.015177][T12627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.077059][T12627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.309525][T12783] tmpfs: Unknown parameter 'quota' [ 1220.899119][T12785] loop7: detected capacity change from 0 to 256 [ 1220.906186][T12785] exfat: Deprecated parameter 'namecase' [ 1220.948677][T12785] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 1221.210609][T12627] team0: Port device team_slave_0 added [ 1221.245527][T12627] team0: Port device team_slave_1 added [ 1221.346118][T12627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.508401][T12627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.534825][T12627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.574232][T12627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.605559][T12627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.788168][T12627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.825299][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1617'. [ 1223.933495][T12627] device hsr_slave_0 entered promiscuous mode [ 1223.986775][T12627] device hsr_slave_1 entered promiscuous mode [ 1223.996567][T12627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1224.004219][T12627] Cannot create hsr debugfs directory [ 1224.257748][T12824] futex_wake_op: syz.8.1624 tries to shift op by 144; fix this program [ 1224.297970][T12824] loop8: detected capacity change from 0 to 256 [ 1224.445100][T12824] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1224.525355][ T27] audit: type=1800 audit(1786820755.418:76): pid=12824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1624" name="file1" dev="loop8" ino=1048767 res=0 errno=0 [ 1224.574090][T12824] bio_check_eod: 4354 callbacks suppressed [ 1224.574216][T12824] syz.8.1624: attempt to access beyond end of device [ 1224.574216][T12824] loop8: rw=0, sector=184, nr_sectors = 120 limit=256 [ 1224.656907][T12824] syz.8.1624: attempt to access beyond end of device [ 1224.656907][T12824] loop8: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 1224.661101][T12823] syz.8.1624: attempt to access beyond end of device [ 1224.661101][T12823] loop8: rw=524288, sector=4264, nr_sectors = 256 limit=256 [ 1224.675197][T12824] syz.8.1624: attempt to access beyond end of device [ 1224.675197][T12824] loop8: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 1224.685867][T12823] syz.8.1624: attempt to access beyond end of device [ 1224.685867][T12823] loop8: rw=0, sector=4392, nr_sectors = 8 limit=256 [ 1224.698531][T12824] syz.8.1624: attempt to access beyond end of device [ 1224.698531][T12824] loop8: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1224.712254][T12823] syz.8.1624: attempt to access beyond end of device [ 1224.712254][T12823] loop8: rw=0, sector=4392, nr_sectors = 8 limit=256 [ 1224.725247][T12824] syz.8.1624: attempt to access beyond end of device [ 1224.725247][T12824] loop8: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1224.738631][T12823] syz.8.1624: attempt to access beyond end of device [ 1224.738631][T12823] loop8: rw=0, sector=4392, nr_sectors = 8 limit=256 [ 1224.751508][T12824] syz.8.1624: attempt to access beyond end of device [ 1224.751508][T12824] loop8: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1225.588971][ T22] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1226.446690][ T22] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1226.467634][T12838] tmpfs: Unknown parameter 'quota' [ 1226.521532][ T22] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1226.539248][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.578596][ T22] usb 9-1: Product: syz [ 1226.582829][ T22] usb 9-1: Manufacturer: syz [ 1226.587456][ T22] usb 9-1: SerialNumber: syz [ 1226.765186][ T22] usb 9-1: config 0 descriptor?? [ 1226.783365][T12830] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1226.814022][ T22] streamzap 9-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1229.852810][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1625'. [ 1230.638874][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1630'. [ 1230.664278][ T4327] usb 9-1: USB disconnect, device number 2 [ 1230.771106][ T4426] device hsr_slave_0 left promiscuous mode [ 1230.802579][T12856] loop8: detected capacity change from 0 to 256 [ 1230.811086][ T4426] device hsr_slave_1 left promiscuous mode [ 1230.968688][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.643503][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.658819][T12856] FAT-fs (loop8): Directory bread(block 64) failed [ 1232.665437][T12856] FAT-fs (loop8): Directory bread(block 65) failed [ 1232.706071][ T4426] device bridge_slave_1 left promiscuous mode [ 1232.719439][T12856] FAT-fs (loop8): Directory bread(block 66) failed [ 1232.724272][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.728432][T12856] FAT-fs (loop8): Directory bread(block 67) failed [ 1232.739885][T12856] FAT-fs (loop8): Directory bread(block 68) failed [ 1232.902122][T12856] FAT-fs (loop8): Directory bread(block 69) failed [ 1232.910141][T12856] FAT-fs (loop8): Directory bread(block 70) failed [ 1233.010051][ T4426] device bridge_slave_0 left promiscuous mode [ 1233.024139][T12856] FAT-fs (loop8): Directory bread(block 71) failed [ 1233.053282][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.061341][T12856] FAT-fs (loop8): Directory bread(block 72) failed [ 1233.088021][T12856] FAT-fs (loop8): Directory bread(block 73) failed [ 1233.290080][T12871] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1636'. [ 1233.664124][T12879] futex_wake_op: syz.0.1635 tries to shift op by 144; fix this program [ 1233.851585][T12881] siw: device registration error -23 [ 1234.137322][ T4426] team0 (unregistering): Port device team_slave_1 removed [ 1234.203177][ T4426] team0 (unregistering): Port device team_slave_0 removed [ 1234.347000][ T4426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.152917][ T4426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.584703][T12896] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1640'. [ 1235.600351][T12896] loop7: detected capacity change from 0 to 512 [ 1235.748145][T12897] tmpfs: Unknown parameter 'quota' [ 1235.758410][T12896] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1235.847289][T12896] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1235.867372][T12896] EXT4-fs (loop7): Remounting filesystem read-only [ 1235.875900][T12896] EXT4-fs (loop7): 1 truncate cleaned up [ 1235.881609][T12896] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1236.339245][ T5955] EXT4-fs (loop7): unmounting filesystem. [ 1236.371000][ T4426] bond0 (unregistering): Released all slaves [ 1236.764166][T12907] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1642'. [ 1240.031687][T12627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1240.086458][T12627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1240.180307][T12926] xt_l2tp: invalid flags combination: 4 [ 1240.314074][T12933] futex_wake_op: syz.0.1648 tries to shift op by 144; fix this program [ 1240.408108][T12627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1240.437839][T12627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1241.184566][T12627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.273272][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1241.295394][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1241.335811][T12627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.388522][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1241.408620][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1241.436717][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.443946][ T4426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.485337][T12946] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1646'. [ 1241.518255][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1241.553388][T12941] loop8: detected capacity change from 0 to 4096 [ 1241.589928][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1241.635420][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1241.671064][T12941] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1241.684238][T12377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.691490][T12377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.764557][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1241.815154][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1241.925987][T12627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1241.990178][T12627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1242.032330][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1242.056734][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1242.081224][T12954] futex_wake_op: syz.9.1652 tries to shift op by 144; fix this program [ 1242.853798][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1243.242466][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1243.282720][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1244.005021][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1244.013895][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1244.022511][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1244.078488][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1244.664915][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1244.752229][T12968] tmpfs: Unknown parameter 'quota' [ 1245.492606][T12979] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1656'. [ 1245.888853][T12994] loop8: detected capacity change from 0 to 512 [ 1245.957327][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1245.983757][ T4328] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1245.993799][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1246.717144][T12627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.172309][ T4328] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.197096][ T4328] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1247.305232][ T4328] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1247.315157][ T4328] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1247.330158][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1247.349204][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1247.555467][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1247.572827][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1247.662455][ T27] audit: type=1326 