last executing test programs: 11m5.439195943s ago: executing program 1 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) renameat(r5, &(0x7f00000000c0)='./file1\x00', r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 11m4.335361478s ago: executing program 1 (id=7): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r3, 0x32ce970513f32900) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x123) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 11m2.467412839s ago: executing program 1 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_emit_ethernet(0x6e, &(0x7f0000000000)={@remote, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@generic={0x88, 0x2}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1f0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2002c12, &(0x7f0000000500), 0x2, 0xa03, &(0x7f0000003a40)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x8) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f00000003c0)={0x100, 0xa883}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x949, 0x0, 0x2}]}) pselect6(0x0, 0x0, &(0x7f00000002c0)={0x18, 0x7, 0x200000000009, 0x40, 0x7, 0x200000400001}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00') 10m54.17944613s ago: executing program 1 (id=20): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x8000000}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10m52.044144387s ago: executing program 1 (id=22): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mount(0x0, 0x0, 0x0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) getpid() fcntl$setlease(r4, 0x400, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000005c80)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x8}, 0x0, 0x0, 0x6, 0x9, 0xffffffffffff7ffe, 0x0, 0x6, 0xd, 0xe6f}) 10m50.655892017s ago: executing program 1 (id=24): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x20060400) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) r6 = gettid() syz_open_procfs(r6, &(0x7f00000000c0)='stat\x00') ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r5}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r5, 0x4}) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x149a82, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0xf4, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1100, 0x1}, @flat=@weak_binder={0x77622a85, 0xb}}, 0x0}}, @register_looper, @decrefs={0x40046307, 0x2}, @enter_looper, @request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x7, 0x1, 0x9}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x8, 0x1, 0x2a}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/205, 0xcd, 0x1, 0x5}, @fd={0x66642a85, 0x0, r9}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, 0x0}}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000240)="2f2aefa92367bdae6e69d9eb186b56663d2af21ee9d9e21ca96f510c671494d853644c75ca759998db7d21fa758c9d4ff1aacf225ba306e06340a1cae55575c631a1370c97db32005d3df9"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r10, &(0x7f0000000040)='1\x00', 0x1) 10m35.208912745s ago: executing program 32 (id=24): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x20060400) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) r6 = gettid() syz_open_procfs(r6, &(0x7f00000000c0)='stat\x00') ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r5}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r5, 0x4}) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x149a82, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0xf4, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1100, 0x1}, @flat=@weak_binder={0x77622a85, 0xb}}, 0x0}}, @register_looper, @decrefs={0x40046307, 0x2}, @enter_looper, @request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x7, 0x1, 0x9}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x8, 0x1, 0x2a}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/205, 0xcd, 0x1, 0x5}, @fd={0x66642a85, 0x0, r9}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, 0x0}}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000240)="2f2aefa92367bdae6e69d9eb186b56663d2af21ee9d9e21ca96f510c671494d853644c75ca759998db7d21fa758c9d4ff1aacf225ba306e06340a1cae55575c631a1370c97db32005d3df9"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r10, &(0x7f0000000040)='1\x00', 0x1) 6m9.717796575s ago: executing program 2 (id=493): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x100, 0xd, 0x1, 0x62f5, 0xe, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x9081, r0}, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) landlock_restrict_self(r1, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0), 0xfffffffffffffe3b}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r5, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 6m5.079315676s ago: executing program 2 (id=495): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x6a8d, &(0x7f0000000300)={0x0, 0x293d, 0x4, 0x2002, 0x1f0, 0x0, r0}, &(0x7f00000007c0), &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 6m3.190132717s ago: executing program 2 (id=498): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x8ce, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="1dfd71d864192bb2e01c945aae35f1bd51ad8c64b9071fa0a870d49a6e01c42b5028df27c3af10b4ba540b149238d64aaca12eacdd5f6d824920e5f9f7adba3df8c68bd4ebac87aebc176fc3322970cc769cb6e9402c692bb1ae6d526f9a40d5ceca3d183e1b80623735b37406cb606a24721ff853cbd0fce590e88a4e4cb6ba6d06360afe3e0cb8cff746b72bbf8438477adaf0e89dcb2155c6eb102009587b99d48eddc10f8e821e38e56e1d7c9a5fbdfece64732d729b7acb350043d5eabc", 0xc0}, {0x0}, {0x0}], 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) signalfd(r2, &(0x7f0000000340)={[0xabed2e56]}, 0x8) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) r3 = io_uring_setup(0x694d, &(0x7f00000000c0)={0x0, 0x41f0b, 0x0, 0x2, 0x253}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0xffffffff, 0x161902) socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b0800014000000003080003000000008920000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0xa4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6m0.599355315s ago: executing program 2 (id=502): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r0, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x1, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2b, &(0x7f00000000c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r3, r3, 0x0, 0x9) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0x1534, &(0x7f0000000180)={0x0, 0xa58c, 0x4, 0x2, 0x2e2, 0x0, r4}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000340)) syz_ublk_add_dev(r6, r7, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) write(r1, &(0x7f0000000600)='stacktrace', 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) 5m58.381441873s ago: executing program 2 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(r3, 0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(&(0x7f0000000300)='ramfs\x00', 0x0) fsmount(r5, 0x1, 0x0) fchdir(0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="91", 0x1}], 0x1, 0x65, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x14, 0x2, 0x6, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000002800)=@file={0x1, './file0/file0\x00'}, 0x6e) 5m55.74400112s ago: executing program 2 (id=510): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) io_submit(0x0, 0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0xc000, &(0x7f0000000e00)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf727e1e38533740c5b1da10b83273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce837a5f88eb1f09a8a7f55959926a7fd5ac27fd519b5c217ed420e41ddcfd9072f503656169e720fdc2da8c998a870683232e5263a0", @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x1, 0x63a, &(0x7f0000005880)="$eJzs3V1v29Ydx/EfZVlWPCAYtqEIgjycJivgYJkiyY0DIQM2jqJkdpIokPRmAwOKrLGLIHK6JRmw+KbwzR6A7g3srje72IsYsN3uXexyQLHdDdiNBpKin/ToRLbb5vsxYh6Rf/L8D+nwgJJ4KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIMupl8sVSy2vs7FpxnPqgd+esDzd2qLupIU7U+uVrPifikVdSWdd+c7h4nfiX7d0LX11TcV4UtTeN9755sNv53PZ+hMSeh067QZfvNp7+qjX234+50S+BJSbIajpdrzQ99p20zVe6Jva2lr53nojNA2voHArjNy2cQI3F/mBWXHumEqttmrc0pa/0WnW7ZabzXzw/Wq5vGY+WBoc/nsflEJn3Wu1vE4ziYkXxzEPzGc/T0Ncu23MzpPe9uq0JOOgyixB1WlB1XK1WqlUq5W1+7X7D8rl/NCM8gkaipj7Hy2+YuZ38gbeUC7u//9pSS0V1dGGNmVG/jiqK5Cv9pjlA1n//949d2K9R/v/rJe/crj4qpL+/0b66sa4/n9MLkYmWWHUEmvM/Nf7eaFX2tNTPVJPPW3r+Xy2e3N+GZ7tT1PKS55C+fLUlq2mXJnBHKOa1rSmsj7UuhoKZdSQp5ZchdpSqEiu2skxCeTKViRfgYxW5OiOjCqqqaZVGbkqaUu+NtRRU3XZ+m+/39/Rk2S/r07IUVlQZZag6oSgcf3/Lz5N/07p/9922flrlhjgwvUH1/+ndPNssgEAAAAAAGfBSt59t5LP7q9L6qvhtdzyRacFAAAAAADmKPnk/1o8WYxL12WNuf7vn39uAAAAAABgPqzkHjtL0nLypX7r8E6oWb4EsHAOKQIAAAAAgDeUfP5/oyD1k7HXbso61fU/AAAAAAD4Cvj9kTH289kYu/3sY/2cpLC7ZP3130sKFq397uZ3rV07XmLvJjF/H/4GQNS4al0eDNSbTAqSkleOe826ngYNBsG00oF9pS92po31bwUnEigsZG9fTEtgLT94pc/0bhrz7qDex3s5JUvSWpYbXsstOX7rYUW2fTkXuZvRr589+Y0UHLRz50lvu/TRJ73HSS778az93TiPT4+lk5uWy0sN9sX1kS2+pEZW5R867WUrqbectX9B9m7uaEWztf+3upXG3FpOp8t72RFI2l+M218pJYfssPXJ6BDWYRaVky0fdSDGZFFMsridxtxeuZ1OsvwGWXxvQaqWho9BcDSL6tEspu8L6z9D+2JKFvG+WI2z+Fu8oTFZrJ4ui6EjAgAXZeewF0oGMR8eY/9kv/s6Z7npvfuPjtfy8k/99IbDBSk/+GxiYi1FxWf0lTSmoOTEmr864oxeHvQrRY05o5ffoHeL6/rL4TOQBmkPZfG/fr//sJLU+8cTvern8Qqfj6g37SrCVnUh3oX3Xu7+MhkAP/bx9sfbz6rV1bXy++Xy/aoWk2YMJvQ9AIARpj9jZ2qE9f7BVfXjf72Xlo71eN86+EpBSR/pE/X0WHezRwjcHL3V5SNfQ7g7fNUax16STsZWdHfsVZ2VvF+QxP5sq/DDNCj5vahsleM99eF2V8/2IAAAcM5u1QaFMf3wLP3/3ey6e+XqyOvu4335yScEj4utnO+OAADgLeIGX1jL0e+sIPC6H1ZqtYodrbsm8J2fmMCrN13jdSI3cNbtTtM13cCPfMdvmW6gJa/uhibc6Hb9IDINPzBdP/Q2TcNruWbw6PfQbdudyHPCbsu1Q9c4fieyncjUvdAx3Y0ft7xw3Q2SlcOu63gNz7Ejz++Y0N8IHLdkTOi6RwK9utuJvIYXFzumG3htO9gyP/VbG23X1N3QCbxu5KcbzOryOg0/aCebLal/6gcdAgDwdfTi1d7TR73e9vMJhX1NjxkUCqM2eNFtBAAAx9FLAwAAAAAAAAAAAAAAAAAAAADw5TfL/X+nKiyOullQOpjzq8szbcfSvBM7TSH3+qv/Y0LMpYM52e4/GrN/AS1VWsjPf8uXpNlvG51D4Qc76R4dGxMvHLlo6eBY5Of/3yEuPPvzmEX9fr8/efWl4/uwMKmBxwt5Sc8Lb3AILuZ8BOD8/D8AAP//qWlEKA==") r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 5m39.043916717s ago: executing program 33 (id=510): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) io_submit(0x0, 0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0xc000, &(0x7f0000000e00)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf727e1e38533740c5b1da10b83273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce837a5f88eb1f09a8a7f55959926a7fd5ac27fd519b5c217ed420e41ddcfd9072f503656169e720fdc2da8c998a870683232e5263a0", @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x1, 0x63a, &(0x7f0000005880)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 4m31.191928281s ago: executing program 0 (id=642): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x2, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0x8000000000000b, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x124, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x1) read(r2, &(0x7f0000000280)=""/249, 0xf9) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="a77704725bebf554", 0x8}], 0x1) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0x2000a78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00005c9000/0x1000)=nil, 0x1000, 0xb) 4m29.87493655s ago: executing program 0 (id=644): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0x7fffffffffffffff, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0x18, 0x1a, 0x8, 0x0}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000780)=""/174, &(0x7f0000000840)=0xae) io_uring_enter(r1, 0x4e85, 0xf2d1, 0x4, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000900)={0x4, 0xfffffffffffffffb, 0xd410, 0x1ff, 0x4, 0x5, 0x3, 0x8000000000000000}, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={[0x7]}, 0x8}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, &(0x7f0000000ac0)) rt_sigprocmask(0x0, &(0x7f0000000b00)={[0x7fffffff]}, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000b40)={0x0, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x4, 0x10}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0xa, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0xf, 0xa5, 0x2}, &(0x7f0000000d80)={r3, r4/1000+10000}) futex(0x0, 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) io_setup(0x7fffffff, &(0x7f0000000f80)=0x0) io_getevents(r5, 0x3, 0x0, &(0x7f0000000fc0), 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000001000)={0x0, 'pimreg0\x00', {0x3}, 0x1}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffd) 4m22.385758554s ago: executing program 0 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006"], 0x60}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4949, 0x4) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40012000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x8800, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2000, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './my_configfs/target/core/rd_mcp_0\x00'}) quotactl$Q_GETINFO(0x0, &(0x7f0000000180)=@filename='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', r3, &(0x7f0000000280)) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00') symlink(&(0x7f0000000080)='control/class/ss/h\x00', &(0x7f0000001500)='streaming/header/h/u\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 4m16.291394827s ago: executing program 0 (id=666): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) setns(0xc9, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) bind$rds(r4, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x5ba8, 0x0) exit(0x1ff) syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) 4m11.925304583s ago: executing program 0 (id=673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88582, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r5, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x4c831, r3, 0x1000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1f}, {0xffff, 0xc}, {0xfff1, 0xc}}, [{0x8, 0xb, 0x80}]}, 0x2c}}, 0x20004084) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4m3.158679315s ago: executing program 0 (id=682): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1, 0x1000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, 0x1}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) r5 = socket(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018808000100", @ANYRES32=r5, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18fd3f00000000000009000000850000007d0000009500"/32], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000340)="000000000000000051ad978b3e2b", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000020000000900010073797a30000000000900020073797a300000000008000a40000000010800054000000004080003400000002060000000060a01060000000000000000020000000900010073797a30000000000900020073797a300000000034000480300001800b00010064796e7365740000200002800900010073797a3000000000080003"], 0x118}}, 0x0) 4m2.766858433s ago: executing program 34 (id=682): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1, 0x1000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, 0x1}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) r5 = socket(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018808000100", @ANYRES32=r5, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18fd3f00000000000009000000850000007d0000009500"/32], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000340)="000000000000000051ad978b3e2b", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000020000000900010073797a30000000000900020073797a300000000008000a40000000010800054000000004080003400000002060000000060a01060000000000000000020000000900010073797a30000000000900020073797a300000000034000480300001800b00010064796e7365740000200002800900010073797a3000000000080003"], 0x118}}, 0x0) 30.88155356s ago: executing program 7 (id=1023): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdir(&(0x7f0000000040)='my_configfs\x00', 0xc) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000b890528a00008c2a773ba7753651d8168b0241b4dc7e2321d9490de073d07e072a014c37124098ff984ac72b2774e0"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) dup3(0xffffffffffffffff, r1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) 22.965429205s ago: executing program 6 (id=1030): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x2, 0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 22.427239748s ago: executing program 3 (id=1033): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x100, 0xd, 0x1, 0x62f5, 0xe, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x9081, r0}, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) landlock_restrict_self(r1, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0), 0xfffffffffffffe3b}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r6, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 18.618927112s ago: executing program 4 (id=1035): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r5, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885f", 0x2}], 0x1}}], 0x1, 0x24008001) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x18000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(r8, r8, 0xee01) r9 = getgid() write$FUSE_CREATE_OPEN(r6, &(0x7f0000002640)={0xa0, 0x0, 0x0, {{0x2, 0x3, 0x4, 0xffffffff, 0x4, 0x9, {0x8, 0xf4, 0x659d, 0x3ff, 0x40, 0xffffffff80000000, 0x5, 0x7, 0xd90, 0x2000, 0x9, r8, r9, 0x5, 0xfffffffb}}, {0x0, 0x11}}}, 0xa0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x136) 18.500744714s ago: executing program 7 (id=1036): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x6a8d, &(0x7f0000000300)={0x0, 0x293d, 0x4, 0x2002, 0x1f0, 0x0, r0}, &(0x7f00000007c0), &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 15.751976393s ago: executing program 3 (id=1037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000001140)={&(0x7f0000001100)=[{&(0x7f0000000f80)="3061934d41653c5b824d625991a71cc3c561bd25a40eb907ac2fc584320db2727e5164b03696fa9f16883151d061ea3ab4249f96d12e9b9e8efe5f9d02645aa8fc4f75e493705cd3b74d7a44828043c05f5a16a22719d16325248c8d7fe36fd4a0c18f44671c6c7993b4b2aad75b3e15d0e17a1ed996", 