audit(1786820776.949:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.9.1660" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x0 [ 1248.366530][ T4328] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1248.376089][ T4328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.444835][ T4328] usb 1-1: invalid MIDI out EP 0 [ 1248.601073][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1661'. [ 1248.771665][T12627] device veth0_vlan entered promiscuous mode [ 1248.804291][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1248.899981][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1248.907675][ T4328] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1248.946809][T12627] device veth1_vlan entered promiscuous mode [ 1248.975730][T12795] udevd[12795]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1249.084166][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1249.121954][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1249.144725][T12627] device veth0_macvtap entered promiscuous mode [ 1249.173029][T12627] device veth1_macvtap entered promiscuous mode [ 1249.222561][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.243718][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.284775][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.315994][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.486727][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.923002][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1251.020100][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.030018][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.182523][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.222741][T12627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.277087][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.366653][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.376922][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.427980][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.441688][T13034] loop7: detected capacity change from 0 to 256 [ 1251.483309][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.540007][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.589842][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.609150][T13034] FAT-fs (loop7): Directory bread(block 64) failed [ 1251.637447][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.663078][T13034] FAT-fs (loop7): Directory bread(block 65) failed [ 1251.669833][T13034] FAT-fs (loop7): Directory bread(block 66) failed [ 1251.703263][T12627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.761079][T13034] FAT-fs (loop7): Directory bread(block 67) failed [ 1251.790212][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1251.799270][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1251.812685][T13034] FAT-fs (loop7): Directory bread(block 68) failed [ 1251.819307][T13034] FAT-fs (loop7): Directory bread(block 69) failed [ 1251.845655][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1251.866270][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1251.876304][T13034] FAT-fs (loop7): Directory bread(block 70) failed [ 1251.887282][T13034] FAT-fs (loop7): Directory bread(block 71) failed [ 1251.893936][T13034] FAT-fs (loop7): Directory bread(block 72) failed [ 1251.923099][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1251.942482][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1251.952571][T13034] FAT-fs (loop7): Directory bread(block 73) failed [ 1251.979962][T12627] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.009792][T12627] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.035592][T12627] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.103372][T12627] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.274463][ T4330] usb 1-1: USB disconnect, device number 4 [ 1252.386671][T12377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.405349][T13041] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1667'. [ 1252.422562][T12377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.468360][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1252.511009][ T4426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.544443][ T4426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.582302][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1254.080444][T13048] tmpfs: Unknown parameter 'quota' [ 1258.756767][T13092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1673'. [ 1259.221696][ T4333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.066240][ T4333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.391737][ T4333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.688266][ T4333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.016276][T13117] ubi31: attaching mtd0 [ 1261.024752][T13117] ubi31: scanning is finished [ 1261.029740][T13117] ubi31: empty MTD device detected [ 1261.156292][T13117] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1261.164104][T13117] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1261.171696][T13117] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1261.178779][T13117] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1261.186358][T13117] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1261.193299][T13117] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1261.201419][T13117] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1322259409 [ 1261.211597][T13117] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1261.238497][T13119] ubi31: background thread "ubi_bgt31d" started, PID 13119 [ 1262.877637][ T8979] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1262.899180][ T8979] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1262.910169][ T8979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1262.924615][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1262.934259][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1262.941936][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1265.339505][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 1266.261300][T13161] tmpfs: Unknown parameter 'quota' [ 1267.538811][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 1268.487795][T13131] chnl_net:caif_netlink_parms(): no params data found [ 1269.077923][T13131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.128998][T13131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.162066][T13131] device bridge_slave_0 entered promiscuous mode [ 1269.249758][T13131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.291325][T13131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.310354][T13131] device bridge_slave_1 entered promiscuous mode [ 1269.792071][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 1270.804137][T13131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.680841][T13204] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1694'. [ 1271.698792][T13131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.827026][ T4333] device hsr_slave_0 left promiscuous mode [ 1271.851071][ T4333] device hsr_slave_1 left promiscuous mode [ 1271.888643][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.919658][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.954995][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.986267][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.044989][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 1272.203483][ T4333] device veth1_macvtap left promiscuous mode [ 1272.218354][ T4333] device veth1_vlan left promiscuous mode [ 1272.246968][ T4333] device veth0_vlan left promiscuous mode [ 1272.268257][ T27] audit: type=1800 audit(1786820799.670:78): pid=13198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1690" name="bus" dev="ramfs" ino=60837 res=0 errno=0 [ 1272.473165][T13218] futex_wake_op: syz.9.1696 tries to shift op by 144; fix this program [ 1273.512318][T13223] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1698'. [ 1275.489367][T13239] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 1278.401751][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1706'. [ 1278.499808][T13267] loop8: detected capacity change from 0 to 1024 [ 1278.535503][T13267] EXT4-fs: Ignoring removed bh option [ 1278.680594][T13267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 1278.719383][T13267] System zones: 0-1, 3-12 [ 1278.726406][T13267] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1279.553029][T13267] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1279.561902][T13267] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1279.881235][ T5942] EXT4-fs (loop8): unmounting filesystem. [ 1281.131820][T13288] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1710'. [ 1281.992761][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.004256][T13290] loop8: detected capacity change from 0 to 256 [ 1282.055035][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.070515][T13290] FAT-fs (loop8): Directory bread(block 64) failed [ 1282.079543][T13290] FAT-fs (loop8): Directory bread(block 65) failed [ 1282.093680][T13290] FAT-fs (loop8): Directory bread(block 66) failed [ 1282.100574][T13290] FAT-fs (loop8): Directory bread(block 67) failed [ 1282.117844][T13290] FAT-fs (loop8): Directory bread(block 68) failed [ 1282.132002][T13290] FAT-fs (loop8): Directory bread(block 69) failed [ 1282.139028][T13290] FAT-fs (loop8): Directory bread(block 70) failed [ 1282.145963][T13290] FAT-fs (loop8): Directory bread(block 71) failed [ 1282.152644][T13290] FAT-fs (loop8): Directory bread(block 72) failed [ 1282.159648][T13290] FAT-fs (loop8): Directory bread(block 73) failed [ 1283.052633][ T4333] bond0 (unregistering): Released all slaves [ 1283.202590][T13294] loop8: detected capacity change from 0 to 128 [ 1283.377308][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1283.396770][T13253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1284.347946][ T27] audit: type=1326 audit(1786821066.011:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.8.1713" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9e019 code=0x7ffc0000 [ 1284.504298][T13276] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1708'. [ 1284.610316][T13131] team0: Port device team_slave_0 added [ 1284.685644][T13300] xt_l2tp: invalid flags combination: 4 [ 1284.706816][T13131] team0: Port device team_slave_1 added [ 1284.778912][ T27] audit: type=1326 audit(1786821066.011:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.8.1713" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9e019 