0x76}, {&(0x7f0000001000)="bc7d673429caa42422ccdbd6d78dd9215f9f063697b11adcfbc73c82a026b62b14586a1aca51abdd95b211ef2f7123fc7aeee056fba427ddf44bc6991f11153935e26aadec7a08d3b93980aa44ca3208d0180ba9e874505b68e619b26290664639bfcf8410fbba536e2dbca8bbfe8a3926ba6e333ca68b3ebe1961a1179eb389eb8123b16c14b7c3d99aa05e66b8f9f4e4f51247dec5c16afa4da3c8129655ed9d476d19d2555b55e94a4eeb942d", 0xae}], 0x2, 0x1, 0x0, 0x6, 0xe04, 0xfd, 0x5, 0xed}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="0d040000", @ANYRES16=r3, @ANYBLOB="010000000000000000002a00000008005800030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x21}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x500, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x1000, 0x1, 0x1d5}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) getdents64(0xffffffffffffffff, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001380)) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000bc0)={'syztnl2\x00', 0x0, 0x700, 0x10, 0xffff, 0x7, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x66, 0x1, 0x1, 0x2f, 0x0, @multicast2, @broadcast}}}}) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r11, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) sendfile(r8, r8, 0x0, 0x1002000ff) fsmount(r1, 0x0, 0x8) dup(r8) 15.518343018s ago: executing program 7 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r2, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x21980}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4010744d, &(0x7f0000000080)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x39, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374"]}, 0x20}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x2c, 0x3a, 0x505, 0x201, 0x0, {0x1, 0x1}, [@generic="0f00010070d871566b6d8501a2e4d9bb6091e06f76732d"]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_generic(r5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x40, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3a, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 15.517597568s ago: executing program 5 (id=1039): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8804, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x810\x8f\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000040)=0x3) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d3, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0xfffc, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) 15.4478898s ago: executing program 4 (id=1040): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(0x3) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r7 = add_key$user(0x0, 0x0, &(0x7f0000000300)="c2", 0x1, 0xfffffffffffffffb) keyctl$setperm(0x5, r7, 0x1010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) gettid() 13.763296942s ago: executing program 5 (id=1041): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20) connect$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x7fea, @empty, 0x9, 0xfffffffd}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x290, 0xf0, 0x160, 0x160, 0x0, 0x0, 0x1c0, 0x280, 0x280, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xa4}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1}, {0x4, 0x6, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) 13.704749363s ago: executing program 3 (id=1042): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x6a8d, &(0x7f0000000300)={0x0, 0x293d, 0x4, 0x2002, 0x1f0}, &(0x7f00000007c0), &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 13.056523459s ago: executing program 4 (id=1043): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x1}) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3e8) socket$l2tp6(0xa, 0x2, 0x73) 11.551384576s ago: executing program 6 (id=1044): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x6a8d, &(0x7f0000000300)={0x0, 0x293d, 0x4, 0x2002, 0x1f0}, &(0x7f00000007c0), &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 10.638349238s ago: executing program 5 (id=1045): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x100, 0xd, 0x1, 0x62f5, 0xe, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x9081, r0}, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0), 0xfffffffffffffe3b}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r6, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 10.55944382s ago: executing program 6 (id=1046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f6164002400028008000140"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000080)=0x10) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) io_uring_setup(0x2f08, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x0, 0x14d, 0x0, r3}) r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0xc8a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1}) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1ac, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x13, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, 0x0, 0x1) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}, @ramp={0x8, 0x4, {0x4, 0x31, 0x4, 0x9}}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$COMEDI_UNLOCK(r7, 0x6406) 10.480041702s ago: executing program 4 (id=1047): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x100, 0xd, 0x1, 0x62f5, 0xe, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x9081, r0}, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) landlock_restrict_self(r1, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0), 0xfffffffffffffe3b}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r6, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 10.479440312s ago: executing program 3 (id=1048): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x6a8d, &(0x7f0000000300)={0x0, 0x293d, 0x4, 0x2002, 0x1f0, 0x0, r0}, &(0x7f00000007c0), &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 10.424127133s ago: executing program 7 (id=1049): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x6a8d, &(0x7f0000000300)={0x0, 0x293d, 0x4, 0x2002, 0x1f0}, &(0x7f00000007c0), &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 6.419374782s ago: executing program 3 (id=1050): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00') preadv(r8, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0x9d, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 6.387009243s ago: executing program 4 (id=1051): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) io_submit(0x0, 0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0xc000, &(0x7f0000000e00)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf727e1e38533740c5b1da10b83273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce837a5f88eb1f09a8a7f55959926a7fd5ac27fd519b5c217ed420e41ddcfd9072f503656169e720fdc2da8c998a870683232e5263a0", @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x1, 0x63a, &(0x7f0000005880)="$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") r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 5.853341256s ago: executing program 6 (id=1052): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x8, 0x700, 0x8, 0x9, {{0x19, 0x4, 0x1, 0x3c, 0x64, 0x67, 0x0, 0x5, 0x49e4cec55e01605d, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0xb, 0xd3, [@broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1f, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x28}, @empty, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x11, 0x11, "b1096774dec015b300100000000000"}, @rr={0x7, 0xb, 0x5b, [@loopback, @dev={0xac, 0x14, 0x14, 0x3b}]}]}}}}}) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 4.986055177s ago: executing program 3 (id=1054): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0x8019b}]}) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r7, &(0x7f0000002dc0)={0x2020}, 0x2020) 4.492867009s ago: executing program 7 (id=1055): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x100, 0xd, 0x1, 0x62f5, 0xe, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x9081, r0}, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) landlock_restrict_self(r1, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0), 0xfffffffffffffe3b}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r6, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000040)) 4.273429445s ago: executing program 5 (id=1056): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 3.431907026s ago: executing program 6 (id=1057): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x6a8d, &(0x7f0000000300)={0x0, 0x293d, 0x4, 0x2002, 0x1f0}, &(0x7f00000007c0), &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 1.534318052s ago: executing program 7 (id=1058): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x6a8d, &(0x7f0000000300)={0x0, 0x293d, 0x4, 0x2002, 0x1f0}, &(0x7f00000007c0), &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 1.488472153s ago: executing program 5 (id=1059): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x100, 0xd, 0x1, 0x62f5, 0xe, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x9081, r0}, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) landlock_restrict_self(r1, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0), 0xfffffffffffffe3b}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r6, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 39.305509ms ago: executing program 4 (id=1060): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x6a8d, &(0x7f0000000300)={0x0, 0x293d, 0x4, 0x2002, 0x1f0, 0x0, r0}, &(0x7f00000007c0), &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 0s ago: executing program 6 (id=1061): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x100, 0xd, 0x1, 0x62f5, 0xe, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x9081, r0}, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) landlock_restrict_self(r1, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0), 0xfffffffffffffe3b}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r6, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) kernel console output (not intermixed with test programs): 01][ T4591] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.550497][ T4785] loop4: detected capacity change from 0 to 164 [ 141.589016][ T9] device hsr_slave_0 left promiscuous mode [ 141.614622][ T9] device hsr_slave_1 left promiscuous mode [ 141.656802][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.716619][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.743485][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.767753][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.789260][ T4792] loop2: detected capacity change from 0 to 164 [ 141.838994][ T9] device bridge_slave_1 left promiscuous mode [ 141.870157][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.952107][ T9] device bridge_slave_0 left promiscuous mode [ 141.959313][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.060135][ T9] device veth1_macvtap left promiscuous mode [ 142.078420][ T9] device veth0_macvtap left promiscuous mode [ 142.122095][ T9] device veth1_vlan left promiscuous mode [ 142.141143][ T9] device veth0_vlan left promiscuous mode [ 142.200419][ T4545] Bluetooth: hci5: Frame reassembly failed (-84) [ 142.208333][ T4545] Bluetooth: hci5: Frame reassembly failed (-84) [ 143.678021][ T4804] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 143.730042][ T4804] gadgetfs: bound to dummy_udc driver [ 143.866617][ T4804] binder: 4800:4804 unknown command 1074553619 [ 143.873178][ T4804] binder: 4800:4804 ioctl c0306201 200000000040 returned -22 [ 144.243327][ T4291] Bluetooth: hci5: command 0xfc11 tx timeout [ 144.244235][ T4293] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 144.923362][ T4802] binder: 4798:4802 ioctl c00c620f 2000000003c0 returned -22 [ 145.072095][ T4802] Zero length message leads to an empty skb [ 145.386531][ T4807] loop2: detected capacity change from 0 to 8 [ 150.060152][ T9] team0 (unregistering): Port device team_slave_1 removed [ 150.297705][ T9] team0 (unregistering): Port device team_slave_0 removed [ 150.566431][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.735896][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.001627][ T9] bond0 (unregistering): Released all slaves [ 152.773252][ T4591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.837334][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.854089][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.872724][ T4591] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.089924][ T4844] loop4: detected capacity change from 0 to 164 [ 153.152751][ T4843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.99'. [ 153.172298][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.192209][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.229932][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.237198][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.511809][ T4853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'. [ 154.503586][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.568999][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.881111][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.888286][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.970972][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.003642][ T4864] loop0: detected capacity change from 0 to 2048 [ 155.019847][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.132205][ T4591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.174450][ T4864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.194883][ T4591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.248203][ T4864] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.269535][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.310034][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.971090][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 155.983332][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.311100][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.320077][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.329171][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.344298][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.363861][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.423677][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.631842][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.774907][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.461380][ T4894] loop4: detected capacity change from 0 to 4096 [ 157.647383][ T4894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.379306][ T4908] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 158.404246][ T4908] binder: 4901:4908 unknown command 1074553619 [ 158.411322][ T4908] binder: 4901:4908 ioctl c0306201 200000000040 returned -22 [ 158.643299][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 160.178718][ T4926] loop4: detected capacity change from 0 to 128 [ 160.442329][ T4922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 161.979556][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.997714][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.031618][ T4591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.541553][ T4956] binder: 4951:4956 ioctl c00c620f 2000000003c0 returned -22 [ 163.042330][ T4293] Bluetooth: hci2: command 0x0406 tx timeout [ 163.060358][ T4955] loop0: detected capacity change from 0 to 512 [ 163.174015][ T4955] FAT-fs (loop0): Directory bread(block 199916) failed [ 163.181135][ T4955] FAT-fs (loop0): Directory bread(block 199917) failed [ 163.188083][ T4955] FAT-fs (loop0): Directory bread(block 199918) failed [ 163.195010][ T4955] FAT-fs (loop0): Directory bread(block 199919) failed [ 163.201878][ T4955] FAT-fs (loop0): Directory bread(block 199920) failed [ 163.208792][ T4955] FAT-fs (loop0): Directory bread(block 199921) failed [ 163.215673][ T4955] FAT-fs (loop0): Directory bread(block 199922) failed [ 163.222531][ T4955] FAT-fs (loop0): Directory bread(block 199923) failed [ 163.345358][ T4955] FAT-fs (loop0): FAT read failed (blocknr 128) [ 163.645629][ T4961] loop0: detected capacity change from 0 to 4096 [ 163.728896][ T4965] loop3: detected capacity change from 0 to 512 [ 163.738859][ T4961] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.836771][ T4965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.598085][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 164.620170][ T4965] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 165.101747][ T4980] syz.2.125 (4980) used greatest stack depth: 17872 bytes left [ 165.117296][ T4965] System zones: 0-2, 18-18, 34-35 [ 165.193241][ T4965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.263175][ T4965] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.603462][ T26] audit: type=1800 audit(1786979222.172:4): pid=4990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.123" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 167.014152][ T4992] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 167.032536][ T4992] binder: 4985:4992 unknown command 1074553619 [ 167.038926][ T4992] binder: 4985:4992 ioctl c0306201 200000000040 returned -22 [ 168.161388][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 169.974412][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.000398][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.046039][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.170743][ T4999] input: syz1 as /devices/virtual/input/input5 [ 170.447823][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.558778][ T4591] device veth0_vlan entered promiscuous mode [ 170.629460][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.719694][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.884391][ T4591] device veth1_vlan entered promiscuous mode [ 170.907300][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.916608][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.929207][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.938412][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.971835][ T5037] random: crng reseeded on system resumption [ 171.100408][ T5033] binder: 5024:5033 ioctl c00c620f 2000000003c0 returned -22 [ 171.111044][ T4591] device veth0_macvtap entered promiscuous mode [ 171.132512][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.523517][ T4591] device veth1_macvtap entered promiscuous mode [ 171.622624][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.760379][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.848035][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.887760][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.119059][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.342550][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.352701][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.645554][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.711849][ T4591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.842975][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.892369][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.179746][ T5074] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 174.198791][ T5074] binder: 5068:5074 unknown command 1074553619 [ 174.205165][ T5074] binder: 5068:5074 ioctl c0306201 200000000040 returned -22 [ 176.600218][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.610039][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.618761][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.627416][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.654584][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 176.662748][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.284038][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 178.460901][ T5111] loop4: detected capacity change from 0 to 8 [ 178.723275][ T4293] Bluetooth: hci5: command 0x0409 tx timeout [ 179.904051][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.911187][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.957622][ T5088] device bridge_slave_0 entered promiscuous mode [ 180.341218][ T5138] loop0: detected capacity change from 0 to 164 [ 180.803173][ T4293] Bluetooth: hci5: command 0x041b tx timeout [ 181.090788][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.105589][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.146460][ T5088] device bridge_slave_1 entered promiscuous mode [ 181.389751][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.429499][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.809675][ T5088] team0: Port device team_slave_0 added [ 181.819361][ T5088] team0: Port device team_slave_1 added [ 182.837936][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.853088][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.937011][ T5159] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 182.976720][ T4293] Bluetooth: hci5: command 0x040f tx timeout [ 183.415783][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.454741][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.461816][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.498143][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.826827][ T5088] device hsr_slave_0 entered promiscuous mode [ 183.860403][ T5088] device hsr_slave_1 entered promiscuous mode [ 183.973688][ T5168] input: syz0 as /devices/virtual/input/input6 [ 184.025899][ T5162] jffs2: notice: (5162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.094006][ T5172] loop3: detected capacity change from 0 to 8 [ 185.054991][ T4293] Bluetooth: hci5: command 0x0419 tx timeout [ 185.386026][ T5184] loop3: detected capacity change from 0 to 512 [ 185.400287][ T5184] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.531980][ T5184] EXT4-fs (loop3): 1 truncate cleaned up [ 185.538382][ T5184] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.721535][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 185.730717][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 185.934056][ T4456] device hsr_slave_0 left promiscuous mode [ 186.049205][ T4456] device hsr_slave_1 left promiscuous mode [ 186.194525][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.201974][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.306227][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.354717][ T4456] device bridge_slave_1 left promiscuous mode [ 186.371183][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.382275][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 186.400565][ T4456] device bridge_slave_0 left promiscuous mode [ 186.413753][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.475791][ T4456] device veth1_macvtap left promiscuous mode [ 186.481876][ T4456] device veth0_macvtap left promiscuous mode [ 186.503346][ T4456] device veth1_vlan left promiscuous mode [ 186.509206][ T4456] device veth0_vlan left promiscuous mode [ 187.128492][ T4456] team0 (unregistering): Port device team_slave_1 removed [ 187.164640][ T4456] team0 (unregistering): Port device team_slave_0 removed [ 187.198395][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.239920][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.445878][ T4456] bond0 (unregistering): Released all slaves [ 188.065452][ T5088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 188.085954][ T5088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 188.095442][ T5088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 188.107444][ T5088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.178172][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.195837][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.204837][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.215534][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.226501][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.237019][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.254398][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.261541][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.280585][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.289614][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.299407][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.309459][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.316898][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.326166][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.335583][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.355302][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.367154][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.377351][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.395354][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.410407][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.419912][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.438170][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.450194][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.459800][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.469217][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.478125][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.722438][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.730090][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.745279][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.130719][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.140262][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.162630][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.171242][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.185697][ T5088] device veth0_vlan entered promiscuous mode [ 189.197308][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.206084][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.222798][ T5088] device veth1_vlan entered promiscuous mode [ 189.251225][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.260577][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.269584][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.279105][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.300568][ T5088] device veth0_macvtap entered promiscuous mode [ 189.312035][ T5088] device veth1_macvtap entered promiscuous mode [ 189.340659][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.351637][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.361786][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.384037][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.396800][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.407370][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.417331][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.427806][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.439200][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.455697][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.466546][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.476457][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.487269][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.497403][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.507900][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.517806][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.528741][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.544575][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.552043][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.561681][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.570319][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.582044][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.592176][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.602057][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.615690][ T5088] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.625839][ T5088] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.634597][ T5088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.643405][ T5088] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.717248][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.728497][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.739375][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.757274][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.765207][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.772693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.090265][ T5263] netlink: 236 bytes leftover after parsing attributes in process `syz.4.172'. [ 190.126386][ T5263] loop4: detected capacity change from 0 to 512 [ 190.139294][ T5263] ext4: Unknown parameter 'nouser_xattr' [ 193.763131][ T4293] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 193.763445][ T4291] Bluetooth: hci0: command 0xfc11 tx timeout [ 194.408151][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.426282][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.400886][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 197.404531][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 197.408295][ T4295] Bluetooth: hci4: command 0x0406 tx timeout [ 197.421977][ T5300] netlink: 36 bytes leftover after parsing attributes in process `syz.3.166'. [ 200.532913][ T5338] random: crng reseeded on system resumption [ 203.202891][ T5364] tmpfs: Unknown parameter 'usrquota' [ 203.431997][ T53] block nbd3: Attempted send on invalid socket [ 203.438477][ T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.449052][ T5333] FAT-fs (nbd3): unable to read boot sector [ 203.530504][ T5365] netlink: 36 bytes leftover after parsing attributes in process `syz.5.181'. [ 203.837367][ T5372] loop2: detected capacity change from 0 to 164 [ 203.882082][ T5373] syz.0.182 sent an empty control message without MSG_MORE. [ 205.255945][ T5394] loop2: detected capacity change from 0 to 164 [ 205.866394][ T5396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.187'. [ 206.809306][ T5408] netlink: 'syz.4.189': attribute type 5 has an invalid length. [ 206.817395][ T5408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.189'. [ 210.424331][ T5435] loop3: detected capacity change from 0 to 164 [ 220.452389][ T5483] bridge0: port 3(syz_tun) entered blocking state [ 220.459957][ T5483] bridge0: port 3(syz_tun) entered disabled state [ 220.467911][ T5483] device syz_tun entered promiscuous mode [ 220.474244][ T5483] bridge0: port 3(syz_tun) entered blocking state [ 220.480936][ T5483] bridge0: port 3(syz_tun) entered forwarding state [ 220.981295][ T5511] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 221.703229][ T5512] random: crng reseeded on system resumption [ 221.854263][ T5507] sched: RT throttling activated [ 226.184306][ T5546] loop5: detected capacity change from 0 to 8 [ 228.341329][ T5567] loop2: detected capacity change from 0 to 512 [ 228.398407][ T5563] loop0: detected capacity change from 0 to 164 [ 228.446160][ T5567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.517031][ T5567] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 228.553733][ T5567] System zones: 0-2, 18-18, 34-35 [ 228.577537][ T5567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.591198][ T5567] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.343042][ T26] audit: type=1800 audit(1786979284.882:5): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.224" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 229.565544][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 229.871082][ T5592] tmpfs: Unknown parameter 'usrquota' [ 230.939901][ T5602] loop5: detected capacity change from 0 to 164 [ 233.319104][ T5613] jffs2: notice: (5613) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 233.986159][ T5628] netlink: 96 bytes leftover after parsing attributes in process `syz.2.233'. [ 234.021381][ T5628] loop2: detected capacity change from 0 to 512 [ 234.479986][ T5628] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 234.544018][ T5628] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 234.562723][ T5628] EXT4-fs (loop2): Remounting filesystem read-only [ 234.570687][ T5628] EXT4-fs (loop2): 1 truncate cleaned up [ 234.576493][ T5628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.811645][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 235.496742][ T5641] loop4: detected capacity change from 0 to 164 [ 237.648544][ T5662] loop0: detected capacity change from 0 to 164 [ 241.109105][ T5693] loop4: detected capacity change from 0 to 164 [ 241.274899][ T5696] jffs2: notice: (5696) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.458692][ T5701] loop4: detected capacity change from 0 to 164 [ 241.819660][ T4332] Bluetooth: hci0: Frame reassembly failed (-84) [ 243.843213][ T4295] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 244.112064][ T5723] loop4: detected capacity change from 0 to 512 [ 244.390897][ T5723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.660878][ T5723] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 244.821175][ T5723] System zones: 0-2, 18-18, 34-35 [ 244.887751][ T5723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 244.897127][ T5723] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.695459][ T26] audit: type=1800 audit(1786979301.212:6): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.256" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 245.761446][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 249.417339][ T5769] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 249.437620][ T5769] binder: 5766:5769 unknown command 1074553619 [ 249.444278][ T5769] binder: 5766:5769 ioctl c0306201 200000000040 returned -22 [ 250.571331][ T5780] loop0: detected capacity change from 0 to 164 [ 252.272788][ T4488] Bluetooth: hci0: Frame reassembly failed (-84) [ 254.891422][ T4295] Bluetooth: hci0: command 0xfc11 tx timeout [ 254.895010][ T4293] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 255.845586][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.851961][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.570489][ T5844] netlink: 'syz.2.275': attribute type 5 has an invalid length. [ 256.578258][ T5844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.275'. [ 256.600783][ T5844] debugfs: Directory ' j¦!