code=0x7ffc0000 [ 1286.071413][T13131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.591085][ T27] audit: type=1326 audit(1786821066.021:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.8.1713" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f3c33f9e019 code=0x7ffc0000 [ 1288.617076][T13131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.643421][T13131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.654709][ T27] audit: type=1326 audit(1786821066.021:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.8.1713" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9e019 code=0x7ffc0000 [ 1288.660334][T13131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.685820][T13131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.735650][T13131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.850193][ T27] audit: type=1326 audit(1786821066.021:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.8.1713" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9e019 code=0x7ffc0000 [ 1288.936298][ T27] audit: type=1326 audit(1786821066.021:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.8.1713" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f3c33f9e019 code=0x7ffc0000 [ 1288.989948][T13131] device hsr_slave_0 entered promiscuous mode [ 1289.011137][T13131] device hsr_slave_1 entered promiscuous mode [ 1289.105777][T13327] syz.8.1717 sent an empty control message without MSG_MORE. [ 1289.921779][ T27] audit: type=1326 audit(1786821066.214:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.8.1713" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9e019 code=0x7ffc0000 [ 1290.247950][ T27] audit: type=1326 audit(1786821066.214:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.8.1713" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9e019 code=0x7ffc0000 [ 1290.276725][T13131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1290.293347][T13131] Cannot create hsr debugfs directory [ 1292.459628][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1720'. [ 1293.566187][T13356] loop8: detected capacity change from 0 to 1024 [ 1294.295443][T13359] sctp: [Deprecated]: syz.7.1725 (pid 13359) Use of int in max_burst socket option deprecated. [ 1294.295443][T13359] Use struct sctp_assoc_value instead [ 1294.845671][T13362] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1725'. [ 1296.274167][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1716'. [ 1296.728679][T13377] loop7: detected capacity change from 0 to 256 [ 1298.085001][T13391] loop8: detected capacity change from 0 to 2048 [ 1298.181896][T13391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1300.438476][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1733'. [ 1301.376516][T13423] futex_wake_op: syz.2.1736 tries to shift op by 144; fix this program [ 1302.382352][T13414] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1742'. [ 1302.587907][T13429] sctp: [Deprecated]: syz.2.1737 (pid 13429) Use of int in max_burst socket option deprecated. [ 1302.587907][T13429] Use struct sctp_assoc_value instead [ 1302.840537][T13435] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1737'. [ 1303.794292][T13442] futex_wake_op: syz.7.1748 tries to shift op by 144; fix this program [ 1304.259810][T13414] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1742'. [ 1304.735532][T13454] overlayfs: missing 'lowerdir' [ 1305.062670][T13456] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1305.073444][T13456] cramfs: wrong magic [ 1305.294491][T13446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1305.301055][T13446] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1305.577241][T13446] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1305.585220][T13446] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1305.592355][T13446] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1305.600388][T13446] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1305.607634][T13446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1305.613709][T13446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1305.621455][T13446] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1305.628682][T13446] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1305.636223][T13446] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1305.648355][T13446] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1305.655710][T13446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1305.661716][T13446] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1305.675163][T13446] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1305.826032][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1741'. [ 1307.174189][ T4291] Bluetooth: hci2: command 0x0c1a tx timeout [ 1307.309845][T13458] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1741'. [ 1307.538421][T13131] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1307.568860][T13131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1307.618276][T13131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1307.766012][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 1307.792800][T13479] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1747'. [ 1307.852568][ T4291] Bluetooth: hci5: command 0x0c1a tx timeout [ 1307.858888][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 1307.865194][ T4291] Bluetooth: hci3: command 0x0c1a tx timeout [ 1308.550930][T13131] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1308.743239][T13486] tmpfs: Unknown parameter 'quota' [ 1308.928706][T13490] futex_wake_op: syz.8.1750 tries to shift op by 144; fix this program [ 1309.447402][T13480] Bluetooth: hci2: command 0x0406 tx timeout [ 1309.890815][T13131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.921475][T13494] futex_wake_op: syz.2.1752 tries to shift op by 144; fix this program [ 1309.971979][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1310.005158][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1310.020739][T13480] Bluetooth: hci0: command 0x0406 tx timeout [ 1310.335644][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 1310.335687][ T8979] Bluetooth: hci3: command 0x0406 tx timeout [ 1310.348103][ T8979] Bluetooth: hci5: command 0x0406 tx timeout [ 1310.355039][T13480] Bluetooth: hci2: unexpected event for opcode 0x042c [ 1310.701822][T13131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.918581][T13131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1310.929776][T13131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1310.998826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1311.036157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1311.082294][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.089591][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.112244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1312.658556][T13520] futex_wake_op: syz.9.1746 tries to shift op by 144; fix this program [ 1312.793193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1312.818519][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.825762][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.835814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1312.853667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1312.872208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1312.895072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1312.914298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1312.955851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1312.964953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1312.974040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1312.983229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1312.992220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1313.042086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1313.055442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1313.085602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1315.514857][T13544] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1760'. [ 1316.536797][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1763'. [ 1317.148171][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1318.532241][T13131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.557426][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1318.562290][T13574] loop8: detected capacity change from 0 to 1024 [ 1318.613277][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1318.640778][T13574] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1319.636741][ T5942] EXT4-fs (loop8): unmounting filesystem. [ 1321.384332][T13613] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1774'. [ 1321.393619][T13612] futex_wake_op: syz.2.1775 tries to shift op by 144; fix this program [ 1325.392055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1325.436100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1325.562276][T13131] device veth0_vlan entered promiscuous mode [ 1325.576049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1325.617828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1325.651961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1325.728395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1326.636648][T13644] overlayfs: missing 'lowerdir' [ 1327.213753][T13643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1327.220173][T13643] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1327.226450][T13643] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1327.232560][T13643] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1327.238660][T13643] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1327.301153][T13643] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1327.664055][T13650] 0x000000000007-0x000000020000 : "" [ 1327.763667][T13650] ftl_cs: FTL header corrupt! [ 1327.898034][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1327.909203][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1327.917405][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1327.925753][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1327.935259][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1327.943081][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1328.855962][T13661] loop7: detected capacity change from 0 to 32768 [ 1328.875855][T13661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1782 (13661) [ 1328.913711][T13661] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1328.924454][T13661] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1328.933382][T13661] BTRFS info (device loop7): using free space tree [ 1329.155480][T13677] loop8: detected capacity change from 0 to 128 [ 1329.391648][T13683] futex_wake_op: syz.2.1787 tries to shift op by 144; fix this program [ 1329.405977][T13502] Bluetooth: hci2: command 0x0c1a tx timeout [ 1329.437412][ T4291] Bluetooth: hci0: command 0x0c1a tx timeout [ 1329.443622][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 1330.165966][T13502] Bluetooth: hci5: command 0x0c1a tx timeout [ 1330.205686][T13502] Bluetooth: hci1: command 0x0409 tx timeout [ 1330.443628][T13677] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1330.452597][T13677] ext4 filesystem being mounted at /323/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1330.826298][T13698] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1332.146576][T13661] BTRFS error (device loop7): open_ctree failed: -12 [ 1332.357790][T13502] Bluetooth: hci5: command 0x0406 tx timeout [ 1332.385949][T13701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1789'. [ 1332.450270][T13502] Bluetooth: hci1: command 0x041b tx timeout [ 1332.459822][ T5942] EXT4-fs (loop8): unmounting filesystem. [ 1332.671205][T12795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by udevd (12795) [ 1334.795108][T13502] Bluetooth: hci1: command 0x040f tx timeout [ 1336.998455][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 1337.984965][T13759] futex_wake_op: syz.2.1798 tries to shift op by 144; fix this program [ 1338.657251][T13762] futex_wake_op: syz.7.1799 tries to shift op by 144; fix this program [ 1338.692932][T13762] loop7: detected capacity change from 0 to 256 [ 1338.760706][T13762] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1338.842122][ T27] audit: type=1800 audit(1787871741.142:87): pid=13762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1799" name="file1" dev="loop7" ino=1048786 res=0 errno=0 [ 1338.881265][T13762] bio_check_eod: 5837 callbacks suppressed [ 1338.881305][T13762] syz.7.1799: attempt to access beyond end of device [ 1338.881305][T13762] loop7: rw=0, sector=184, nr_sectors = 120 limit=256 [ 1338.964117][T13761] syz.7.1799: attempt to access beyond end of device [ 1338.964117][T13761] loop7: rw=524288, sector=3384, nr_sectors = 256 limit=256 [ 1338.964635][T13762] syz.7.1799: attempt to access beyond end of device [ 1338.964635][T13762] loop7: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 1338.978546][T13761] syz.7.1799: attempt to access beyond end of device [ 1338.978546][T13761] loop7: rw=0, sector=3512, nr_sectors = 8 limit=256 [ 1338.995625][T13762] syz.7.1799: attempt to access beyond end of device [ 1338.995625][T13762] loop7: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 1339.005463][T13761] syz.7.1799: attempt to access beyond end of device [ 1339.005463][T13761] loop7: rw=0, sector=3512, nr_sectors = 8 limit=256 [ 1339.018943][T13762] syz.7.1799: attempt to access beyond end of device [ 1339.018943][T13762] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1339.045519][T13762] syz.7.1799: attempt to access beyond end of device [ 1339.045519][T13762] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1339.058814][T13762] syz.7.1799: attempt to access beyond end of device [ 1339.058814][T13762] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1339.138230][T13762] syz.7.1799: attempt to access beyond end of device [ 1339.138230][T13762] loop7: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1339.534086][T13771] futex_wake_op: syz.8.1800 tries to shift op by 144; fix this program [ 1339.614459][ T4282] Bluetooth: hci1: command 0x0405 tx timeout [ 1339.680428][T13648] chnl_net:caif_netlink_parms(): no params data found [ 1341.293794][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1341.459839][T13785] loop7: detected capacity change from 0 to 128 [ 1342.032491][ T27] audit: type=1326 audit(1787871999.899:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.7.1804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d5b9e019 code=0x7ffc0000 [ 1342.059372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.006572][ T27] audit: type=1326 audit(1787871999.899:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.7.1804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d5b9e019 code=0x7ffc0000 [ 1343.035859][ T27] audit: type=1326 audit(1787871999.899:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.7.1804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f63d5b9e019 code=0x7ffc0000 [ 1343.060036][ T27] audit: type=1326 audit(1787871999.899:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.7.1804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d5b9e019 code=0x7ffc0000 [ 1343.085157][ T27] audit: type=1326 audit(1787871999.908:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.7.1804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d5b9e019 code=0x7ffc0000 [ 1343.127879][ T27] audit: type=1326 audit(1787871999.908:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.7.1804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f63d5b9e019 code=0x7ffc0000 [ 1343.269882][ T27] audit: type=1326 audit(1787871999.908:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.7.1804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d5b9e019 code=0x7ffc0000 [ 1343.371605][ T27] audit: type=1326 audit(1787871999.908:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.7.1804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d5b9e019 code=0x7ffc0000 [ 1343.544015][ T27] audit: type=1326 audit(1787871999.908:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.7.1804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f63d5b9e019 code=0x7ffc0000 [ 1343.580238][T13801] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1343.591901][T13801] cramfs: wrong magic [ 1344.120635][T13801] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1807'. [ 1344.145051][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.152486][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.168770][T13648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.231135][T13648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.372593][T13648] device bridge_slave_0 entered promiscuous mode [ 1344.424468][T13804] loop7: detected capacity change from 0 to 1024 [ 1344.548615][T13804] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1344.775318][T13648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.782511][T13648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.834082][T13648] device bridge_slave_1 entered promiscuous mode [ 1345.103677][T13648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.231402][T13648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.438128][T13648] team0: Port device team_slave_0 added [ 1345.483244][T13648] team0: Port device team_slave_1 added [ 1345.580084][ T5955] EXT4-fs (loop7): unmounting filesystem. [ 1345.972401][T13820] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1345.983007][T13820] cramfs: wrong magic [ 1346.946592][T13648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.016185][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.551582][T13648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.871266][T13648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.959906][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.986836][T13648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.281482][T13832] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1811'. [ 1348.695433][T13832] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1811'. [ 1349.015994][T13648] device hsr_slave_0 entered promiscuous mode [ 1349.046082][T13648] device hsr_slave_1 entered promiscuous mode [ 1349.066304][T13648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1349.078094][T13648] Cannot create hsr debugfs directory [ 1349.377166][T13846] futex_wake_op: syz.2.1814 tries to shift op by 144; fix this program [ 1350.930211][T13848] netlink: 'syz.8.1815': attribute type 2 has an invalid length. [ 1351.298081][T13857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1816'. [ 1352.905708][ T4428] device hsr_slave_0 left promiscuous mode [ 1352.924789][ T4428] device hsr_slave_1 left promiscuous mode [ 1352.983615][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.006488][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.055706][ T4428] device bridge_slave_1 left promiscuous mode [ 1353.068917][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.179963][ T4428] device bridge_slave_0 left promiscuous mode [ 1353.190549][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.314627][ T4428] device veth0_vlan left promiscuous mode [ 1353.624679][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 1353.624785][ T27] audit: type=1326 audit(1788396554.837:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1353.901281][ T27] audit: type=1326 audit(1788396554.865:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1354.179260][ T27] audit: type=1326 audit(1788396554.865:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1354.203482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.280398][ T27] audit: type=1326 audit(1788396554.865:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1357.336553][ T27] audit: type=1326 audit(1788396554.874:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1358.191684][ T27] audit: type=1326 audit(1788396554.874:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1358.296498][ T27] audit: type=1326 audit(1788396554.884:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1358.937745][ T27] audit: type=1326 audit(1788396554.884:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1358.961841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.152244][ T27] audit: type=1326 audit(1788396554.884:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1359.176483][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.046412][ T27] audit: type=1326 audit(1788396554.884:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1361.070733][ T27] audit: type=1326 audit(1788396554.884:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1361.095469][ T27] audit: type=1326 audit(1788396554.884:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1361.119764][ T27] audit: type=1326 audit(1788396554.884:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1361.148233][ T27] audit: type=1326 audit(1788396554.884:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f33c739e019 code=0x7ffc0000 [ 1361.172662][ T27] audit: type=1326 audit(1788396554.884:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f33c739dd82 code=0x7ffc0000 [ 1361.195425][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.197273][ T27] audit: type=1326 audit(1788396554.911:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f33c735e84e code=0x7ffc0000 [ 1362.788337][ T27] audit: type=1326 audit(1788396554.976:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f33c739de47 code=0x7ffc0000 [ 1362.879126][ T27] audit: type=1326 audit(1788396554.976:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz.9.1817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33c735e84e code=0x7ffc0000 [ 1363.277664][T13931] futex_wake_op: syz.8.1826 tries to shift op by 144; fix this program [ 1363.402286][T13932] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1825'. [ 1364.354350][T13937] futex_wake_op: syz.9.1828 tries to shift op by 144; fix this program [ 1364.893131][ T4428] team0 (unregistering): Port device team_slave_1 removed [ 1365.173133][ T4428] team0 (unregistering): Port device team_slave_0 removed [ 1365.232457][T13944] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1829'. [ 1366.279774][ T4428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.483656][ T4428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.203403][ T4428] bond0 (unregistering): Released all slaves [ 1368.372494][T13932] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1825'. [ 1368.668124][T13958] device bond1 entered promiscuous mode [ 1368.779662][T13958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1372.033600][T14000] futex_wake_op: syz.8.1839 tries to shift op by 144; fix this program [ 1372.715121][T13997] futex_wake_op: syz.7.1840 tries to shift op by 144; fix this program [ 1373.245009][T14007] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1373.370699][T13995] IPVS: stopping master sync thread 14007 ... [ 1373.547389][T14017] tmpfs: Unknown parameter 'quota' [ 1373.883924][T14020] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1841'. [ 1374.606941][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1838'. [ 1375.528188][T14030] futex_wake_op: syz.8.1843 tries to shift op by 144; fix this program [ 1376.633675][T14037] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1845'. [ 1376.643041][T14037] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1845'. [ 1377.146818][T13648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1377.449993][T13648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1377.720063][T13648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1378.920176][T13648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1381.042873][ T5771] block nbd8: Attempted send on invalid socket [ 1381.049125][ T5771] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1381.401178][T13648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.535809][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1381.546876][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1381.582304][T13648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.656412][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1381.681955][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1381.719512][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.726807][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.789924][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1381.828931][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1381.878284][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.885473][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.924566][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1381.968066][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1382.131884][T13648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1382.142435][T13648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1382.203240][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1382.258959][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1382.571121][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1382.875707][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1382.897403][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1382.913100][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1382.924477][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1382.964090][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1382.993123][T14094] futex_wake_op: syz.9.1851 tries to shift op by 144; fix this program [ 1383.156815][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1383.332875][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1383.480810][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1383.492022][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1385.800933][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 1385.801045][ T27] audit: type=1800 audit(1788922408.551:196): pid=14110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1855" name="idVendor" dev="configfs" ino=63391 res=0 errno=0 [ 1386.193443][ T27] audit: type=1800 audit(1788922408.911:197): pid=14110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1855" name="serialnumber" dev="configfs" ino=63394 res=0 errno=0 [ 1386.492576][ T27] audit: type=1800 audit(1788922408.967:198): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1855" name="manufacturer" dev="configfs" ino=63395 res=0 errno=0 [ 1387.918647][T14120] loop7: detected capacity change from 0 to 128 [ 1387.972702][T14120] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1387.988469][T14120] ext4 filesystem being mounted at /321/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1388.112677][T14126] ieee802154 phy1 wpan1: encryption failed: -22 [ 1389.324185][T14139] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1389.911358][T14143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1860'. [ 1390.169035][ T5955] EXT4-fs (loop7): unmounting filesystem. [ 1391.445465][T14159] futex_wake_op: syz.8.1864 tries to shift op by 144; fix this program [ 1397.270699][T13502] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1397.283263][T13502] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1397.292673][T13502] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1397.300634][T13502] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1397.308273][T13502] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1397.315949][T13502] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1398.422379][T14186] Bluetooth: MGMT ver 1.22 [ 1399.541833][T14201] futex_wake_op: syz.7.1865 tries to shift op by 144; fix this program [ 1399.662903][T13502] Bluetooth: hci4: command 0x0409 tx timeout [ 1400.422923][T14177] chnl_net:caif_netlink_parms(): no params data found [ 1400.641938][T14177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.669467][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.677830][T14177] device bridge_slave_0 entered promiscuous mode [ 1400.722766][T14177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.754170][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.769497][T14177] device bridge_slave_1 entered promiscuous mode [ 1400.869628][T14177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.904600][T14177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.010463][T14177] team0: Port device team_slave_0 added [ 1401.023265][T14177] team0: Port device team_slave_1 added [ 1401.077492][T14177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.089683][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.122722][T14177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.190389][T14177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.197410][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.226228][T14177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.268070][T14177] device hsr_slave_0 entered promiscuous mode [ 1401.275063][T14177] device hsr_slave_1 entered promiscuous mode [ 1401.282384][T14177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.291047][T14177] Cannot create hsr debugfs directory [ 1401.861284][T13502] Bluetooth: hci4: command 0x041b tx timeout [ 1402.103601][ T76] device hsr_slave_0 left promiscuous mode [ 1402.116880][ T76] device hsr_slave_1 left promiscuous mode [ 1402.123871][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.139039][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.147155][ T76] device bridge_slave_1 left promiscuous mode [ 1402.153454][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.177130][ T76] device bridge_slave_0 left promiscuous mode [ 1402.183440][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.661653][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1402.748430][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1402.811100][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.893877][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.196579][ T76] bond0 (unregistering): Released all slaves [ 1403.432379][T14177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1403.481624][T14177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1403.492392][T14177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1403.502706][T14177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1403.635110][T14177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.656309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1403.668914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1403.680018][T14177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.715341][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1403.736245][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1403.745478][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.752661][ T4426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.777487][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1403.806757][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1403.820921][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1403.829916][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.837104][ T4426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.849056][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1403.877825][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1403.887153][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1403.900892][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1403.911284][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1403.938084][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1403.966083][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1403.976133][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1403.984749][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1403.994336][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1404.003884][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1404.016801][T14177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1404.127466][T13502] Bluetooth: hci4: command 0x040f tx timeout [ 1404.335259][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1404.349241][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1404.371489][T14177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.790749][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1404.806272][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1404.840189][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1404.855486][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1404.868080][T14177] device veth0_vlan entered promiscuous mode [ 1404.877387][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1404.885547][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1404.904727][T14177] device veth1_vlan entered promiscuous mode [ 1404.943268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1404.952749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1404.961339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1404.970024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1404.982998][T14177] device veth0_macvtap entered promiscuous mode [ 1405.002033][T14177] device veth1_macvtap entered promiscuous mode [ 1405.025977][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.039423][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.049424][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.060358][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.071317][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.082089][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.092437][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.107059][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.122564][T14177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.139321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1405.152045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1405.163194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1405.175620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1405.190093][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.206996][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.217774][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.238835][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.251453][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.268292][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.279526][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.294321][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.307131][T14177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.327219][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1405.342879][T12377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1405.363348][T14177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.372141][T14177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.381793][T14177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.391377][T14177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.508135][T12377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.524433][T12377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.537132][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1405.560547][ T4676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.569297][ T4676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.576880][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1406.447626][T13502] Bluetooth: hci4: command 0x0419 tx timeout [ 1407.089798][T14302] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1409.162136][T14327] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 1409.282945][T14332] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1409.293839][T14332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1415.164519][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1885'. [ 1415.271599][ T27] audit: type=1326 audit(1789447235.794:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.9.1886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c739e019 code=0x0 [ 1415.676230][T14375] loop8: detected capacity change from 0 to 7 [ 1415.873500][T14375] Dev loop8: unable to read RDB block 7 [ 1415.873589][T14375] loop8: unable to read partition table [ 1415.873753][T14375] loop8: partition table beyond EOD, truncated [ 1415.873771][T14375] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1420.800482][T14402] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1892'. [ 1425.821271][T14430] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1897'. [ 1432.418627][T13502] Bluetooth: hci4: command 0x0405 tx timeout [ 1435.587491][T14469] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1907'. [ 1436.682475][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1436.694051][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1436.703097][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1436.722569][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1436.730489][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1436.738016][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1437.496795][ T4345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.926259][T13502] Bluetooth: hci1: command 0x0409 tx timeout [ 1440.959111][ T4345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.973290][T14510] futex_wake_op: syz.9.1913 tries to shift op by 144; fix this program [ 1441.621779][ T4345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.866626][T14522] loop8: detected capacity change from 0 to 512 [ 1442.279529][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 1442.558998][T14526] futex_wake_op: syz.7.1917 tries to shift op by 144; fix this program [ 1443.412391][T14522] EXT4-fs error (device loop8): __ext4_iget:5102: inode #11: block 16777240: comm syz.8.1916: invalid block [ 1443.426248][T14522] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.1916: couldn't read orphan inode 11 (err -117) [ 1443.439134][T14522] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1443.519766][ T4345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.628691][T14476] chnl_net:caif_netlink_parms(): no params data found [ 1443.684312][ T5942] EXT4-fs (loop8): unmounting filesystem. [ 1443.757528][T14536] tmpfs: Unknown parameter 'quota' [ 1443.921012][T14534] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1920'. [ 1444.490203][T13502] Bluetooth: hci1: command 0x040f tx timeout [ 1444.643178][T14543] loop8: detected capacity change from 0 to 1024 [ 1444.655288][T14543] EXT4-fs: Invalid want_extra_isize 7 [ 1445.914143][T14476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.558025][T14476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.738874][T14476] device bridge_slave_0 entered promiscuous mode [ 1446.755534][T13502] Bluetooth: hci1: command 0x0419 tx timeout [ 1446.793442][T14476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.813025][T14476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.866353][T14476] device bridge_slave_1 entered promiscuous mode [ 1447.001357][T14563] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1925'. [ 1448.345701][T14476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.790801][T14566] futex_wake_op: syz.7.1926 tries to shift op by 144; fix this program [ 1448.791175][T14574] futex_wake_op: syz.4.1929 tries to shift op by 144; fix this program [ 1449.419214][T14476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.784481][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1449.862576][T14584] PKCS7: Unknown OID: [4] 0.0 [ 1449.867550][T14584] PKCS7: Only support pkcs7_signedData type [ 1449.886709][T14584] xt_policy: output policy not valid in PREROUTING and INPUT [ 1450.527103][T14583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1931'. [ 1450.773131][T14476] team0: Port device team_slave_0 added [ 1450.781902][T14476] team0: Port device team_slave_1 added [ 1450.806186][T14476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.813606][T14476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1450.841913][T14476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1450.997061][T14593] tmpfs: Unknown parameter 'quota' [ 1452.136714][T14596] tmpfs: Unknown parameter 'quota' [ 1452.535650][T14476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.543820][T14476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.800338][T14476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.775503][T14614] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1937'. [ 1459.415654][T14636] futex_wake_op: syz.7.1941 tries to shift op by 144; fix this program [ 1459.527551][T14476] device hsr_slave_0 entered promiscuous mode [ 1459.534859][T14639] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1943'. [ 1459.598395][T14476] device hsr_slave_1 entered promiscuous mode [ 1459.728170][T14476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1459.735772][T14476] Cannot create hsr debugfs directory [ 1460.527496][T14650] loop7: detected capacity change from 0 to 2048 [ 1460.916576][T14650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1462.456565][T14677] tmpfs: Unknown parameter 'quota' [ 1462.924228][T14680] tmpfs: Unknown parameter 'quota' [ 1463.648058][T14689] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1466.089260][T14702] loop8: detected capacity change from 0 to 4096 [ 1466.806842][T14702] ntfs: volume version 3.1. [ 1466.853682][T14701] tmpfs: Unknown parameter 'quota' [ 1467.277964][T14711] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1956'. [ 1469.157949][T14731] futex_wake_op: syz.4.1958 tries to shift op by 144; fix this program [ 1470.945575][T14747] 9pnet_fd: p9_fd_create_tcp (14747): problem connecting socket to 127.0.0.1 [ 1471.886833][T14751] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1475.707717][T14781] tmpfs: Unknown parameter 'quota' [ 