ÐÕ(á=|èl'rŒý00000000000000000003' with parent 'ieee80211' already present! [ 257.043188][ T4295] Bluetooth: hci0: command 0xfc11 tx timeout [ 257.057902][ T4293] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 257.396182][ T5851] tmpfs: Unknown parameter 'usrquota' [ 257.678131][ T5852] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 257.824835][ T5852] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 257.916755][ T5852] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 257.969019][ T5852] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 258.851102][ T5873] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 258.871464][ T5873] binder: 5869:5873 unknown command 1074553619 [ 258.877931][ T5873] binder: 5869:5873 ioctl c0306201 200000000040 returned -22 [ 264.255933][ T5912] loop0: detected capacity change from 0 to 164 [ 265.547123][ T5922] loop2: detected capacity change from 0 to 512 [ 265.591924][ T5922] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 266.079028][ T5922] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #17: comm syz.2.287: inode has both inline data and extents flags [ 266.099873][ T5922] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.287: couldn't read orphan inode 17 (err -117) [ 266.112842][ T5922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 266.152845][ T5919] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.287: bg 0: block 65: padding at end of block bitmap is not set [ 266.171266][ T5919] Quota error (device loop2): write_blk: dquota write failed [ 266.179193][ T5919] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 266.190292][ T5919] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.287: Failed to acquire dquot type 0 [ 266.484598][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 267.379750][ T5941] loop2: detected capacity change from 0 to 2048 [ 267.418532][ T5941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.459475][ T5960] random: crng reseeded on system resumption [ 270.169401][ T5963] loop0: detected capacity change from 0 to 164 [ 273.055382][ T5975] loop3: detected capacity change from 0 to 164 [ 275.293485][ T5987] atomic_op ffff888074648198 conn xmit_atomic 0000000000000000 [ 276.248343][ T5998] overlayfs: missing 'lowerdir' [ 277.902916][ T6004] tmpfs: Unknown parameter 'usrquota' [ 279.322650][ T6011] netlink: 112 bytes leftover after parsing attributes in process `syz.4.307'. [ 282.420487][ T6019] loop3: detected capacity change from 0 to 164 [ 284.456697][ T6052] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 287.296209][ T6067] tmpfs: Unknown parameter 'usrquota' [ 287.998932][ T6075] loop5: detected capacity change from 0 to 164 [ 288.882718][ T6080] loop0: detected capacity change from 0 to 164 [ 289.486302][ T6089] netlink: 96 bytes leftover after parsing attributes in process `syz.3.325'. [ 289.518797][ T6089] loop3: detected capacity change from 0 to 512 [ 289.627882][ T6089] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 289.894238][ T6089] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 289.911370][ T6089] EXT4-fs (loop3): Remounting filesystem read-only [ 289.919954][ T6089] EXT4-fs (loop3): 1 truncate cleaned up [ 289.925753][ T6089] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 290.039066][ T4295] Bluetooth: hci0: sending frame failed (-49) [ 290.048766][ T4293] Bluetooth: hci0: Entering manufacturer mode failed (-49) [ 290.231397][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 292.979161][ T6116] loop3: detected capacity change from 0 to 164 [ 293.542050][ T6122] tmpfs: Unknown parameter 'usrquota' [ 295.394378][ T6126] loop5: detected capacity change from 0 to 4096 [ 295.412058][ T6126] EXT4-fs: inline encryption not supported [ 295.423541][ T6126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.466844][ T6126] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 295.513668][ T6126] EXT4-fs (loop5): Test dummy encryption mode enabled [ 295.620706][ T6126] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 296.423853][ T6139] atomic_op ffff88807d284198 conn xmit_atomic 0000000000000000 [ 298.619827][ T6160] loop0: detected capacity change from 0 to 1024 [ 298.714028][ T6160] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.790010][ T6160] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 298.820937][ T5088] EXT4-fs (loop5): unmounting filesystem. [ 298.824726][ T6160] System zones: 0-1, 3-12 [ 298.874982][ T6160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 298.883809][ T4293] Bluetooth: hci5: command 0x0406 tx timeout [ 300.131519][ T6170] process 'syz.0.345' launched './file2' with NULL argv: empty string added [ 300.983574][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 301.840307][ T6187] loop3: detected capacity change from 0 to 131072 [ 301.870011][ T6187] F2FS-fs (loop3): invalid crc value [ 301.980521][ T6187] F2FS-fs (loop3): Found nat_bits in checkpoint [ 302.025316][ T6187] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 302.875930][ T6187] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 303.943046][ T6204] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 305.794474][ T6218] loop2: detected capacity change from 0 to 164 [ 312.803104][ T4295] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 313.345560][ T6280] loop0: detected capacity change from 0 to 512 [ 313.417837][ T6280] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 313.837771][ T6279] ======================================================= [ 313.837771][ T6279] WARNING: The mand mount option has been deprecated and [ 313.837771][ T6279] and is ignored by this kernel. Remove the mand [ 313.837771][ T6279] option from the mount to silence this warning. [ 313.837771][ T6279] ======================================================= [ 313.915463][ T6279] overlayfs: failed to resolve './file1/file0': -2 [ 314.049591][ T6280] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #17: comm syz.0.369: inode has both inline data and extents flags [ 314.066176][ T6280] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.369: couldn't read orphan inode 17 (err -117) [ 314.084512][ T6280] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 314.233575][ T6278] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.369: bg 0: block 65: padding at end of block bitmap is not set [ 314.250758][ T6278] Quota error (device loop0): write_blk: dquota write failed [ 314.258368][ T6278] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 314.268463][ T6278] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.369: Failed to acquire dquot type 0 [ 314.502335][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 314.809049][ T6296] fuse: Bad value for 'fd' [ 316.063310][ T6320] input: syz1 as /devices/virtual/input/input7 [ 316.372371][ T6326] loop5: detected capacity change from 0 to 1024 [ 316.400007][ T6326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.523414][ T6326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 316.552077][ T6326] System zones: 0-1, 3-12 [ 316.597508][ T6326] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 317.287612][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.294045][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.690526][ T5088] EXT4-fs (loop5): unmounting filesystem. [ 318.118973][ T6343] loop3: detected capacity change from 0 to 1024 [ 318.145770][ T6343] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 318.155321][ T6343] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (40000) [ 318.496540][ T6347] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.518333][ T6347] loop2: detected capacity change from 0 to 8 [ 319.023187][ T6353] kAFS: unable to lookup cell '/,c¾ûL' [ 319.138739][ T6353] binder: BINDER_SET_CONTEXT_MGR already set [ 319.145317][ T6353] binder: 6349:6353 ioctl 4018620d 200000004a80 returned -16 [ 321.133116][ T4293] Bluetooth: hci0: command 0xfc11 tx timeout [ 321.139524][ T4295] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 322.317632][ T6368] loop5: detected capacity change from 0 to 512 [ 323.112034][ T6368] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 323.214866][ T6374] loop3: detected capacity change from 0 to 1024 [ 323.245900][ T6368] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #17: comm syz.5.388: inode has both inline data and extents flags [ 323.259532][ T6368] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.388: couldn't read orphan inode 17 (err -117) [ 323.268066][ T6374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.279894][ T6368] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 323.330393][ T6367] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.388: bg 0: block 65: padding at end of block bitmap is not set [ 323.347181][ T6367] Quota error (device loop5): write_blk: dquota write failed [ 323.354739][ T6367] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 323.364800][ T6367] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.388: Failed to acquire dquot type 0 [ 323.666390][ T5088] EXT4-fs (loop5): unmounting filesystem. [ 323.709700][ T6374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 323.770370][ T6374] System zones: 0-1, 3-12 [ 323.806830][ T6374] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 325.400092][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 325.665687][ T6402] netlink: 5 bytes leftover after parsing attributes in process `syz.4.397'. [ 327.432839][ T4381] Bluetooth: hci0: Frame reassembly failed (-84) [ 329.444300][ T4295] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 329.452138][ T4293] Bluetooth: hci0: command 0xfc11 tx timeout [ 332.323311][ T4295] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 332.331203][ T4293] Bluetooth: hci0: command 0xfc11 tx timeout [ 334.286276][ T6460] loop2: detected capacity change from 0 to 164 [ 335.640319][ T6470] device syz_tun entered promiscuous mode [ 338.649776][ T6498] dlm: no local IP address has been set [ 338.657746][ T6498] dlm: cannot start dlm midcomms -107 [ 345.724035][ T6533] futex_wake_op: syz.4.431 tries to shift op by 144; fix this program [ 346.399998][ T6543] loop5: detected capacity change from 0 to 164 [ 348.691642][ T6551] dlm: no local IP address has been set [ 348.752872][ T6551] dlm: cannot start dlm midcomms -107 [ 352.723182][ T4293] Bluetooth: hci0: command 0xfc11 tx timeout [ 352.731777][ T4295] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 355.780352][ T6594] loop3: detected capacity change from 0 to 128 [ 356.118850][ T6594] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 356.129824][ T6594] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 356.398948][ T6591] fscrypt: Error allocating hmac(sha512): -2 [ 356.695731][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 356.900767][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 358.875269][ T6624] dlm: no local IP address has been set [ 358.881009][ T6624] dlm: cannot start dlm midcomms -107 [ 359.900341][ T6644] loop3: detected capacity change from 0 to 164 [ 362.009201][ T6651] loop2: detected capacity change from 0 to 164 [ 363.989919][ T6667] loop0: detected capacity change from 0 to 2048 [ 364.130730][ T6667] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 364.181689][ T6667] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.646607][ T6673] fs-verity: sha512 using implementation "sha512-avx2" [ 364.967011][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 365.207612][ T6680] dlm: no local IP address has been set [ 365.213639][ T6680] dlm: cannot start dlm midcomms -107 [ 366.198896][ T4744] Bluetooth: hci0: Frame reassembly failed (-84) [ 368.110662][ T6698] loop3: detected capacity change from 0 to 32768 [ 368.253134][ T4293] Bluetooth: hci0: command 0xfc11 tx timeout [ 368.259597][ T4295] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 368.611137][ T6703] netlink: 32 bytes leftover after parsing attributes in process `syz.5.477'. [ 369.988911][ T6698] XFS (loop3): Mounting V5 Filesystem [ 371.961489][ T6698] XFS (loop3): log mount failed [ 372.009593][ T4293] Bluetooth: hci0: command 0xfc11 tx timeout [ 372.016206][ T4295] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 374.811144][ T6744] loop0: detected capacity change from 0 to 164 [ 377.495309][ T6765] loop5: detected capacity change from 0 to 1024 [ 377.576046][ T6765] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 377.585579][ T6765] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (40000) [ 377.874395][ T4775] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 378.736425][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.743124][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.163224][ T4282] Bluetooth: hci0: command 0xfc11 tx timeout [ 380.163274][ T4295] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 381.373190][ T4293] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 381.373213][ T4295] Bluetooth: hci6: command 0xfc11 tx timeout [ 383.661210][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.496'. [ 384.891756][ T4323] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 386.692938][ T4323] usb 6-1: Using ep0 maxpacket: 32 [ 386.956635][ T4323] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 386.964995][ T4323] usb 6-1: config 0 has no interface number 0 [ 386.973929][ T4323] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 386.983341][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.991519][ T4323] usb 6-1: Product: syz [ 386.996109][ T4323] usb 6-1: Manufacturer: syz [ 387.000809][ T4323] usb 6-1: SerialNumber: syz [ 387.109753][ T4323] usb 6-1: config 0 descriptor?? [ 387.166183][ T4323] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 387.188873][ T6800] loop7: detected capacity change from 0 to 16384 [ 387.194833][ T6802] dlm: no local IP address has been set [ 387.200907][ T6802] dlm: cannot start dlm midcomms -107 [ 387.457985][ T6806] loop3: detected capacity change from 0 to 512 [ 387.666352][ T4323] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 387.798692][ T6806] EXT4-fs (loop3): Test dummy encryption mode enabled [ 387.965022][ T6783] libceph: resolve ' [ 387.965022][ T6783] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 387.965022][ T6783] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 387.992752][ T6806] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 388.088002][ T4323] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 388.211821][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 388.276768][ T4323] usb 6-1: USB disconnect, device number 2 [ 388.295394][ T6806] EXT4-fs (loop3): 1 truncate cleaned up [ 388.301112][ T6806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 388.356430][ T4323] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 388.407839][ T4323] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 388.413763][ T6805] loop7: detected capacity change from 16384 to 0 [ 389.208421][ T4323] quatech2 6-1:0.51: device disconnected [ 389.536359][ T6830] capability: warning: `syz.3.503' uses deprecated v2 capabilities in a way that may be insecure [ 390.934898][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 393.475720][ T6880] loop0: detected capacity change from 0 to 1024 [ 394.261386][ T6880] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 394.271012][ T6880] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (40000) [ 395.963078][ T6888] loop2: detected capacity change from 0 to 164 [ 396.096610][ T6894] netlink: 'syz.4.505': attribute type 4 has an invalid length. [ 396.385528][ T6903] loop0: detected capacity change from 0 to 4096 [ 397.553520][ T6905] input: syz0 as /devices/virtual/input/input8 [ 397.860382][ T6903] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 399.396874][ T6917] rt1719: probe of 0-0049 failed with error -5 [ 399.407775][ T6917] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 399.460245][ T6917] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 399.539703][ T6917] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 406.726481][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 409.123334][ T4293] Bluetooth: hci0: command 0xfc11 tx timeout [ 409.130007][ T4295] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 413.624582][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.640855][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.651890][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.660225][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.695281][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.703931][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.115248][ T7001] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 414.376516][ T7001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.543'. [ 414.669317][ T4545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.857586][ T4545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.992536][ T4545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.209225][ T4545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.774773][ T4293] Bluetooth: hci0: command 0x0409 tx timeout [ 416.021914][ T6996] chnl_net:caif_netlink_parms(): no params data found [ 416.695223][ T7028] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 417.843720][ T4295] Bluetooth: hci0: command 0x041b tx timeout [ 417.923127][ T4293] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 419.964377][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 420.130271][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.139462][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 420.170911][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.771057][ T6996] device bridge_slave_0 entered promiscuous mode [ 422.014267][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 422.121699][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.147277][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.163290][ T4295] Bluetooth: hci4: command 0xfc11 tx timeout [ 422.171661][ T4293] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 422.328504][ T6996] device bridge_slave_1 entered promiscuous mode [ 422.928021][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.652030][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.790000][ T6996] team0: Port device team_slave_0 added [ 423.807754][ T6996] team0: Port device team_slave_1 added [ 424.984697][ T4293] Bluetooth: Wrong link type (-57) [ 424.994877][ T7065] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 425.480082][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.533955][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.603177][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.951209][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.981205][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.113299][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.351542][ T6996] device hsr_slave_0 entered promiscuous mode [ 428.358945][ T6996] device hsr_slave_1 entered promiscuous mode [ 428.398041][ T6996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.260947][ T7108] sctp: failed to load transform for md5: -2 [ 429.323099][ T6996] Cannot create hsr debugfs directory [ 430.914141][ T4293] Bluetooth: Wrong link type (-57) [ 433.241384][ T7143] loop5: detected capacity change from 0 to 32768 [ 433.667931][ T7143] XFS (loop5): Mounting V5 Filesystem [ 433.805949][ T6996] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.889585][ T7143] XFS (loop5): Ending clean mount [ 433.891596][ T6996] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.911723][ T7143] XFS (loop5): Quotacheck needed: Please wait. [ 433.995921][ T6996] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 434.025189][ T7143] XFS (loop5): Quotacheck: Done. [ 434.201923][ T6996] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 434.444437][ T26] audit: type=1800 audit(1786979489.957:7): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.570" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 435.048540][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.070842][ T5088] XFS (loop5): Unmounting Filesystem [ 435.136101][ T7176] loop3: detected capacity change from 0 to 1024 [ 435.226352][ T4372] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 435.261010][ T7175] kAFS: No cell specified [ 435.348645][ T7175] loop3: detected capacity change from 0 to 1024 [ 435.349274][ T4372] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 435.447943][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 435.486229][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.535626][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.676477][ T4545] device hsr_slave_0 left promiscuous mode [ 436.704059][ T4545] device hsr_slave_1 left promiscuous mode [ 436.721152][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.737190][ T26] audit: type=1800 audit(1786979492.297:8): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.578" name="power" dev="configfs" ino=44960 res=0 errno=0 [ 437.033080][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.139706][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.223104][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.277037][ T4545] device bridge_slave_1 left promiscuous mode [ 437.319874][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.344208][ T7206] loop5: detected capacity change from 0 to 1024 [ 437.388438][ T4545] device bridge_slave_0 left promiscuous mode [ 437.435435][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.219203][ T4545] device veth1_macvtap left promiscuous mode [ 438.237235][ T4545] device veth0_macvtap left promiscuous mode [ 438.264055][ T4545] device veth1_vlan left promiscuous mode [ 438.269992][ T4545] device veth0_vlan left promiscuous mode [ 439.837180][ T4545] team0 (unregistering): Port device team_slave_1 removed [ 439.881144][ T4545] team0 (unregistering): Port device team_slave_0 removed [ 439.928815][ T4545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.978762][ T4545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.168313][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.175060][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.265786][ T4545] bond0 (unregistering): Released all slaves [ 440.404641][ T6996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 440.420100][ T6996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.443174][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.452067][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.500563][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.507789][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.515778][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 440.532124][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.547818][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.554989][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.571340][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 440.580490][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 440.599472][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 440.614664][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 440.628208][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.638187][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.651793][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 440.661739][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.685958][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 440.699879][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.448423][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 441.457086][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.460797][ T7200] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 441.465642][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.574921][ T7200] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 442.777932][ T7254] binder: 7246:7254 ioctl c0306201 0 returned -14 [ 443.352687][ T7254] sctp: failed to load transform for md5: -2 [ 444.669144][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.710421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 444.720277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.122800][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 445.316085][ T7285] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 445.838199][ T7296] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 446.924683][ T7311] input: syz0 as /devices/virtual/input/input9 [ 447.986288][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.158336][ T7319] loop0: detected capacity change from 0 to 32768 [ 448.362475][ T7331] jffs2: notice: (7331) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 448.568700][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.933203][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.046567][ T7319] XFS (loop0): Mounting V5 Filesystem [ 449.053547][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.150589][ T7319] XFS (loop0): Ending clean mount [ 449.200842][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.219544][ T7319] XFS (loop0): Quotacheck needed: Please wait. [ 449.239569][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.260183][ T7319] XFS (loop0): Quotacheck: Done. [ 449.266423][ T6996] device veth0_vlan entered promiscuous mode [ 449.540811][ T26] audit: type=1800 audit(1786979505.074:9): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.599" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 449.582454][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.896764][ T4281] XFS (loop0): Unmounting Filesystem [ 449.947899][ T6996] device veth1_vlan entered promiscuous mode [ 449.994315][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 450.208553][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.225975][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.270532][ T6996] device veth0_macvtap entered promiscuous mode [ 450.314971][ T6996] device veth1_macvtap entered promiscuous mode [ 450.517141][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.179887][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.195994][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.211127][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.264398][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.293234][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.421865][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.557686][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.624588][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.639822][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.650404][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.660316][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.671280][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.691386][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.712115][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.732394][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.821665][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.937701][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.976246][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 451.985492][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.994444][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 452.003406][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.017130][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.080117][ T6996] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.115334][ T6996] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.143984][ T6996] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.405862][ T7380] input: syz0 as /devices/virtual/input/input10 [ 453.495398][ T7386] netlink: 20 bytes leftover after parsing attributes in process `syz.5.612'. [ 454.547356][ T6996] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.716187][ T4545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.834858][ T4545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.966233][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 457.305186][ T4293] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 457.313305][ T4295] Bluetooth: hci4: command 0xfc11 tx timeout [ 460.590572][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.604872][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.276329][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 464.074758][ T7448] loop6: detected capacity change from 0 to 512 [ 464.207305][ T7448] EXT4-fs (loop6): Test dummy encryption mode enabled [ 464.233360][ T7448] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 465.134136][ T7448] EXT4-fs (loop6): 1 truncate cleaned up [ 465.170457][ T7448] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 467.504025][ T6996] EXT4-fs (loop6): unmounting filesystem. [ 469.923226][ T4293] Bluetooth: hci4: command 0xfc11 tx timeout [ 469.931880][ T4291] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 470.799105][ T7516] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.970410][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 473.497596][ T4291] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 480.076182][ T7568] futex_wake_op: syz.4.635 tries to shift op by 144; fix this program [ 480.504870][ T7566] 9pnet_fd: Insufficient options for proto=fd [ 484.643211][ T4291] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 484.644147][ T4293] Bluetooth: hci4: command 0xfc11 tx timeout [ 486.161173][ T7630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.659'. [ 487.013498][ T7420] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 488.897445][ T7420] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.913680][ T7420] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 489.195379][ T7632] sctp: failed to load transform for md5: -2 [ 490.993903][ T7420] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.045955][ T7420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 491.363137][ T4291] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 491.377717][ T7420] usb 4-1: can't set config #1, error -71 [ 491.493483][ T7420] usb 4-1: USB disconnect, device number 3 [ 495.043374][ T7692] 0x000000000007-0x000000020000 : "" [ 495.076264][ T7692] ftl_cs: FTL header corrupt! [ 496.624601][ T7694] tty tty1: ldisc open failed (-12), clearing slot 0 [ 497.843154][ T4291] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 497.847407][ T4295] Bluetooth: hci4: command 0xfc11 tx timeout [ 498.227330][ T7711] kernel profiling enabled (shift: 7) [ 499.453112][ T7703] Bluetooth: hci6: command 0xfc11 tx timeout [ 499.459752][ T4293] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 502.176458][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.193315][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.024749][ T7705] bridge0: port 3(syz_tun) entered disabled state [ 504.279142][ T7705] device syz_tun left promiscuous mode [ 504.314168][ T7705] bridge0: port 3(syz_tun) entered disabled state [ 504.403244][ T7703] Bluetooth: hci4: command 0xfc11 tx timeout [ 504.411889][ T4293] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 506.505933][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 512.174497][ T4293] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 512.182281][ T4282] Bluetooth: hci2: command 0xfc11 tx timeout [ 513.923311][ T7703] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 513.931250][ T4293] Bluetooth: hci4: command 0xfc11 tx timeout [ 515.404367][ T7828] hub 8-0:1.0: USB hub found [ 515.437949][ T7828] hub 8-0:1.0: 1 port detected [ 516.013717][ T4293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 516.023727][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 516.031657][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 516.042862][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 516.173256][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 516.180587][ T4293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 518.217273][ T7857] loop6: detected capacity change from 0 to 256 [ 518.713027][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 520.263952][ T7857] FAT-fs (loop6): Directory bread(block 64) failed [ 520.270524][ T7857] FAT-fs (loop6): Directory bread(block 65) failed [ 520.277166][ T7857] FAT-fs (loop6): Directory bread(block 66) failed [ 520.283832][ T7857] FAT-fs (loop6): Directory bread(block 67) failed [ 520.290414][ T7857] FAT-fs (loop6): Directory bread(block 68) failed [ 520.297247][ T7857] FAT-fs (loop6): Directory bread(block 69) failed [ 520.303905][ T7857] FAT-fs (loop6): Directory bread(block 70) failed [ 520.310441][ T7857] FAT-fs (loop6): Directory bread(block 71) failed [ 520.317140][ T7857] FAT-fs (loop6): Directory bread(block 72) failed [ 520.323714][ T7857] FAT-fs (loop6): Directory bread(block 73) failed [ 520.767612][ T4737] Bluetooth: hci4: Frame reassembly failed (-84) [ 520.803303][ T7703] Bluetooth: hci2: command 0x041b tx timeout [ 522.803148][ T4293] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 522.803177][ T7703] Bluetooth: hci4: command 0xfc11 tx timeout [ 522.893163][ T7703] Bluetooth: hci2: command 0x040f tx timeout [ 523.107559][ T7823] chnl_net:caif_netlink_parms(): no params data found [ 523.320481][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.5.709'. [ 524.706235][ T7897] overlayfs: missing 'lowerdir' [ 524.990647][ T7703] Bluetooth: hci2: command 0x0419 tx timeout [ 525.209037][ T7823] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.228953][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.253195][ T7823] device bridge_slave_0 entered promiscuous mode [ 525.270386][ T7823] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.296025][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.317391][ T7823] device bridge_slave_1 entered promiscuous mode [ 525.657145][ T7823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.670181][ T7893] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 525.676642][ T7893] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 525.693680][ T7893] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 525.700939][ T7893] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 525.706979][ T7893] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 525.723709][ T7893] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 525.730944][ T7893] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 525.736934][ T7893] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 525.745800][ T7893] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 525.754141][ T7893] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 525.760066][ T7893] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 525.767836][ T7893] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 525.775287][ T7893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 525.781272][ T7893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 525.790199][ T7893] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 525.816587][ T7823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.072082][ T7823] team0: Port device team_slave_0 added [ 526.843784][ T7823] team0: Port device team_slave_1 added [ 526.998646][ T7823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.033235][ T7823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.763122][ T4293] Bluetooth: hci5: command 0x0c1a tx timeout [ 527.769189][ T7703] Bluetooth: hci3: command 0x0c1a tx timeout [ 527.769226][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 527.843243][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 527.849385][ T4295] Bluetooth: hci0: command 0x0c1a tx timeout [ 527.864237][ T7823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.877322][ T7823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.884552][ T7823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.885160][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.718'. [ 527.910729][ T7823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.948108][ T7823] device hsr_slave_0 entered promiscuous mode [ 528.009752][ T7823] device hsr_slave_1 entered promiscuous mode [ 528.016816][ T7823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.025417][ T7823] Cannot create hsr debugfs directory [ 529.843400][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 529.843433][ T4295] Bluetooth: hci5: command 0x0406 tx timeout [ 529.854026][ T4293] Bluetooth: hci1: command 0x0406 tx timeout [ 529.923170][ T4295] Bluetooth: hci2: command 0x0406 tx timeout [ 529.929283][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 531.134792][ T4293] Bluetooth: hci4: command 0xfc11 tx timeout [ 531.144158][ T4282] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 531.256650][ T7950] MTD: Couldn't look up './dev/mtdblock0': -2 [ 531.323861][ T7956] bridge0: port 3(erspan0) entered blocking state [ 531.330428][ T7956] bridge0: port 3(erspan0) entered disabled state [ 531.338312][ T7956] device erspan0 entered promiscuous mode [ 531.344638][ T7956] bridge0: port 3(erspan0) entered blocking state [ 531.351118][ T7956] bridge0: port 3(erspan0) entered forwarding state [ 531.360677][ T7956] device erspan0 left promiscuous mode [ 531.367806][ T7956] bridge0: port 3(erspan0) entered disabled state [ 532.081748][ T7823] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 533.176815][ T7962] overlayfs: overlapping lowerdir path [ 533.209145][ T7823] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 533.268513][ T7823] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 533.288179][ T7823] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 533.835404][ T7975] loop6: detected capacity change from 0 to 128 [ 536.413884][ T7984] sctp: failed to load transform for md5: -2 [ 537.741028][ T7823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.806189][ T7823] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.684615][ T26] audit: type=1326 audit(1786979594.238:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.5.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3ab9e0d9 code=0x7ffc0000 [ 538.730296][ T26] audit: type=1326 audit(1786979594.288:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.5.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3ab9e0d9 code=0x7ffc0000 [ 538.770242][ T26] audit: type=1326 audit(1786979594.328:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.5.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fad3ab9e0d9 code=0x7ffc0000 [ 538.802429][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 538.811625][ T26] audit: type=1326 audit(1786979594.328:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.5.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3ab9e0d9 code=0x7ffc0000 [ 538.835539][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 538.841497][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 538.859648][ T26] audit: type=1326 audit(1786979594.328:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.5.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3ab9e0d9 code=0x7ffc0000 [ 538.887362][ T26] audit: type=1326 audit(1786979594.358:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.5.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fad3ab9e0d9 code=0x7ffc0000 [ 538.897497][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 538.912289][ T26] audit: type=1326 audit(1786979594.358:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.5.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3ab9e0d9 code=0x7ffc0000 [ 539.105320][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.112510][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.764227][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 539.769031][ T26] audit: type=1326 audit(1786979594.358:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.5.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3ab9e0d9 code=0x7ffc0000 [ 539.794593][ T26] audit: type=1326 audit(1786979594.418:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.5.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fad3ab9e0d9 code=0x7ffc0000 [ 539.850338][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 539.872415][ T26] audit: type=1326 audit(1786979594.418:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.5.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3ab9e0d9 code=0x7ffc0000 [ 539.874926][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 539.907796][ T8026] overlayfs: failed to clone upperpath [ 540.007811][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.015024][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.076237][ T8017] tipc: Started in network mode [ 540.081516][ T8017] tipc: Node identity 4, cluster identity 4711 [ 540.087970][ T8017] tipc: Node number set to 4 [ 540.149218][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 540.185061][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 540.194368][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 540.217779][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 540.244570][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 540.269043][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 541.155267][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 541.388095][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.260334][ T4293] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 542.268229][ T4282] Bluetooth: hci4: command 0xfc11 tx timeout [ 543.292228][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.410170][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.467484][ T7823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.521616][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.307895][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 544.316952][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.691079][ T8062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.742'. [ 546.781278][ T8078] sctp: failed to load transform for md5: -4 [ 546.788737][ T8074] sctp: failed to load transform for md5: -4 [ 546.799315][ T8070] sctp: failed to load transform for md5: -2 [ 547.359357][ T8100] loop5: detected capacity change from 0 to 512 [ 547.610605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 547.627880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 547.686498][ T7823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.695650][ T7978] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 548.035689][ T8108] binder_alloc: binder_alloc_mmap_handler: 8099 200000ffe000-200001000000 already mapped failed -16 [ 552.286617][ T8148] loop3: detected capacity change from 0 to 512 [ 552.966353][ T8148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 552.975435][ T8148] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 553.246534][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.286386][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 553.306172][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.389184][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.558181][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 555.373715][ T4282] Bluetooth: hci4: command 0xfc11 tx timeout [ 555.375263][ T4293] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 556.586926][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.761'. [ 556.934205][ T8176] loop6: detected capacity change from 0 to 2048 [ 556.968233][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.067895][ T7823] device veth0_vlan entered promiscuous mode [ 557.077380][ T8176] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 557.080535][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 558.657958][ T8187] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 558.674757][ T8187] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 558.687215][ T8187] EXT4-fs (loop6): This should not happen!! Data will be lost [ 558.687215][ T8187] [ 558.698097][ T8187] EXT4-fs (loop6): Total free blocks count 0 [ 558.704108][ T8187] EXT4-fs (loop6): Free/Dirty block details [ 558.710032][ T8187] EXT4-fs (loop6): free_blocks=2415919104 [ 558.715772][ T8187] EXT4-fs (loop6): dirty_blocks=38736 [ 558.721145][ T8187] EXT4-fs (loop6): Block reservation details [ 558.727118][ T8187] EXT4-fs (loop6): i_reserved_data_blocks=2421 [ 558.807897][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 559.014608][ T8197] futex_wake_op: syz.5.768 tries to shift op by 144; fix this program [ 559.088272][ T8197] loop5: detected capacity change from 0 to 256 [ 560.038950][ T8197] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 560.057989][ T9] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2048 with error 28 [ 560.091954][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 560.099462][ T26] audit: type=1800 audit(1786979615.648:31): pid=8194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.768" name="file1" dev="loop5" ino=1048694 res=0 errno=0 [ 560.127987][ T8194] syz.5.768: attempt to access beyond end of device [ 560.127987][ T8194] loop5: rw=0, sector=184, nr_sectors = 120 limit=256 [ 560.155280][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.175292][ T8194] syz.5.768: attempt to access beyond end of device [ 560.175292][ T8194] loop5: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 560.190243][ T8194] syz.5.768: attempt to access beyond end of device [ 560.190243][ T8194] loop5: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 560.204533][ T8194] syz.5.768: attempt to access beyond end of device [ 560.204533][ T8194] loop5: rw=0, sector=664, nr_sectors = 8 limit=256 [ 560.217898][ T8194] syz.5.768: attempt to access beyond end of device [ 560.217898][ T8194] loop5: rw=0, sector=664, nr_sectors = 8 limit=256 [ 560.231057][ T8194] syz.5.768: attempt to access beyond end of device [ 560.231057][ T8194] loop5: rw=0, sector=664, nr_sectors = 8 limit=256 [ 560.244207][ T8194] syz.5.768: attempt to access beyond end of device [ 560.244207][ T8194] loop5: rw=0, sector=664, nr_sectors = 8 limit=256 [ 560.257413][ T8194] syz.5.768: attempt to access beyond end of device [ 560.257413][ T8194] loop5: rw=0, sector=664, nr_sectors = 8 limit=256 [ 560.270562][ T8194] syz.5.768: attempt to access beyond end of device [ 560.270562][ T8194] loop5: rw=0, sector=664, nr_sectors = 8 limit=256 [ 560.283689][ T8194] syz.5.768: attempt to access beyond end of device [ 560.283689][ T8194] loop5: rw=0, sector=664, nr_sectors = 8 limit=256 [ 561.913388][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 561.985791][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 562.083856][ T4282] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 562.099331][ T7823] device veth1_vlan entered promiscuous mode [ 562.480809][ T9] EXT4-fs: 7 callbacks suppressed [ 562.480825][ T9] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2054 with max blocks 2048 with error 28 [ 562.503124][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 562.518913][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 562.523523][ T9] EXT4-fs (loop6): This should not happen!! Data will be lost [ 562.523523][ T9] [ 562.539112][ T9] EXT4-fs (loop6): Total free blocks count 0 [ 562.545880][ T9] EXT4-fs (loop6): Free/Dirty block details [ 562.553236][ T9] EXT4-fs (loop6): free_blocks=2415919104 [ 562.558977][ T9] EXT4-fs (loop6): dirty_blocks=36688 [ 562.564994][ T9] EXT4-fs (loop6): Block reservation details [ 562.571481][ T7823] device veth0_macvtap entered promiscuous mode [ 562.575161][ T9] EXT4-fs (loop6): i_reserved_data_blocks=2293 [ 562.641704][ T7823] device veth1_macvtap entered promiscuous mode [ 562.732542][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.757215][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.769402][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.784260][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.798881][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.811762][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.827742][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.848985][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.859320][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.876590][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.889433][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.962140][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 562.994004][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 563.007839][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 563.039855][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 563.054423][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.060784][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.204826][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.241737][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.836747][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.007370][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.117951][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.210588][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.220537][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.235507][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.246299][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.257207][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.404769][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.671297][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 564.695870][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 564.729465][ T7823] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.757913][ T7823] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.789060][ T7823] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.810661][ T7823] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.360970][ T8241] random: crng reseeded on system resumption [ 566.388604][ T6996] EXT4-fs (loop6): unmounting filesystem. [ 566.897106][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.779'. [ 567.664396][ T8259] loop6: detected capacity change from 0 to 1024 [ 567.701957][ T4293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 567.732922][ T4293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 567.743299][ T4293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 567.753387][ T4293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 567.763399][ T4293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 567.771001][ T4293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 569.843333][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 571.933287][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 572.055283][ T4295] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 572.866370][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.792'. [ 573.015274][ T8317] loop6: detected capacity change from 0 to 512 [ 573.091919][ T8317] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 573.141451][ T8317] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.058956][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 574.207121][ T8261] chnl_net:caif_netlink_parms(): no params data found [ 574.738668][ T57] device hsr_slave_0 left promiscuous mode [ 574.750516][ T57] device hsr_slave_1 left promiscuous mode [ 574.874812][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.902801][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.503162][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.510630][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.677587][ T57] device bridge_slave_1 left promiscuous mode [ 575.690783][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.835626][ T57] device bridge_slave_0 left promiscuous mode [ 575.989329][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.084572][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 576.496082][ T57] device veth1_macvtap left promiscuous mode [ 576.507416][ T57] device veth0_macvtap left promiscuous mode [ 576.519306][ T57] device veth1_vlan left promiscuous mode [ 576.526617][ T57] device veth0_vlan left promiscuous mode [ 577.727425][ T57] team0 (unregistering): Port device team_slave_1 removed [ 577.781331][ T57] team0 (unregistering): Port device team_slave_0 removed [ 577.833187][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.881798][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.264829][ T57] bond0 (unregistering): Released all slaves [ 578.558301][ T8365] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 578.566540][ T8365] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 578.574983][ T8365] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 578.760607][ T6996] EXT4-fs (loop6): unmounting filesystem. [ 580.403108][ T4295] Bluetooth: hci2: command 0xfc11 tx timeout [ 580.412328][ T4282] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 580.700646][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.806'. [ 581.397521][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.489053][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.497311][ T8261] device bridge_slave_0 entered promiscuous mode [ 581.507031][ T8261] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.514220][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.521904][ T8261] device bridge_slave_1 entered promiscuous mode [ 581.538888][ T8261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.549804][ T8261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.570914][ T8261] team0: Port device team_slave_0 added [ 581.578766][ T8261] team0: Port device team_slave_1 added [ 581.593430][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.600418][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.626696][ T8261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.662537][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.762714][ T8401] futex_wake_op: syz.4.809 tries to shift op by 144; fix this program [ 582.847440][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.167339][ T8261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.649324][ T8261] device hsr_slave_0 entered promiscuous mode [ 583.660640][ T8418] syz.5.812 uses obsolete (PF_INET,SOCK_PACKET) [ 585.383384][ T4295] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 586.285658][ T8261] device hsr_slave_1 entered promiscuous mode [ 586.333231][ T8261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.351264][ T8261] Cannot create hsr debugfs directory [ 586.743712][ T8440] tmpfs: Unknown parameter 'usrquota' [ 590.640070][ T4332] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.652220][ T4282] Bluetooth: hci2: command 0xfc11 tx timeout [ 590.660102][ T4295] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 591.763369][ T8474] overlayfs: failed to clone lowerpath [ 592.620396][ T4332] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.128126][ T4332] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.627994][ T4332] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.485749][ T4282] Bluetooth: hci2: command 0xfc11 tx timeout [ 595.485840][ T4295] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 598.240448][ T26] audit: type=1800 audit(1786979653.798:32): pid=8522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.832" name="c_srate" dev="configfs" ino=50452 res=0 errno=0 [ 598.565871][ T4282] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 600.563310][ T4295] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 601.275213][ T8261] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 601.611682][ T8261] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 601.659140][ T8261] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 601.730427][ T8261] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 602.060401][ T8563] netlink: 152 bytes leftover after parsing attributes in process `syz.5.840'. [ 602.390006][ T8573] overlayfs: failed to clone upperpath [ 603.705963][ T8580] syz.4.844 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 603.723040][ T8575] lo speed is unknown, defaulting to 1000 [ 603.834334][ T8575] lo speed is unknown, defaulting to 1000 [ 603.840329][ T8575] lo speed is unknown, defaulting to 1000 [ 605.519497][ T8575] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 605.595140][ T4332] device hsr_slave_0 left promiscuous mode [ 605.744289][ T4332] device hsr_slave_1 left promiscuous mode [ 605.771071][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.784935][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.802265][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.837801][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.852668][ T4332] device bridge_slave_1 left promiscuous mode [ 605.859461][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.879328][ T4332] device bridge_slave_0 left promiscuous mode [ 605.887916][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.992578][ T4332] device veth1_macvtap left promiscuous mode [ 606.016869][ T4332] device veth0_macvtap left promiscuous mode [ 606.079384][ T4396] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 606.099922][ T4332] device veth1_vlan left promiscuous mode [ 606.116586][ T4332] device veth0_vlan left promiscuous mode [ 606.431581][ T4396] usb 4-1: Using ep0 maxpacket: 32 [ 606.440267][ T4396] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.463758][ T4396] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 606.472786][ T4396] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 606.490185][ T4396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.532538][ T4396] usb 4-1: config 0 descriptor?? [ 606.758020][ T7540] usb 4-1: USB disconnect, device number 4 [ 607.407774][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 607.461014][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 607.528307][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.666715][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.424603][ T4332] bond0 (unregistering): Released all slaves [ 608.534802][ T8575] lo speed is unknown, defaulting to 1000 [ 608.541372][ T8575] lo speed is unknown, defaulting to 1000 [ 608.742013][ T8261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.750266][ T8575] lo speed is unknown, defaulting to 1000 [ 608.757192][ T8575] lo speed is unknown, defaulting to 1000 [ 608.774068][ T8575] lo speed is unknown, defaulting to 1000 [ 608.880601][ T8261] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.923751][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 608.937510][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.004342][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 609.024572][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.111012][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.118240][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.790685][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 609.800677][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 609.809235][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.816368][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.824941][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 609.850006][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 609.875126][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 610.950023][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.021333][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.061217][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 612.631414][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.822271][ T4295] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 613.824259][ T4282] Bluetooth: hci2: command 0xfc11 tx timeout [ 613.889247][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 614.054132][ T8261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 614.067490][ T8261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.081518][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 614.092880][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 614.262859][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 614.304580][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 614.324718][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 614.824142][ T8699] netlink: 44 bytes leftover after parsing attributes in process `syz.4.866'. [ 614.833134][ T8699] netlink: 84 bytes leftover after parsing attributes in process `syz.4.866'. [ 616.003195][ T4295] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 616.036482][ T4293] Bluetooth: hci6: command 0xfc11 tx timeout [ 616.622916][ T4282] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 616.630762][ T7703] Bluetooth: hci2: command 0xfc11 tx timeout [ 616.697560][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 616.712225][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 617.516634][ T8261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.573608][ T7703] Bluetooth: hci2: command 0xfc11 tx timeout [ 620.574793][ T4282] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 624.182300][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 624.194446][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 624.250056][ T8769] 9pnet_fd: Insufficient options for proto=fd [ 624.485611][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.492017][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.893708][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 624.938462][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 624.954454][ T8261] device veth0_vlan entered promiscuous mode [ 624.962488][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 624.973324][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 624.989764][ T8261] device veth1_vlan entered promiscuous mode [ 625.020751][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 625.050891][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 625.065975][ T8261] device veth0_macvtap entered promiscuous mode [ 625.127693][ T8261] device veth1_macvtap entered promiscuous mode [ 625.206885][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.083242][ T7703] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 626.093432][ T4282] Bluetooth: hci2: command 0xfc11 tx timeout [ 626.150903][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.161376][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.176232][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.188582][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.203465][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.222791][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.239129][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.252552][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.381752][ T8778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.419155][ T8778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.456376][ T8778] bond0 (unregistering): Released all slaves [ 626.471969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 626.488585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.530620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 626.552076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 626.936896][ T8789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.885'. [ 626.964130][ T8789] loop3: detected capacity change from 0 to 164 [ 628.406019][ T7703] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 628.406067][ T4282] Bluetooth: hci2: command 0xfc11 tx timeout [ 628.697082][ T8803] block device autoloading is deprecated and will be removed. [ 628.757984][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 628.775165][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 628.785008][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 628.796243][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 628.807573][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 628.815474][ T4295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 629.210762][ T8799] lo speed is unknown, defaulting to 1000 [ 629.776931][ T8811] input: syz1 as /devices/virtual/input/input11 [ 631.423252][ T7703] Bluetooth: hci2: command 0x0409 tx timeout [ 631.755803][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 633.566713][ T8840] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 633.577349][ T8840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.580181][ T4295] Bluetooth: hci2: command 0x041b tx timeout [ 633.650693][ T8799] chnl_net:caif_netlink_parms(): no params data found [ 634.507895][ T4295] Bluetooth: hci4: command 0xfc11 tx timeout [ 634.509145][ T7703] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 634.760271][ T8854] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 634.769375][ T8854] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 636.524823][ T7703] Bluetooth: hci2: command 0x040f tx timeout [ 638.578127][ T7703] Bluetooth: hci2: command 0x0419 tx timeout [ 638.625956][ T8880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.377188][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.447339][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.521775][ T8799] device bridge_slave_0 entered promiscuous mode [ 639.748696][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.761561][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.769962][ T8799] device bridge_slave_1 entered promiscuous mode [ 641.710060][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.378917][ T7511] Bluetooth: hci4: Frame reassembly failed (-84) [ 644.403087][ T7703] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 644.403216][ T4282] Bluetooth: hci4: command 0xfc11 tx timeout [ 646.265180][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.477064][ T8799] team0: Port device team_slave_0 added [ 647.354923][ T8799] team0: Port device team_slave_1 added [ 647.461940][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.503956][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.558430][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.690582][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.791739][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.898069][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.976889][ T4456] device hsr_slave_0 left promiscuous mode [ 648.001054][ T4456] device hsr_slave_1 left promiscuous mode [ 648.026518][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.117732][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.129253][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.158726][ T4456] device bridge_slave_1 left promiscuous mode [ 648.194291][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.230964][ T4456] device bridge_slave_0 left promiscuous mode [ 648.245712][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.317467][ T4456] device veth1_macvtap left promiscuous mode [ 648.342418][ T4456] device veth0_macvtap left promiscuous mode [ 648.364475][ T4456] device veth1_vlan left promiscuous mode [ 648.389537][ T4456] device veth0_vlan left promiscuous mode [ 648.483183][ T7703] Bluetooth: hci4: command 0xfc11 tx timeout [ 648.484027][ T4282] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 650.127216][ T8973] overlayfs: unrecognized mount option "/" or missing value [ 650.652253][ T4456] team0 (unregistering): Port device team_slave_1 removed [ 650.728986][ T4456] team0 (unregistering): Port device team_slave_0 removed [ 650.829082][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.936914][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.212705][ T4295] Bluetooth: hci4: sending frame failed (-49) [ 651.222320][ T4282] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 653.483184][ T4456] bond0 (unregistering): Released all slaves [ 653.662544][ T8799] device hsr_slave_0 entered promiscuous mode [ 653.711979][ T8799] device hsr_slave_1 entered promiscuous mode [ 653.741731][ T8799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.767643][ T8799] Cannot create hsr debugfs directory [ 656.083421][ T4295] Bluetooth: hci4: command 0xfc11 tx timeout [ 656.092286][ T4282] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 656.486271][ T8799] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 656.506265][ T8799] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 656.536308][ T8799] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 656.556021][ T8799] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 656.970588][ T8799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.496108][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 657.506611][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 657.733548][ T8799] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.701180][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 658.715385][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 658.749877][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.757041][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.569683][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 659.956915][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.991067][ T9034] ./file0: Can't open blockdev [ 660.041195][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.048427][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.073406][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 660.104642][ T9039] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 660.114180][ T9039] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 660.124078][ T9039] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 660.220125][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 660.276989][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 660.440357][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 661.135535][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 661.151173][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 661.168226][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 661.179161][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 661.269573][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 661.610822][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.118974][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 663.251733][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 663.389789][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.603235][ T4295] Bluetooth: hci4: command 0xfc11 tx timeout [ 663.611095][ T4282] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 664.015195][ T9082] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 664.023492][ T9082] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 664.031906][ T9082] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 666.471475][ T4282] Bluetooth: hci3: Malformed Event: 0x2f [ 667.444548][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 667.452100][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.470818][ T26] audit: type=1326 audit(1786979723.028:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.5.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3ab9e0d9 code=0x0 [ 667.515936][ T8799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.605322][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.952'. [ 669.832644][ T4282] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 669.840579][ T4295] Bluetooth: hci4: command 0xfc11 tx timeout [ 671.501960][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 671.524470][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 671.544111][ T4295] Bluetooth: hci4: sending frame failed (-49) [ 671.551964][ T4282] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 671.607489][ T8799] device veth0_vlan entered promiscuous mode [ 673.143355][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.217185][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.368541][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 674.187372][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 674.204597][ T8799] device veth1_vlan entered promiscuous mode [ 674.415368][ T8799] device veth0_macvtap entered promiscuous mode [ 674.422575][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.511962][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 675.465372][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 675.858539][ T8799] device veth1_macvtap entered promiscuous mode [ 675.885593][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.896643][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.906845][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.923120][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.933147][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.963563][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.000114][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.105598][ T26] audit: type=1326 audit(1786979731.668:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.3.968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f813ed9e0d9 code=0x0 [ 676.883270][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.894564][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.924988][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 677.046669][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 677.075617][ T4282] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 677.724494][ T9199] loop5: detected capacity change from 0 to 256 [ 677.920972][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.078485][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.088716][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.099351][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.109314][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.119822][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.133144][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.165222][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.206225][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.256138][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 678.302945][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 678.325949][ T8799] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.377338][ T8799] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.408393][ T8799] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.438651][ T8799] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.727245][ T4323] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 678.946549][ T4323] usb 1-1: Dual-Role OTG device on HNP port [ 678.953692][ T4323] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 679.000080][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.195072][ T4323] gspca_main: spca501-2.14.0 probing 0000:0000 [ 679.211001][ T4323] gspca_spca501: reg write: error -32 [ 679.269841][ T4323] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 679.277270][ T4323] spca501: probe of 1-1:1.0 failed with error -22 [ 683.341500][ T9238] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.423999][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.431882][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.555698][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.563160][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 683.604963][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.828002][ T9252] loop3: detected capacity change from 0 to 128 [ 684.833788][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 686.976305][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.982872][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.332454][ T9264] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 689.855439][ T9273] Bluetooth: MGMT ver 1.22 [ 690.953950][ T4295] Bluetooth: hci4: sending frame failed (-49) [ 690.962425][ T4282] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 691.122447][ T7703] Bluetooth: hci3: unexpected event for opcode 0x200c [ 693.203202][ T7703] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 694.526723][ T9296] loop6: detected capacity change from 0 to 2048 [ 694.688912][ T9296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 697.334838][ T9335] ima: Unable to open file: /e (-2) [ 698.059607][ T9324] ima: policy update failed [ 698.069883][ T26] audit: type=1802 audit(1786979753.628:35): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.992" res=0 errno=0 [ 699.347242][ T9343] loop7: detected capacity change from 0 to 512 [ 699.454721][ T9343] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 699.505878][ T9343] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 699.515261][ T9343] System zones: 0-1, 15-15, 18-18, 34-34 [ 699.522121][ T9343] EXT4-fs (loop7): orphan cleanup on readonly fs [ 699.528942][ T9343] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 699.538978][ T9343] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 699.564687][ T9343] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 699.591541][ T9343] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.996: bad orphan inode 16 [ 699.617492][ T9343] ext4_test_bit(bit=15, block=18) = 1 [ 699.622951][ T9343] is_bad_inode(inode)=0 [ 699.629577][ T9343] NEXT_ORPHAN(inode)=0 [ 699.644802][ T9343] max_ino=32 [ 699.659279][ T9343] i_nlink=2 [ 699.674979][ T9343] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 700.652454][ T9357] batman_adv: batadv0: Adding interface: dummy0 [ 700.659371][ T9357] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.686181][ T9357] batman_adv: batadv0: Interface activated: dummy0 [ 700.709249][ T9357] batadv0: mtu less than device minimum [ 700.716838][ T9357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 700.729726][ T9357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 700.741968][ T9357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 700.754198][ T9357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 700.766375][ T9357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 700.778554][ T9357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 700.790763][ T9357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 700.802940][ T9357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 700.815140][ T9357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 700.981827][ T9362] fscrypt (loop7, inode 16): Error -61 getting encryption context [ 701.257234][ T8799] EXT4-fs (loop7): unmounting filesystem. [ 702.884660][ T4295] Bluetooth: hci4: command 0xfc11 tx timeout [ 702.893673][ T7703] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 705.851597][ T9374] netlink: 1335 bytes leftover after parsing attributes in process `syz.4.1006'. [ 711.818952][ T128] libceph: connect (1)[c::]:6789 error -101 [ 711.848548][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 712.050796][ T9403] ceph: No mds server is up or the cluster is laggy [ 712.768506][ T9433] input: syz1 as /devices/virtual/input/input13 [ 713.288093][ T9432] syz.7.1011 (9432): drop_caches: 2 [ 714.733566][ T4295] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 714.741425][ T7703] Bluetooth: hci4: command 0xfc11 tx timeout [ 724.070012][ T9490] --map-set only usable from mangle table [ 727.273621][ T9511] Mass Storage Function, version: 2009/09/11 [ 727.280372][ T9511] LUN: removable file: (no medium) [ 727.301030][ T26] audit: type=1800 audit(1786979782.858:36): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1023" name="file" dev="configfs" ino=53887 res=0 errno=0 [ 727.381867][ T9513] 9pnet_virtio: no channels available for device syz [ 727.597709][ T4395] Bluetooth: hci4: Frame reassembly failed (-84) [ 729.603084][ T4295] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 729.603117][ T7703] Bluetooth: hci4: command 0xfc11 tx timeout [ 730.245272][ T9522] autofs4:pid:9522:autofs_fill_super: called with bogus options [ 733.254031][ T9542] No such timeout policy "syz1" [ 734.292435][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1038'. [ 734.550545][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1038'. [ 734.653251][ T9544] net_ratelimit: 10 callbacks suppressed [ 734.653343][ T9544] openvswitch: netlink: Flow key attr not present in new flow. [ 735.300448][ T9544] netlink: 'syz.7.1038': attribute type 1 has an invalid length. [ 735.371526][ T9558] Cannot find del_set index 4 as target [ 735.446040][ T9559] overlayfs: conflicting options: nfs_export=on,index=off [ 737.136772][ T130] Process accounting resumed [ 737.161396][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1043'. [ 738.945780][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1046'. [ 739.283134][ T7703] Bluetooth: hci4: command 0xfc11 tx timeout [ 739.283167][ T4295] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 742.762876][ T9598] loop7: detected capacity change from 0 to 16384 [ 743.215603][ T9607] loop7: detected capacity change from 16384 to 0 [ 745.363141][ T7703] Bluetooth: hci4: command 0xfc11 tx timeout [ 745.363618][ T4295] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 746.219598][ T9619] overlayfs: failed to resolve './bus': -2 [ 747.138105][ T7511] Bluetooth: hci4: Frame reassembly failed (-84) [ 747.365835][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.372183][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.816400][ T9601] ------------[ cut here ]------------ [ 747.821944][ T9601] memcpy: detected field-spanning write (size 128) of single field "&entry->caller" at kernel/trace/trace.c:3091 (size 64) [ 747.835083][ T9601] WARNING: CPU: 1 PID: 9601 at kernel/trace/trace.c:3091 __ftrace_trace_stack+0x3ce/0x530 [ 747.845235][ T9601] Modules linked in: [ 747.849156][ T9601] CPU: 1 PID: 9601 Comm: syz.3.1054 Not tainted syzkaller #0 [ 747.856657][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.866772][ T9601] RIP: 0010:__ftrace_trace_stack+0x3ce/0x530 [ 747.872818][ T9601] Code: fe ff ff e8 d4 4f fc ff c6 05 2a c1 86 0c 01 b9 40 00 00 00 48 c7 c7 60 7a 90 8a 4c 89 ee 48 c7 c2 00 92 90 8a e8 02 da c7 ff <0f> 0b e9 25 fe ff ff e8 a6 4f fc ff 48 8b 3c 24 4c 89 f6 e8 5a 88 [ 747.892516][ T9601] RSP: 0018:ffffc90005f678b8 EFLAGS: 00010246 [ 747.898676][ T9601] RAX: 0872d5029861fd00 RBX: ffff8880177ff028 RCX: ffff88802ce41e00 [ 747.906656][ T9601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 747.914636][ T9601] RBP: ffff8880177ff018 R08: ffffc90005f67547 R09: 1ffff92000becea8 [ 747.922595][ T9601] R10: dffffc0000000000 R11: fffff52000becea9 R12: ffff8880b8f2b5e0 [ 747.930580][ T9601] R13: 0000000000000080 R14: ffff8880177ff010 R15: 0000000000002581 [ 747.938593][ T9601] FS: 000055556f490500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 747.947545][ T9601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.954155][ T9601] CR2: 00007f3841d556c8 CR3: 0000000024270000 CR4: 00000000003526e0 [ 747.962143][ T9601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 747.970133][ T9601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 747.978131][ T9601] Call Trace: [ 747.981468][ T9601] [ 747.984510][ T9601] stacktrace_trigger+0xf0/0x140 [ 747.989528][ T9601] ? stacktrace_trigger_print+0xe0/0xe0 [ 747.995098][ T9601] ? trace_event_buffer_commit+0x236/0x780 [ 748.000896][ T9601] event_triggers_post_call+0xfd/0x180 [ 748.006379][ T9601] trace_event_raw_event_kvm_hv_stimer_cleanup+0x14b/0x220 [ 748.013658][ T9601] ? perf_trace_kvm_hv_stimer_expiration+0x3b0/0x3b0 [ 748.020328][ T9601] ? __timer_delete_sync+0x239/0x2e0 [ 748.025690][ T9601] ? timer_delete_sync+0x20/0x20 [ 748.030616][ T9601] stimer_cleanup+0x3a7/0x430 [ 748.035377][ T9601] kvm_hv_vcpu_uninit+0x4f/0xa0 [ 748.040236][ T9601] kvm_arch_vcpu_destroy+0xba/0x270 [ 748.045536][ T9601] kvm_destroy_vcpus+0xdd/0x250 [ 748.050428][ T9601] ? kvm_mmu_memory_cache_alloc+0x100/0x100 [ 748.056335][ T9601] ? kvm_arch_destroy_vm+0x312/0x410 [ 748.061611][ T9601] ? __kmem_cache_free+0xb6/0x200 [ 748.066671][ T9601] kvm_arch_destroy_vm+0x31a/0x410 [ 748.071773][ T9601] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 748.077327][ T9601] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 748.082880][ T9601] ? synchronize_srcu+0x18f/0x1b0 [ 748.088024][ T9601] ? mmu_notifier_unregister+0x302/0x390 [ 748.093721][ T9601] ? mmu_notifier_unregister+0xad/0x390 [ 748.099259][ T9601] kvm_put_kvm+0xdbb/0x1a10 [ 748.103799][ T9601] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 748.109065][ T9601] kvm_vm_release+0x42/0x50 [ 748.113571][ T9601] __fput+0x20a/0x8b0 [ 748.117621][ T9601] task_work_run+0x1d0/0x260 [ 748.122307][ T9601] ? task_work_cancel+0x220/0x220 [ 748.127395][ T9601] ? __close_range+0x20c/0x770 [ 748.132186][ T9601] ? exit_to_user_mode_loop+0x3b/0x110 [ 748.137722][ T9601] exit_to_user_mode_loop+0xe6/0x110 [ 748.143053][ T9601] exit_to_user_mode_prepare+0xee/0x180 [ 748.148601][ T9601] syscall_exit_to_user_mode+0x16/0x40 [ 748.154109][ T9601] do_syscall_64+0x58/0xa0 [ 748.158655][ T9601] ? clear_bhb_loop+0x60/0xb0 [ 748.163475][ T9601] ? clear_bhb_loop+0x60/0xb0 [ 748.168154][ T9601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.174058][ T9601] RIP: 0033:0x7f813ed9e0d9 [ 748.178471][ T9601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.198111][ T9601] RSP: 002b:00007ffd7c8d1d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 748.206554][ T9601] RAX: 0000000000000000 RBX: 00007f813f027da0 RCX: 00007f813ed9e0d9 [ 748.214534][ T9601] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 748.222510][ T9601] RBP: 00007f813f027da0 R08: 0000000000000006 R09: 0000000000000000 [ 748.230504][ T9601] R10: 00007f813f027cb0 R11: 0000000000000246 R12: 00000000000b66c2 [ 748.238518][ T9601] R13: 00007f813f02636c R14: 00000000000b6675 R15: 00007f813f026360 [ 748.246528][ T9601] [ 748.249547][ T9601] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 748.256808][ T9601] CPU: 1 PID: 9601 Comm: syz.3.1054 Not tainted syzkaller #0 [ 748.264181][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.274219][ T9601] Call Trace: [ 748.277482][ T9601] [ 748.280394][ T9601] dump_stack_lvl+0x188/0x24e [ 748.285062][ T9601] ? memcpy+0x3c/0x60 [ 748.289097][ T9601] ? show_regs_print_info+0x12/0x12 [ 748.294283][ T9601] ? load_image+0x410/0x410 [ 748.298791][ T9601] panic+0x2d3/0x710 [ 748.302670][ T9601] ? bpf_jit_dump+0xd0/0xd0 [ 748.307182][ T9601] __warn+0x2f8/0x4f0 [ 748.311144][ T9601] ? __ftrace_trace_stack+0x3ce/0x530 [ 748.316505][ T9601] ? __ftrace_trace_stack+0x3ce/0x530 [ 748.321868][ T9601] report_bug+0x2ba/0x4f0 [ 748.326213][ T9601] ? __ftrace_trace_stack+0x3ce/0x530 [ 748.331567][ T9601] handle_bug+0x3a/0x70 [ 748.335711][ T9601] exc_invalid_op+0x16/0x40 [ 748.340240][ T9601] asm_exc_invalid_op+0x16/0x20 [ 748.345090][ T9601] RIP: 0010:__ftrace_trace_stack+0x3ce/0x530 [ 748.351062][ T9601] Code: fe ff ff e8 d4 4f fc ff c6 05 2a c1 86 0c 01 b9 40 00 00 00 48 c7 c7 60 7a 90 8a 4c 89 ee 48 c7 c2 00 92 90 8a e8 02 da c7 ff <0f> 0b e9 25 fe ff ff e8 a6 4f fc ff 48 8b 3c 24 4c 89 f6 e8 5a 88 [ 748.370671][ T9601] RSP: 0018:ffffc90005f678b8 EFLAGS: 00010246 [ 748.376743][ T9601] RAX: 0872d5029861fd00 RBX: ffff8880177ff028 RCX: ffff88802ce41e00 [ 748.384714][ T9601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 748.392689][ T9601] RBP: ffff8880177ff018 R08: ffffc90005f67547 R09: 1ffff92000becea8 [ 748.400650][ T9601] R10: dffffc0000000000 R11: fffff52000becea9 R12: ffff8880b8f2b5e0 [ 748.408608][ T9601] R13: 0000000000000080 R14: ffff8880177ff010 R15: 0000000000002581 [ 748.416575][ T9601] ? __ftrace_trace_stack+0x3ce/0x530 [ 748.421934][ T9601] stacktrace_trigger+0xf0/0x140 [ 748.426857][ T9601] ? stacktrace_trigger_print+0xe0/0xe0 [ 748.432423][ T9601] ? trace_event_buffer_commit+0x236/0x780 [ 748.438218][ T9601] event_triggers_post_call+0xfd/0x180 [ 748.443677][ T9601] trace_event_raw_event_kvm_hv_stimer_cleanup+0x14b/0x220 [ 748.450864][ T9601] ? perf_trace_kvm_hv_stimer_expiration+0x3b0/0x3b0 [ 748.457542][ T9601] ? __timer_delete_sync+0x239/0x2e0 [ 748.462840][ T9601] ? timer_delete_sync+0x20/0x20 [ 748.467803][ T9601] stimer_cleanup+0x3a7/0x430 [ 748.472505][ T9601] kvm_hv_vcpu_uninit+0x4f/0xa0 [ 748.477367][ T9601] kvm_arch_vcpu_destroy+0xba/0x270 [ 748.482567][ T9601] kvm_destroy_vcpus+0xdd/0x250 [ 748.487412][ T9601] ? kvm_mmu_memory_cache_alloc+0x100/0x100 [ 748.493298][ T9601] ? kvm_arch_destroy_vm+0x312/0x410 [ 748.498571][ T9601] ? __kmem_cache_free+0xb6/0x200 [ 748.503602][ T9601] kvm_arch_destroy_vm+0x31a/0x410 [ 748.508728][ T9601] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 748.514275][ T9601] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 748.519746][ T9601] ? synchronize_srcu+0x18f/0x1b0 [ 748.524766][ T9601] ? mmu_notifier_unregister+0x302/0x390 [ 748.530391][ T9601] ? mmu_notifier_unregister+0xad/0x390 [ 748.535930][ T9601] kvm_put_kvm+0xdbb/0x1a10 [ 748.540438][ T9601] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 748.545720][ T9601] kvm_vm_release+0x42/0x50 [ 748.550215][ T9601] __fput+0x20a/0x8b0 [ 748.554190][ T9601] task_work_run+0x1d0/0x260 [ 748.558785][ T9601] ? task_work_cancel+0x220/0x220 [ 748.563800][ T9601] ? __close_range+0x20c/0x770 [ 748.568564][ T9601] ? exit_to_user_mode_loop+0x3b/0x110 [ 748.574038][ T9601] exit_to_user_mode_loop+0xe6/0x110 [ 748.579318][ T9601] exit_to_user_mode_prepare+0xee/0x180 [ 748.584856][ T9601] syscall_exit_to_user_mode+0x16/0x40 [ 748.590301][ T9601] do_syscall_64+0x58/0xa0 [ 748.594713][ T9601] ? clear_bhb_loop+0x60/0xb0 [ 748.599382][ T9601] ? clear_bhb_loop+0x60/0xb0 [ 748.604053][ T9601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.609935][ T9601] RIP: 0033:0x7f813ed9e0d9 [ 748.614339][ T9601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.633932][ T9601] RSP: 002b:00007ffd7c8d1d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 748.642333][ T9601] RAX: 0000000000000000 RBX: 00007f813f027da0 RCX: 00007f813ed9e0d9 [ 748.650289][ T9601] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 748.658250][ T9601] RBP: 00007f813f027da0 R08: 0000000000000006 R09: 0000000000000000 [ 748.666211][ T9601] R10: 00007f813f027cb0 R11: 0000000000000246 R12: 00000000000b66c2 [ 748.674170][ T9601] R13: 00007f813f02636c R14: 00000000000b6675 R15: 00007f813f026360 [ 748.682146][ T9601] [ 748.685435][ T9601] Kernel Offset: disabled [ 748.689769][ T9601] Rebooting in 86400 seconds..