1475.920982][T14776] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1967'. [ 1476.977478][T14797] futex_wake_op: syz.9.1968 tries to shift op by 144; fix this program [ 1480.591505][T14803] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1480.599824][T14803] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1480.608509][T14803] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1481.884162][ T4345] device hsr_slave_0 left promiscuous mode [ 1481.915302][ T4345] device hsr_slave_1 left promiscuous mode [ 1482.027723][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.320389][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.425608][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.514389][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.616820][ T4345] device bridge_slave_1 left promiscuous mode [ 1482.814581][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.849117][ T4345] device bridge_slave_0 left promiscuous mode [ 1482.856593][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.916137][ T4345] device veth1_macvtap left promiscuous mode [ 1482.922438][ T4345] device veth0_macvtap left promiscuous mode [ 1482.928993][ T4345] device veth1_vlan left promiscuous mode [ 1482.939230][ T4345] device veth0_vlan left promiscuous mode [ 1485.067223][T13502] Bluetooth: hci1: command 0x0405 tx timeout [ 1486.369015][T14846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1977'. [ 1486.744850][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 1486.843105][T14856] futex_wake_op: syz.7.1979 tries to shift op by 144; fix this program [ 1487.898789][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 1487.989871][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1488.129611][T14862] 9pnet_fd: p9_fd_create_tcp (14862): problem connecting socket to 127.0.0.1 [ 1488.822357][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1489.277415][ T4345] bond0 (unregistering): Released all slaves [ 1489.422993][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1971'. [ 1490.298953][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1981'. [ 1491.106256][T14476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1491.248710][T14886] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1491.538784][T14892] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.685682][T14896] loop7: detected capacity change from 0 to 512 [ 1491.920359][T14896] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1491.929160][T14896] EXT4-fs (loop7): DAX unsupported by block device. [ 1492.281923][T14883] netlink: 'syz.4.1983': attribute type 13 has an invalid length. [ 1492.434135][T14883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1493.372774][T14883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1493.409332][T14883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1493.502544][T14910] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1987'. [ 1493.714746][T14476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1493.751463][T14476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1493.789386][T14476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1494.154606][T14929] futex_wake_op: syz.8.1989 tries to shift op by 144; fix this program [ 1494.553926][T14931] fuse: Bad value for 'fd' [ 1495.584346][T14476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.632181][T14939] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1497.335234][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1497.413130][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1497.581829][T14476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.956328][T13763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1497.966884][T14943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.010042][T13763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1498.061404][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.068577][T13763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.297186][T13763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1498.460401][T13763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1498.678657][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.685885][T13763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.872911][T14956] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1997'. [ 1498.886298][T13763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1499.068377][T14961] futex_wake_op: syz.8.1996 tries to shift op by 144; fix this program [ 1499.097474][T14960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1995'. [ 1500.802065][T14109] libceph: connect (1)[c::]:6789 error -101 [ 1500.965400][T14109] libceph: mon0 (1)[c::]:6789 connect error [ 1501.096990][T14977] ceph: No mds server is up or the cluster is laggy [ 1501.158826][ T8990] libceph: connect (1)[c::]:6789 error -101 [ 1501.232534][ T8990] libceph: mon0 (1)[c::]:6789 connect error [ 1501.436541][T14985] ieee802154 phy1 wpan1: encryption failed: -22 [ 1501.949154][T14993] futex_wake_op: syz.7.2001 tries to shift op by 144; fix this program [ 1503.157411][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1503.168097][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1503.375379][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1503.756729][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1503.764672][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1503.772107][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1505.128661][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'. [ 1506.082653][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 1508.047063][T15042] futex_wake_op: syz.4.2009 tries to shift op by 144; fix this program [ 1508.304712][T13502] Bluetooth: hci1: command 0x041b tx timeout [ 1508.897765][T15051] block device autoloading is deprecated and will be removed. [ 1508.922915][T15046] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2010'. [ 1509.373286][T15038] device syzkaller0 entered promiscuous mode [ 1509.553416][T15062] futex_wake_op: syz.4.2021 tries to shift op by 144; fix this program [ 1510.568143][T13502] Bluetooth: hci1: command 0x040f tx timeout [ 1512.811513][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 1513.765792][T15003] chnl_net:caif_netlink_parms(): no params data found [ 1514.149466][T15003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.166474][T15003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.176767][T15003] device bridge_slave_0 entered promiscuous mode [ 1514.255058][T15101] futex_wake_op: syz.9.2022 tries to shift op by 144; fix this program [ 1514.712996][T15003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.793512][T15003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.023671][T15003] device bridge_slave_1 entered promiscuous mode [ 1515.366729][T15096] [ 1515.369106][T15096] ====================================================== [ 1515.376144][T15096] WARNING: possible circular locking dependency detected [ 1515.383169][T15096] syzkaller #0 Not tainted [ 1515.387581][T15096] ------------------------------------------------------ [ 1515.394595][T15096] syz.8.2020/15096 is trying to acquire lock: [ 1515.400660][T15096] ffff888057f3b478 (&p->frag_sem){++++}-{3:3}, at: configfs_rmdir+0x3e0/0x980 [ 1515.409659][T15096] [ 1515.409659][T15096] but task is already holding lock: [ 1515.417021][T15096] ffff888054aa4150 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 1515.426769][T15096] [ 1515.426769][T15096] which lock already depends on the new lock. [ 1515.426769][T15096] [ 1515.437171][T15096] [ 1515.437171][T15096] the existing dependency chain (in reverse order) is: [ 1515.446183][T15096] [ 1515.446183][T15096] -> #3 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 1515.454900][T15096] down_write+0x36/0x60 [ 1515.459644][T15096] configfs_depend_item_unlocked+0x14f/0x430 [ 1515.466161][T15096] usbg_make_tpg+0x1f3/0x580 [ 1515.471349][T15096] target_fabric_make_tpg+0xa0/0x6d0 [ 1515.477217][T15096] configfs_mkdir+0x511/0x9e0 [ 1515.482487][T15096] vfs_mkdir+0x386/0x570 [ 1515.487264][T15096] do_mkdirat+0x1d8/0x440 [ 1515.492137][T15096] __x64_sys_mkdir+0x6a/0x80 [ 1515.497275][T15096] do_syscall_64+0x4c/0xa0 [ 1515.502289][T15096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1515.508779][T15096] [ 1515.508779][T15096] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 1515.516455][T15096] __mutex_lock+0x12d/0xae0 [ 1515.521514][T15096] tcm_set_name+0x26/0x90 [ 1515.526407][T15096] function_make+0x195/0x350 [ 1515.531610][T15096] configfs_mkdir+0x511/0x9e0 [ 1515.536844][T15096] vfs_mkdir+0x386/0x570 [ 1515.541641][T15096] do_mkdirat+0x1d8/0x440 [ 1515.546535][T15096] __x64_sys_mkdir+0x6a/0x80 [ 1515.551674][T15096] do_syscall_64+0x4c/0xa0 [ 1515.556637][T15096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1515.563077][T15096] [ 1515.563077][T15096] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1515.571359][T15096] __mutex_lock+0x12d/0xae0 [ 1515.576419][T15096] uvcg_frame_w_width_store+0x110/0x370 [ 1515.582597][T15096] configfs_write_iter+0x30b/0x400 [ 1515.588287][T15096] vfs_write+0x482/0x9a0 [ 1515.593167][T15096] ksys_write+0x14d/0x260 [ 1515.598083][T15096] do_syscall_64+0x4c/0xa0 [ 1515.603053][T15096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1515.609489][T15096] [ 1515.609489][T15096] -> #0 (&p->frag_sem){++++}-{3:3}: [ 1515.616901][T15096] __lock_acquire+0x2d18/0x7c40 [ 1515.622791][T15096] lock_acquire+0x1bb/0x4a0 [ 1515.627850][T15096] down_write_killable+0x45/0x90 [ 1515.633341][T15096] configfs_rmdir+0x3e0/0x980 [ 1515.638582][T15096] vfs_rmdir+0x34e/0x4a0 [ 1515.643375][T15096] do_rmdir+0x29a/0x5c0 [ 1515.648079][T15096] __x64_sys_rmdir+0x45/0x50 [ 1515.653215][T15096] do_syscall_64+0x4c/0xa0 [ 1515.658181][T15096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1515.664646][T15096] [ 1515.664646][T15096] other info that might help us debug this: [ 1515.664646][T15096] [ 1515.674901][T15096] Chain exists of: [ 1515.674901][T15096] &p->frag_sem --> &opts->dep_lock --> &sb->s_type->i_mutex_key#21 [ 1515.674901][T15096] [ 1515.688759][T15096] Possible unsafe locking scenario: [ 1515.688759][T15096] [ 1515.696229][T15096] CPU0 CPU1 [ 1515.701609][T15096] ---- ---- [ 1515.707014][T15096] lock(&sb->s_type->i_mutex_key#21); [ 1515.712501][T15096] lock(&opts->dep_lock); [ 1515.719466][T15096] lock(&sb->s_type->i_mutex_key#21); [ 1515.727480][T15096] lock(&p->frag_sem); [ 1515.731689][T15096] [ 1515.731689][T15096] *** DEADLOCK *** [ 1515.731689][T15096] [ 1515.739890][T15096] 3 locks held by syz.8.2020/15096: [ 1515.745101][T15096] #0: ffff88801a7b6460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1515.754407][T15096] #1: ffff888073acf3f0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0 [ 1515.765243][T15096] #2: ffff888054aa4150 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 1515.775380][T15096] [ 1515.775380][T15096] stack backtrace: [ 1515.781294][T15096] CPU: 0 PID: 15096 Comm: syz.8.2020 Not tainted syzkaller #0 [ 1515.788766][T15096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1515.798851][T15096] Call Trace: [ 1515.802224][T15096] [ 1515.805252][T15096] dump_stack_lvl+0x188/0x24e [ 1515.810030][T15096] ? load_image+0x410/0x410 [ 1515.814567][T15096] ? show_regs_print_info+0x12/0x12 [ 1515.819801][T15096] ? print_circular_bug+0x12b/0x1a0 [ 1515.825041][T15096] check_noncircular+0x296/0x330 [ 1515.830007][T15096] ? add_chain_block+0x9b0/0x9b0 [ 1515.834975][T15096] ? lockdep_lock+0xf1/0x1f0 [ 1515.839602][T15096] ? _find_first_zero_bit+0xd2/0x100 [ 1515.845018][T15096] __lock_acquire+0x2d18/0x7c40 [ 1515.849913][T15096] ? verify_lock_unused+0x140/0x140 [ 1515.855140][T15096] ? verify_lock_unused+0x140/0x140 [ 1515.860369][T15096] ? configfs_rmdir+0x3a9/0x980 [ 1515.865280][T15096] lock_acquire+0x1bb/0x4a0 [ 1515.869824][T15096] ? configfs_rmdir+0x3e0/0x980 [ 1515.874723][T15096] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1515.880401][T15096] ? read_lock_is_recursive+0x10/0x10 [ 1515.885811][T15096] ? mutex_unlock+0x10/0x10 [ 1515.890347][T15096] ? do_raw_spin_lock+0x128/0x2f0 [ 1515.895395][T15096] ? __rwlock_init+0x140/0x140 [ 1515.900178][T15096] ? configfs_rmdir+0x3e0/0x980 [ 1515.905061][T15096] down_write_killable+0x45/0x90 [ 1515.910018][T15096] ? configfs_rmdir+0x3e0/0x980 [ 1515.914899][T15096] configfs_rmdir+0x3e0/0x980 [ 1515.919620][T15096] vfs_rmdir+0x34e/0x4a0 [ 1515.923887][T15096] do_rmdir+0x29a/0x5c0 [ 1515.928163][T15096] ? d_delete_notify+0x150/0x150 [ 1515.933142][T15096] ? getname_flags+0x206/0x500 [ 1515.937942][T15096] __x64_sys_rmdir+0x45/0x50 [ 1515.942577][T15096] do_syscall_64+0x4c/0xa0 [ 1515.947021][T15096] ? clear_bhb_loop+0x60/0xb0 [ 1515.951725][T15096] ? clear_bhb_loop+0x60/0xb0 [ 1515.956429][T15096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1515.962360][T15096] RIP: 0033:0x7f3c33f9e019 [ 1515.966882][T15096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1515.986555][T15096] RSP: 002b:00007f3c34f25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1515.995070][T15096] RAX: ffffffffffffffda RBX: 00007f3c34225fa0 RCX: 00007f3c33f9e019 [ 1516.003070][T15096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 1516.011069][T15096] RBP: 00007f3c3403500c R08: 0000000000000000 R09: 0000000000000000 [ 1516.019059][T15096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1516.027054][T15096] R13: 00007f3c34226038 R14: 00007f3c34225fa0 R15: 00007ffd52c0b2d8 [ 1516.035056][T15096] [ 1516.130196][T15003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.153805][T15003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.335806][T15116] futex_wake_op: syz.9.2024 tries to shift op by 144; fix this program [ 1516.826064][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1516.925976][T15003] team0: Port device team_slave_0 added [ 1516.957271][T15003] team0: Port device team_slave_1 added [ 1517.508719][T15003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.533946][T15003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.014506][T15003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.090530][T15003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.097541][T15003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.128155][T15003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.245498][T15003] device hsr_slave_0 entered promiscuous mode [ 1518.255457][T15003] device hsr_slave_1 entered promiscuous mode [ 1518.330259][T15003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1518.356398][T15003] Cannot create hsr debugfs directory [ 1518.722228][ T9] device hsr_slave_0 left promiscuous mode [ 1518.728620][ T9] device hsr_slave_1 left promiscuous mode [ 1518.735104][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.743375][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.753258][ T9] device bridge_slave_1 left promiscuous mode [ 1518.759537][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.769046][ T9] device bridge_slave_0 left promiscuous mode [ 1518.777685][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.867076][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1518.893135][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1518.933551][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.949900][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1519.025631][ T9] bond0 (unregistering): Released all slaves [ 1519.219819][T15003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1519.234126][T15003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1519.246729][T15003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1519.258770][T15003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1519.323157][T15003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.346268][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1519.361659][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1519.384148][T15003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.401302][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1519.413489][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1519.423066][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.430206][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.460853][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1519.470238][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1519.481440][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1519.490590][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.497747][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.506537][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1519.515976][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1519.532515][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1519.542001][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1519.550656][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1519.559675][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1519.570380][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1519.579171][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1519.591556][T15003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1519.603825][T15003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1519.614289][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1519.631006][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1519.641274][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1519.875978][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1519.884619][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1519.897351][T15003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1519.915391][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1519.924572][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1519.945684][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1519.956184][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1519.969635][T15003] device veth0_vlan entered promiscuous mode [ 1519.978209][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1519.988558][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1520.000646][T15003] device veth1_vlan entered promiscuous mode [ 1520.025697][T15003] device veth0_macvtap entered promiscuous mode [ 1520.033689][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1520.041991][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1520.049993][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1520.060532][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1520.069521][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1520.082012][T15003] device veth1_macvtap entered promiscuous mode [ 1520.099460][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1520.110516][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.120915][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1520.131905][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.142295][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1520.153062][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.163939][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1520.174690][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.186216][T15003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1520.194464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1520.214075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1520.222877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1520.236368][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.249913][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.260634][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.274662][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.284692][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.297854][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.308761][T15003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.321247][T15003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.336763][T15003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1520.346032][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1520.358911][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1520.370871][T15003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.382040][T15003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.391418][T15003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.402680][T15003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.438499][T15003] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 1520.472012][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.481995][T15003] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 1520.491444][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.504745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1520.526104][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.539575][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.547854][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready