last executing test programs: 16m14.335312909s ago: executing program 1 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x9, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 16m13.071447488s ago: executing program 1 (id=668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 16m12.086370692s ago: executing program 1 (id=670): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x194) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5707}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 16m11.930055384s ago: executing program 1 (id=673): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611266000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$eJzs3b9vW1sdAPDvdeImL8996YM3AAJeeRQKqur8aBtVZaBdQKiqhKiYGNqQuFEUu47ipDShQzqyI1GJCf4ENgakTgxsbLCxlAGpQAVqkBiM7vVt6iZxYl5+uLU/H+nm3nOu4+85ds85vqe5PgEMrLMRsRkRpyLibkSM5/lJvsX11pY+7uWLR3NbLx7NJdFs3v5Hkp1P86Ltd1Lv5885GhE/+G7Ej5PdcRvrG0uz1WplJU9PrNaWJxrrGxcXC3nO9MzUzOTVS1emj6yuH9d+8/w7izd/+LvffunZHze/+dO0WKWfnc7OtdfjKLWqXoxSW95wRNw8jmA9Mpz/++Hdk7a2z0TEJ1n7H4+h7N0EAPpZszkezfH2NADQ79Lr/1IkhXI+F1CKQqFcbs3hfRRjhWq9sXphvL52fz6yOawzUSzcW6xWJvO5wjNRTNL0VHb8Oj0dm2+kL0XEhxHx85H3snR5rl6d7+UHHwAYYO/vGP//PdIa/wGAPjfa6wIAACfO+A8Ag8f4DwCD5/8Y/90dCAB9wvU/AAwe4z8ADJ4Dx//HJ1MOAOBEfP/WrXRrbuXffz3/YH3tW6UHF+crjaVybW2uPFdfWS4v1OsL1Up5rtnMf63j1z1X6/Xlqcvbycb6xp1afe3+6p3F2uxC5U6leAJ1AgD29+HHT/+cRMTmtfeyLdoGd2M19LdCrwsA9MxQrwsA9Iz7eWBwdXGNbxoA+tweS/S+oeOfCD2x+Cu8q85/3vw/DKpu5//dIgT959PN/3/7yMsBnDzz/zC4ms3Emv8AMGDM8QOH+v9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGFClbEsK5Wwt8M30Z6FcjjgdEWeimNxbrFYmI+KDiPjTSHEkTU/1utAAwCEV/pbk63+dHz9X2nn2VPKfkWwfET/55e1fPJxdXV2ZSvP/uZ2/+iTPnz7ViwoAAO2u785qjdP5vu1C/uWLR3OvtpMs4vMbrcVF07hb+dY6MxzD2X40ihEx9q8kT7ekn1eGjiD+5uOI+Nzr+j9si1DK5kBaK5/ujJ/GPn0M8V+//jvjF96IX8jOpfti9lp89gjKAoPm6Y1WP5m3vbSJ5e2vEGez/d7tfzTroQ7vVf+3tav/K2z3f0O74idZmz+7nd6/JM8v//57uzKb461zjyO+MLxX/GQ7ftKh/z3XZR3/8sUvf9LpXPNXEedj7/gttaybnVitLU801jcuLtZmFyoLlfvT0zNTM5NXL12ZnsjmqFs//7BXjL9fu/BBp/hp/cc6xB89oP5f67L+v/7v3R99ZZ/43/jq3u//R/vET8fEr3cZf3bsesflu9P48x3qf9D7f6HL+M/+ujHf5UMBgBPQWN9Ymq1WKysHHKSfNQ96jIOeHEQc8nliM6LntejLg2LX7evtO+h1zwQct/ZhBAAAAAAAAAAAAAAAeDs11jeWRqLDbUClo7pBDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7H/wIAAP//L93NTg==") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 16m10.090155481s ago: executing program 1 (id=680): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) keyctl$set_timeout(0xf, r2, 0x3ff) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r2, 0xe9, 0xfc}, &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'crct10dif\x00'}}, &(0x7f00000002c0)="a0a695f88108fc206b3ea144ccd5440b2d50f12cf668608ca65c1cabe9e0cf40ae4abbac0e99fee9f05a5394e9f8a2dea503a7ead7d65589d8c95b6146b555ac22af2846c3cc90b67be244bd766fd22790df2d821a867094b97c8de57b6f223842a6f55b58306dce2a9a61e2d0d74fcfc0da95b954e4c56456a7e5c1e43b882aafa2c52a771cdd0d2d05cc26a78620fd432b7343e4f3d411cf9a5df144b6bbc6c1f76541f1c4d6984b4c66d758a09b9361cadc0c8bd6d6788c930d9c5e870f4938dbd3a242921178bd1a01a0b9c4a7b382a0dc8a58b8682a9ffc8e13981971cc31d2678430728aafec", &(0x7f00000003c0)=""/252) 16m7.858329903s ago: executing program 1 (id=688): epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 16m7.652351827s ago: executing program 32 (id=688): epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 14m43.835134137s ago: executing program 3 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xffff}}, 0xd, 0x0, 0x45, 0xc0000000, 0x50, 0x401, 0x8}, &(0x7f0000000500)=0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) 14m43.692513659s ago: executing program 3 (id=1025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x2, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 14m42.25229318s ago: executing program 3 (id=1031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000e9ffff470000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa645335000000000000000a0000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d11410500000000000000f6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000380f00000000895ddbb76122bf222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d143107006b9419c2b6353fcf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000800425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f210ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f00000000c4c2566179b9043a48da00000000003f000000cf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8ba9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba00000000000000ce4801461c36b5f430dc67f3759c367c43398cdfd550bcbb"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f00000002c0)=r4}, 0x20) 14m41.183549896s ago: executing program 3 (id=1035): timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9}}]}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 14m38.068028651s ago: executing program 3 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r3 = msgget$private(0x0, 0x500) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="01"], 0x101, 0x800) msgrcv(r3, &(0x7f0000000440)={0x0, ""/127}, 0x87, 0xb3d0531f91083479, 0x1000) 14m36.78439643s ago: executing program 3 (id=1053): syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdir(0x0, 0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x2}, 0x50) 14m21.6285391s ago: executing program 33 (id=1053): syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdir(0x0, 0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x2}, 0x50) 13m8.1775112s ago: executing program 4 (id=1336): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x432300c, 0x0, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 13m6.923988538s ago: executing program 4 (id=1339): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r0, 0xc10c3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0xd, 0x1}, 0x1, 0x6, 0x4, {0xf, 0x81}, 0x5, 0x3f2}) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000c00)='GPL\x00', 0x0) munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) 13m5.952188612s ago: executing program 4 (id=1342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee9", 0x28}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a", 0x20}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c573", 0x4b}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13m5.733073605s ago: executing program 4 (id=1345): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = dup(0xffffffffffffffff) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13m3.895003382s ago: executing program 4 (id=1348): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) socket$inet(0x2, 0xa, 0x262) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000580)={{0x3, 0x3, 0x1, 0x955, 0x955}, 0x0, 0x40c, 0x400004}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r2, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_SUBDINFO(r3, 0x80486402, 0x0) 12m59.790245072s ago: executing program 4 (id=1365): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) close(0x3) inotify_init1(0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 12m44.220581659s ago: executing program 34 (id=1365): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) close(0x3) inotify_init1(0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 8m54.985185626s ago: executing program 0 (id=1919): r0 = epoll_create(0x7) r1 = epoll_create(0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000000)={0xc000001c}) 8m53.476547329s ago: executing program 0 (id=1924): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) 8m52.926804216s ago: executing program 0 (id=1925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) 8m52.108482688s ago: executing program 0 (id=1927): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) write$sndseq(r2, &(0x7f0000000180)=[{0xce, 0xfc, 0xf, 0x3, @time={0x7, 0x6}, {0x8, 0x5}, {0x4, 0x3}, @raw8={"e80ee604aa59d4b823501d80"}}, {0x9, 0xa, 0x9, 0xa, @tick=0x2, {0x3, 0x8}, {0xd9, 0xfe}, @control={0x7, 0x7fff, 0x5}}, {0xb9, 0x4, 0x8, 0x8, @tick=0x1, {0x9, 0x3}, {0xc, 0x1}, @control={0x2, 0x401, 0xc}}, {0x3, 0xa, 0x8, 0x7, @tick=0x9, {0xd}, {0x4, 0x5}, @queue={0xef, {0x3, 0x6}}}], 0x70) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) 8m51.528094517s ago: executing program 0 (id=1932): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000d9b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa20000000000000702", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x18, 0x3, 0x0) recvmsg(r4, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x10003) syz_emit_ethernet(0x34, &(0x7f0000001200)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x6, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "5e722f5a3bc7afae27b2"}}}}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @mcast1, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) 8m50.396937153s ago: executing program 0 (id=1936): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33}, 0x28) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x5, "fa00114001000000000000000000000000000100000000000000ffff00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r5, 0x0, 0x3, 0x1}}, 0x20) 8m34.966150128s ago: executing program 35 (id=1936): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33}, 0x28) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x5, "fa00114001000000000000000000000000000100000000000000ffff00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r5, 0x0, 0x3, 0x1}}, 0x20) 14.084979424s ago: executing program 6 (id=3135): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x1f, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) unshare(0x2c020400) r2 = semget(0x1, 0x1, 0x39c) semop(r2, &(0x7f0000000000), 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) futex(0x0, 0xb, 0x1, 0x0, 0x0, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) 12.854407822s ago: executing program 6 (id=3140): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 11.939452435s ago: executing program 6 (id=3143): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x7ec, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00f6ff070000080048040034008599b894ac0efefa100000a3069078ac1414070b05e000aa004e22400124f3da2a6bff393e29c31c4c555238ff722bbfd37b25bff6c358b5e790b1f5a476f0ae3dbb9f78875920b3aafa6a5368464e710cc6a6090a9881ea17da6e008c34b49613c4fff44c66a55ff7ff747be6f6e5db3a82aead72b0800d0000004570c35af38cd960b72e030600649f90ecd39151bf5c8105602f6ee32ccb68bb261c3625a4c797b3fcb5cca92482109d880e7fb81841b29179f2421cc5cf2478793e7788869db5bb1dbcd2b532ffff483980b94dfaff0f0f42ab00"/242, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x8c4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000240)='.\x00', 0x60000526) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) 8.669177473s ago: executing program 6 (id=3154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000001c0)={r2, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x2000c004) r4 = open(0x0, 0x142442, 0x197) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r4, r5, &(0x7f0000000200)=0xba, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f00000000c0)={0xd, 0x10}) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x19, 0x1a, 0xb, 0x1b, 0x3, 0x6, 0x3, 0x9d, 0xffffffffffffffff}) 8.559213095s ago: executing program 5 (id=3157): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) io_uring_enter(0xffffffffffffffff, 0x7357, 0x9fcb, 0x1, &(0x7f0000000780)={[0x7]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) getpgid(0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x2, 0x6, 0x638, 0x448, 0x308, 0x1c0, 0x448, 0x1c0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6, 0x7ff}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 8.348559358s ago: executing program 2 (id=3158): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000f8ffffff000000000000000085000000360000001800000003000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) setfsgid(0xee01) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r1) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) kexec_load(0x3, 0x41, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0xe, 0x6, 0x200, &(0x7f0000000880)="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"}) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r4, 0x402, 0x91ea6c12f182534) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000280), 0x0, 0x0, 0x1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r5 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000280)='fd/3\x00') 7.940716993s ago: executing program 2 (id=3159): timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000540)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="57763f8b80ccb54515aa467d89bbb893a63f49cae5772efb6bb2d1d03fd1742a12e8978807c6a53aae173e5c08461b1d2594eed5030000002e74086cd91724e5631fa9733e7a1e4017c3d4264edd910e", @ANYRESDEC], 0x1, 0x105ea, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x10, r1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = creat(0x0, 0xc9a9c042ad77c5e5) write$binfmt_elf32(r4, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 7.551924329s ago: executing program 5 (id=3162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x200}, 0x1c) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 6.929091908s ago: executing program 6 (id=3163): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x7ec, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00f6ff070000080048040034008599b894ac0efefa100000a3069078ac1414070b05e000aa004e22400124f3da2a6bff393e29c31c4c555238ff722bbfd37b25bff6c358b5e790b1f5a476f0ae3dbb9f78875920b3aafa6a5368464e710cc6a6090a9881ea17da6e008c34b49613c4fff44c66a55ff7ff747be6f6e5db3a82aead72b0800d0000004570c35af38cd960b72e030600649f90ecd39151bf5c8105602f6ee32ccb68bb261c3625a4c797b3fcb5cca92482109d880e7fb81841b29179f2421cc5cf2478793e7788869db5bb1dbcd2b532ffff483980b94dfaff0f0f42ab00"/242, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x8c4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000240)='.\x00', 0x60000526) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) 5.607514538s ago: executing program 2 (id=3164): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="070000000000000000000500000018000180140002007663616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f00000003c0)='./file1/file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.292335663s ago: executing program 2 (id=3165): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x7ec, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00f6ff070000080048040034008599b894ac0efefa100000a3069078ac1414070b05e000aa004e22400124f3da2a6bff393e29c31c4c555238ff722bbfd37b25bff6c358b5e790b1f5a476f0ae3dbb9f78875920b3aafa6a5368464e710cc6a6090a9881ea17da6e008c34b49613c4fff44c66a55ff7ff747be6f6e5db3a82aead72b0800d0000004570c35af38cd960b72e030600649f90ecd39151bf5c8105602f6ee32ccb68bb261c3625a4c797b3fcb5cca92482109d880e7fb81841b29179f2421cc5cf2478793e7788869db5bb1dbcd2b532ffff483980b94dfaff0f0f42ab00"/242, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x8c4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000240)='.\x00', 0x60000526) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) 5.163947864s ago: executing program 8 (id=3167): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r6, 0x0) 5.028873786s ago: executing program 8 (id=3168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000001c0)={r2, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x2000c004) r4 = open(0x0, 0x142442, 0x197) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f00000000c0)={0xd, 0x10}) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x19, 0x1a, 0xb, 0x1b, 0x3, 0x6, 0x3, 0x9d, 0xffffffffffffffff}) 4.888369968s ago: executing program 8 (id=3169): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e782700107"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r3 = fsopen(&(0x7f0000000280)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 4.812602459s ago: executing program 7 (id=3170): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 4.562508433s ago: executing program 7 (id=3171): syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x208000, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r4, &(0x7f00000017c0)=[{{&(0x7f00000018c0)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x4004804) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 2.952462186s ago: executing program 5 (id=3172): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x25, 0x358, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './bus\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xc579, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r3, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r9, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4100}, 0x4000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 2.952293986s ago: executing program 7 (id=3173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000001c0)={r2, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x2000c004) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x0, 0x3) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(0xffffffffffffffff, r4, &(0x7f0000000200)=0xba, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f00000000c0)={0xd, 0x10}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x19, 0x1a, 0xb, 0x1b, 0x3, 0x6, 0x3, 0x9d, 0xffffffffffffffff}) 2.951696606s ago: executing program 8 (id=3182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x200}, 0x1c) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 2.898494197s ago: executing program 7 (id=3174): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000000)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@auto_da_alloc}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$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") r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x1001) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0x100, 0x339b4b1b35c57a65) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x7, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x12, 0xc, 0x17d, 0x0}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r5, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) io_submit(0x0, 0x0, 0x0) 2.00623723s ago: executing program 8 (id=3175): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="070000000000000000000500000018000180140002007663616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f00000003c0)='./file1/file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.960969341s ago: executing program 5 (id=3176): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) 1.135670963s ago: executing program 2 (id=3177): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) r5 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r8 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) sendfile(r8, r7, 0x0, 0x2000000000006) 1.117191633s ago: executing program 7 (id=3178): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r6, 0x0) 1.116006883s ago: executing program 5 (id=3179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000001c0)={r2, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x2000c004) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x0, 0x3) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f00000000c0)={0xd, 0x10}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x19, 0x1a, 0xb, 0x1b, 0x3, 0x6, 0x3, 0x9d, 0xffffffffffffffff}) 80.142179ms ago: executing program 2 (id=3180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getresgid(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000002000/0x2000)=nil) io_setup(0x7d, &(0x7f0000000600)) getgroups(0x0, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) 79.657659ms ago: executing program 8 (id=3181): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 41.815339ms ago: executing program 6 (id=3183): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e782700107"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r3 = fsopen(&(0x7f0000000280)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 41.291009ms ago: executing program 5 (id=3184): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="070000000000000000000500000018000180140002007663616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f00000003c0)='./file1/file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 7 (id=3185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000001c0)={r2, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x2000c004) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x0, 0x3) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(0xffffffffffffffff, r4, &(0x7f0000000200)=0xba, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f00000000c0)={0xd, 0x10}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x19, 0x1a, 0xb, 0x1b, 0x3, 0x6, 0x3, 0x9d, 0xffffffffffffffff}) kernel console output (not intermixed with test programs): e [ 492.511169][ T4253] device bridge2 left promiscuous mode [ 492.524565][ T4253] bridge0: port 3(team0) entered disabled state [ 492.546561][ T4253] device bridge_slave_1 left promiscuous mode [ 492.594498][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.635869][ T4253] device bridge_slave_0 left promiscuous mode [ 492.655377][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.968313][ T4253] bond0 (unregistering): Released all slaves [ 493.393951][ T4253] team0 (unregistering): Port device bridge2 removed [ 493.669903][ T4253] team0 (unregistering): Port device bridge1 removed [ 498.262886][ T4253] team0 (unregistering): Port device team_slave_1 removed [ 498.287212][ T4253] team0 (unregistering): Port device team_slave_0 removed [ 501.007473][ T9756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.329619][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.336733][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.496368][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 502.559431][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.742859][ T9756] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.688808][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 503.707952][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 503.744960][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.752104][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.292805][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 505.303453][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.318006][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.325140][ T4411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.344772][T10146] netlink: 'syz.5.1474': attribute type 13 has an invalid length. [ 505.386928][T10146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.425787][T10146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 505.525361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.582972][T10159] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1474'. [ 505.816764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.925288][T10159] device veth0_to_bond entered promiscuous mode [ 506.016713][T10176] syz.6.1479 sent an empty control message without MSG_MORE. [ 506.476420][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 506.618599][T10175] overlayfs: failed to resolve './file1': -2 [ 506.625841][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 506.697099][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 506.726721][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 506.821442][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 506.862375][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 506.945197][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 506.983093][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.182984][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.194811][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.848349][ T9756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 508.445789][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 508.485920][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 509.094718][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.102438][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.674188][ T9756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.404513][T10264] device syzkaller0 entered promiscuous mode [ 511.725495][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 511.765796][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 511.818361][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 511.863874][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 511.898797][ T9756] device veth0_vlan entered promiscuous mode [ 511.926425][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 511.946311][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 513.421273][ T9756] device veth1_vlan entered promiscuous mode [ 514.546336][ T9756] device veth0_macvtap entered promiscuous mode [ 514.560880][ T9756] device veth1_macvtap entered promiscuous mode [ 514.675912][ T9756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.584208][ T9756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.595183][ T9756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.606878][ T9756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.618340][ T9756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.629886][ T9756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.640890][ T9756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.652625][ T9756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.716360][ T9756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.756861][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.835568][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.885829][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 515.895579][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 515.904552][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.919364][ T9756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.971513][ T9756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.012266][ T9756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.033265][ T9756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.061949][ T9756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.082985][ T9756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.131749][ T9756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.182862][ T9756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.207788][ T9756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.226349][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.254926][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 516.305064][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.354491][ T9756] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.383557][ T9756] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.403771][ T9756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.424138][ T9756] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.634273][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.642213][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.699689][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 516.739613][ T3061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.748002][ T3061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.771114][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 518.616255][T10334] netlink: 292 bytes leftover after parsing attributes in process `syz.7.1388'. [ 519.430821][T10334] Set syz1 is full, maxelem 6117 reached [ 521.135187][ T3061] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 521.832081][T10371] loop7: detected capacity change from 0 to 8192 [ 521.936625][T10371] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 522.019306][T10371] REISERFS (device loop7): using ordered data mode [ 522.108749][T10371] reiserfs: using flush barriers [ 522.152563][T10371] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 522.433881][T10371] REISERFS (device loop7): checking transaction log (loop7) [ 523.020071][T10371] REISERFS (device loop7): Using r5 hash to sort names [ 523.207422][T10371] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 531.231130][T10496] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1541'. [ 531.247188][T10492] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1539'. [ 532.325717][T10513] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1552'. [ 532.871108][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1545'. [ 533.551828][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 535.269055][T10559] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1553'. [ 537.360607][T10561] binder: 10560:10561 ioctl 40406f06 200000000000 returned -22 [ 538.413984][T10579] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1559'. [ 540.113188][T10616] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1567'. [ 545.370779][T10682] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1580'. [ 549.332159][T10711] loop7: detected capacity change from 0 to 8192 [ 551.547863][T10711] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 551.782363][T10711] REISERFS (device loop7): using ordered data mode [ 551.972067][T10711] reiserfs: using flush barriers [ 552.424240][T10711] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 552.630067][T10711] REISERFS (device loop7): checking transaction log (loop7) [ 552.641957][T10711] REISERFS (device loop7): Using r5 hash to sort names [ 552.651096][T10711] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 552.713459][T10749] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1592'. [ 554.101817][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 554.111102][ T9537] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 554.282529][T10760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.463749][T10775] device syzkaller0 entered promiscuous mode [ 554.544316][T10787] netlink: 292 bytes leftover after parsing attributes in process `syz.6.1605'. [ 555.618859][T10806] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1609'. [ 556.400262][T10787] Set syz1 is full, maxelem 6117 reached [ 557.830518][T10817] batman_adv: batadv0: Adding interface: dummy0 [ 558.627443][T10817] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.653068][T10817] batman_adv: batadv0: Interface activated: dummy0 [ 564.117966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 564.134332][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.154132][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.086847][ T4230] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 566.774664][ T4230] usb 8-1: Using ep0 maxpacket: 16 [ 569.614494][ T4230] usb 8-1: device descriptor read/all, error -71 [ 570.480416][T10941] netlink: 'syz.7.1641': attribute type 1 has an invalid length. [ 570.680623][T10941] bond1 (unregistering): Released all slaves [ 574.517114][T10980] loop7: detected capacity change from 0 to 128 [ 574.646169][T10980] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 574.724408][T10980] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 577.770973][T11026] netlink: 'syz.5.1664': attribute type 1 has an invalid length. [ 578.036973][T11030] bond1: (slave gretap1): making interface the new active one [ 578.118752][T11030] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 578.162095][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1665'. [ 579.443424][T11050] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1667'. [ 579.452642][T11050] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1667'. [ 579.561405][T11050] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1667'. [ 581.012426][T11069] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1672'. [ 581.586170][T11072] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 582.849691][T11084] overlayfs: failed to clone upperpath [ 585.294110][ T4228] Bluetooth: hci5: command 0x0406 tx timeout [ 585.774373][ T4259] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 588.526794][T11154] loop6: detected capacity change from 0 to 512 [ 589.638160][T11154] EXT4-fs (loop6): Ignoring removed nobh option [ 589.644778][T11154] EXT4-fs (loop6): Unrecognized mount option "dioread_lock.jqfmt=vfsv1" or missing value [ 593.479447][T11209] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1700'. [ 595.404072][T11238] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1707'. [ 597.443547][T11276] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1714'. [ 598.967504][T11309] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1721'. [ 599.439471][T11314] loop7: detected capacity change from 0 to 512 [ 600.159025][T11314] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.1722: Unrecognised inode hash code 255 [ 600.180141][T11314] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1722: Corrupt directory, running e2fsck is recommended [ 600.198916][T11314] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 600.209080][T11314] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.1722: corrupted in-inode xattr [ 600.294756][T11314] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1722: couldn't read orphan inode 15 (err -117) [ 600.324446][T11314] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback. [ 600.347953][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.435557][T11314] EXT4-fs (loop7): shut down requested (2) [ 600.446234][T11314] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #2: comm syz.7.1722: directory missing '.' [ 601.120779][T11336] loop7: detected capacity change from 0 to 512 [ 601.219770][T11336] device batadv_slave_0 entered promiscuous mode [ 601.654106][T11337] device batadv_slave_0 left promiscuous mode [ 601.813714][T11331] loop6: detected capacity change from 0 to 4096 [ 601.940262][T11331] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 602.061193][T11331] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 604.005573][T11376] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1733'. [ 607.340277][T11390] loop6: detected capacity change from 0 to 2048 [ 607.766372][T11398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 607.776984][T11398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 610.633988][T11401] device bond_slave_1 left promiscuous mode [ 610.655213][T11401] device bond0 entered promiscuous mode [ 610.744638][T11401] device bond_slave_1 entered promiscuous mode [ 614.388500][T11477] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1755'. [ 616.133715][T11502] overlayfs: failed to clone upperpath [ 618.186668][T11530] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1769'. [ 619.068166][ T3061] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 624.183011][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.189325][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.546420][T11625] IPVS: lc: FWM 3 0x00000003 - no destination available [ 627.717105][T11666] loop6: detected capacity change from 0 to 32768 [ 627.766483][T11667] loop7: detected capacity change from 0 to 4096 [ 628.309309][T11667] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 628.363121][T11666] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1794 (11666) [ 628.528065][T11666] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 628.537817][T11666] BTRFS info (device loop6): use zlib compression, level 3 [ 628.545927][T11666] BTRFS info (device loop6): turning on sync discard [ 628.553460][T11666] BTRFS info (device loop6): using free space tree [ 628.560671][T11666] BTRFS info (device loop6): has skinny extents [ 628.568850][T11667] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 629.920610][T11666] BTRFS info (device loop6): enabling ssd optimizations [ 632.006034][T11732] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1800'. [ 632.420943][T10731] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop6 scanned by udevd (10731) [ 634.577586][T11772] loop7: detected capacity change from 0 to 4096 [ 635.257191][T11772] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 636.476296][T11810] blk_update_request: I/O error, dev loop11, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 636.494057][T11810] hfsplus: unable to find HFS+ superblock [ 636.753614][T11812] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1813'. [ 636.851653][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1813'. [ 636.940747][T11818] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1817'. [ 642.966899][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 644.075600][T11885] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1829'. [ 644.254201][T11889] netlink: 'syz.2.1830': attribute type 3 has an invalid length. [ 644.261998][T11889] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1830'. [ 649.544507][T11936] loop6: detected capacity change from 0 to 32768 [ 650.348248][T11936] XFS (loop6): Mounting V5 Filesystem [ 650.708281][T11936] XFS (loop6): Ending clean mount [ 650.766169][T11936] XFS (loop6): Quotacheck needed: Please wait. [ 651.460657][T11952] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1840'. [ 651.695124][ T4253] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 651.964312][T11936] XFS (loop6): Quotacheck: Done. [ 657.531185][ T8400] XFS (loop6): Unmounting Filesystem [ 660.688830][T11991] tipc: Enabling of bearer rejected, failed to enable media [ 661.017118][T12015] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1855'. [ 661.168225][T12017] SET target dimension over the limit! [ 665.463326][T12057] tipc: Enabling of bearer rejected, failed to enable media [ 666.288691][T12065] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 666.298076][T12065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.305607][T12065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.314754][T12065] device bridge_slave_0 left promiscuous mode [ 666.320977][T12065] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.333511][T12065] device bridge_slave_1 left promiscuous mode [ 666.340501][T12065] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.364406][T12065] bond0: (slave bond_slave_0): Releasing backup interface [ 666.402181][T12065] bond0: (slave bond_slave_1): Releasing backup interface [ 666.493531][T12065] team0: Port device team_slave_0 removed [ 666.684172][T12076] binder_alloc: 12075: pid 12075 spamming oneway? 2 buffers allocated for a total size of 5120 [ 666.722024][T12076] binder_alloc: 12075: pid 12075 spamming oneway? 3 buffers allocated for a total size of 5128 [ 666.747538][T12065] team0: Port device team_slave_1 removed [ 666.754322][T12065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.762078][T12065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.840774][T12065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.848300][T12065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.505694][T12074] lo speed is unknown, defaulting to 1000 [ 667.530478][T12074] lo speed is unknown, defaulting to 1000 [ 667.820255][T12074] lo speed is unknown, defaulting to 1000 [ 669.312463][T12087] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1868'. [ 671.485201][T12074] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 671.719034][T12074] lo speed is unknown, defaulting to 1000 [ 671.726667][T12074] lo speed is unknown, defaulting to 1000 [ 671.735095][T12074] lo speed is unknown, defaulting to 1000 [ 671.746075][T12074] lo speed is unknown, defaulting to 1000 [ 671.754688][T12074] lo speed is unknown, defaulting to 1000 [ 671.761460][T12074] lo speed is unknown, defaulting to 1000 [ 671.775348][T12108] tipc: Enabling of bearer rejected, failed to enable media [ 672.598820][T12118] device team0 entered promiscuous mode [ 672.606580][T12118] device team_slave_0 entered promiscuous mode [ 672.632138][T12118] device team_slave_1 entered promiscuous mode [ 673.853100][T12144] loop6: detected capacity change from 0 to 512 [ 674.095346][T12144] EXT4-fs (loop6): inline encryption not supported [ 674.707463][T12163] loop6: detected capacity change from 0 to 256 [ 674.716119][T12163] exfat: Deprecated parameter 'namecase' [ 674.722385][T12163] exfat: Deprecated parameter 'namecase' [ 674.817048][T12163] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 676.656919][T12200] loop7: detected capacity change from 0 to 764 [ 676.740510][T12200] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 680.504504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.195914][T12257] tipc: Enabling of bearer rejected, failed to enable media [ 682.207499][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 682.218639][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 682.228564][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 682.238200][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 682.247769][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 685.702185][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.708782][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.183563][T12311] loop7: detected capacity change from 0 to 256 [ 687.206776][T12316] loop6: detected capacity change from 0 to 2048 [ 687.258574][T12316] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 687.644742][T12321] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1912'. [ 687.672647][T12321] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1912'. [ 687.759315][T12321] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1912'. [ 689.055534][ T9537] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 691.010727][T12370] lo speed is unknown, defaulting to 1000 [ 691.017252][T12370] lo speed is unknown, defaulting to 1000 [ 691.024594][T12370] lo speed is unknown, defaulting to 1000 [ 691.040252][T12370] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 691.066619][T12370] lo speed is unknown, defaulting to 1000 [ 691.073819][T12370] lo speed is unknown, defaulting to 1000 [ 691.080855][T12370] lo speed is unknown, defaulting to 1000 [ 691.087487][T12370] lo speed is unknown, defaulting to 1000 [ 691.094091][T12370] lo speed is unknown, defaulting to 1000 [ 691.100634][T12370] lo speed is unknown, defaulting to 1000 [ 691.999215][T12394] misc userio: No port type given on /dev/userio [ 692.440608][T12401] siw: device registration error -23 [ 692.805639][T12409] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1930'. [ 694.103591][T12433] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1934'. [ 694.861992][T12440] loop6: detected capacity change from 0 to 4096 [ 695.104498][T12440] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 695.175402][T12440] EXT4-fs (loop6): Test dummy encryption mode enabled [ 695.305992][T12440] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 695.514134][T12465] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1943'. [ 696.209500][T12477] tipc: Enabled bearer , priority 10 [ 696.916682][T12479] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1947'. [ 697.223763][T12489] kcapi: manufacturer command 4294967295 unknown. [ 697.335736][T12490] trusted_key: encrypted_key: keylen parameter is missing [ 701.476855][T12520] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1955'. [ 703.473191][T12530] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1959'. [ 703.534579][ T4308] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 704.534155][ T4308] usb 7-1: unable to read config index 0 descriptor/all [ 704.542014][ T4308] usb 7-1: can't read configurations, error -71 [ 704.854530][T12561] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 706.088907][T12581] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1968'. [ 706.407732][T12585] siw: device registration error -23 [ 709.604348][T12595] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1972'. [ 711.555582][T12615] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 712.070158][T12617] lo speed is unknown, defaulting to 1000 [ 712.166474][T12617] lo speed is unknown, defaulting to 1000 [ 712.301273][T11749] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 712.564621][T11749] usb 7-1: Using ep0 maxpacket: 32 [ 712.694417][T11749] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.757135][T11749] usb 7-1: config 0 has no interfaces? [ 712.837283][T11749] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 713.004009][T11749] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.075054][T11749] usb 7-1: config 0 descriptor?? [ 713.447384][T12645] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 713.460621][T12645] Error parsing options; rc = [-22] [ 714.476421][ T4229] Bluetooth: hci0: command 0x0409 tx timeout [ 714.518799][T12643] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1980'. [ 714.561871][T12617] chnl_net:caif_netlink_parms(): no params data found [ 714.619314][T12619] loop6: detected capacity change from 0 to 4096 [ 714.653145][T12652] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1983'. [ 714.845523][T11749] usb 7-1: USB disconnect, device number 5 [ 715.060168][T12673] netlink: 'syz.2.1987': attribute type 12 has an invalid length. [ 715.996882][T12617] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.019888][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.054908][T12617] device bridge_slave_0 entered promiscuous mode [ 716.066150][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1988'. [ 716.085035][T12617] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.112648][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.132312][T12617] device bridge_slave_1 entered promiscuous mode [ 716.143325][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1988'. [ 716.342792][T12701] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1988'. [ 716.405334][T12617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.494336][ T5128] Bluetooth: hci0: command 0x041b tx timeout [ 716.599769][T12704] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1992'. [ 716.612285][T12617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.834538][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 718.885880][T12617] team0: Port device team_slave_0 added [ 718.939024][T12617] team0: Port device team_slave_1 added [ 719.007370][T12734] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1999'. [ 719.084378][T12617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.124125][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.431858][T12617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.732614][T12617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.740552][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.769683][T12617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.862081][T12765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.974394][ T5128] Bluetooth: hci0: command 0x0419 tx timeout [ 721.917577][T12617] device hsr_slave_0 entered promiscuous mode [ 722.035431][T12617] device hsr_slave_1 entered promiscuous mode [ 722.145684][T12796] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2011'. [ 722.162824][ T4259] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 722.189045][T12617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.225054][T12617] Cannot create hsr debugfs directory [ 722.992121][T12806] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2015'. [ 726.328185][T12617] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 726.375717][T12617] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 727.638214][T12617] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 729.429936][T12617] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 729.723540][T12863] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 729.849436][T12866] loop7: detected capacity change from 0 to 2048 [ 730.413289][T12617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.486534][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 730.525951][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 730.558462][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.613547][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 730.635033][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 730.666885][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.674017][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.745128][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 730.760092][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 730.777295][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 730.787845][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.795544][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.815943][T12866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 731.134445][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 731.316857][T12882] netlink: 'syz.2.2029': attribute type 1 has an invalid length. [ 731.325046][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 731.500690][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 731.708003][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 731.859303][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 731.904775][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 731.969554][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 732.018609][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 732.088817][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 732.735592][T12617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.737030][T12617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 734.163320][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 734.474876][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 734.900590][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 736.053653][T12909] device syzkaller0 entered promiscuous mode [ 736.080276][T12911] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 736.463856][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 736.476043][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 736.908608][T12617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.410918][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2048'. [ 740.514080][T12947] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 740.521451][T12947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 740.612361][T12947] vhci_hcd vhci_hcd.0: Device attached [ 740.642727][T12956] vhci_hcd: connection closed [ 741.035794][ T4409] vhci_hcd: stop threads [ 741.130943][ T4409] vhci_hcd: release socket [ 741.136120][T11749] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 741.304689][ T4409] vhci_hcd: disconnect device [ 741.817454][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 743.079020][T12990] futex_wake_op: syz.7.2054 tries to shift op by 144; fix this program [ 743.244258][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 743.298113][T12984] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2055'. [ 745.292818][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.300282][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.604409][T13018] input: syz1 as /devices/virtual/input/input5 [ 745.695726][T12984] batman_adv: batadv0: Interface deactivated: dummy0 [ 745.926663][T13025] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2061'. [ 746.725182][T11749] vhci_hcd: vhci_device speed not set [ 746.750460][T12984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.835501][T12984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.057688][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.064051][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.072493][ T1431] aoe: packet could not be sent on veth0_to_bond. consider increasing tx_queue_len [ 747.286473][T12984] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.296140][T12984] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.306031][T12984] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.315906][T12984] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.515005][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 747.523366][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 747.549251][T13034] device syzkaller0 entered promiscuous mode [ 747.572160][T12617] device veth0_vlan entered promiscuous mode [ 747.606450][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 747.616437][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 747.652338][T12617] device veth1_vlan entered promiscuous mode [ 747.917047][T13042] fuse: Unknown parameter 'user_i00000000000000000000' [ 748.736367][T13059] ipt_CLUSTERIP: bad num_local_nodes 2052 [ 748.767340][T12617] device veth0_macvtap entered promiscuous mode [ 749.130143][T12617] device veth1_macvtap entered promiscuous mode [ 749.163346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 749.220344][T13061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.272926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 749.325820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 749.402114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 749.795070][T13061] netlink: 'syz.5.2068': attribute type 10 has an invalid length. [ 749.836186][T13061] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 749.889265][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.938360][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.952667][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.984274][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.199346][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.242489][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.315962][T12617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.325933][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 750.355429][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 750.407293][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.427367][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.199690][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.437666][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.470993][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.487835][T13104] loop6: detected capacity change from 0 to 512 [ 751.778113][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.919937][T12617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.931661][T12617] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.940473][T12617] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.949322][T12617] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.977556][T12617] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.131718][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 752.149729][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 752.772874][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.814663][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.833293][T13104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 752.849415][T13104] System zones: 1-12 [ 752.877086][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 752.951067][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.004511][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.028032][T13104] EXT4-fs (loop6): 1 truncate cleaned up [ 753.042678][T13104] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,nodiscard,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,barrier=0x0000000000000006,data_err=ignore,debug,,errors=continue. Quota mode: none. [ 753.114531][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 754.545586][T13131] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2081'. [ 755.750094][T13150] netlink: 'syz.6.2083': attribute type 12 has an invalid length. [ 757.872105][T13165] device syzkaller0 entered promiscuous mode [ 759.065103][T13188] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2094'. [ 761.403414][T13224] loop7: detected capacity change from 0 to 1024 [ 761.447141][T13224] EXT4-fs (loop7): Invalid want_extra_isize 7 [ 766.367771][T13271] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 766.378481][T13271] xt_CT: You must specify a L4 protocol and not use inversions on it [ 766.659052][T13281] tipc: Started in network mode [ 766.672338][T13281] tipc: Node identity 4, cluster identity 4711 [ 766.678590][T13281] tipc: Node number set to 4 [ 767.422724][T13278] loop8: detected capacity change from 0 to 4096 [ 767.490128][T13278] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 767.914601][T13290] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9756] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13290] [ 767.930965][T13290] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2113'. [ 768.698018][T13278] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 768.812611][T13278] ntfs3: loop8: Failed to load $Extend. [ 769.113936][T13303] device bridge4 entered promiscuous mode [ 770.217422][T13300] loop7: detected capacity change from 0 to 4096 [ 770.302414][T13300] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 770.385307][T13300] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 770.499265][T13300] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,errors=remount-ro,nombcache,inode_readahead_blks=0x0000000000020000,bsdgroups,jqfmt=vfsv0,lazytime,jqfmt=vfsv0,. Quota mode: writeback. [ 771.411453][T13333] device syzkaller1 entered promiscuous mode [ 771.445330][T13333] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 771.467520][T13335] loop6: detected capacity change from 0 to 512 [ 771.517298][T13337] xt_CONNSECMARK: invalid mode: 254 [ 771.668924][T13335] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 771.786967][T13335] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.2122: corrupted xattr entries [ 771.972506][T13335] EXT4-fs (loop6): Remounting filesystem read-only [ 772.078828][T13335] EXT4-fs (loop6): 1 truncate cleaned up [ 772.148990][T13335] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 775.649394][T13376] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 778.034230][T13378] block device autoloading is deprecated and will be removed. [ 780.756321][T13423] loop7: detected capacity change from 0 to 128 [ 780.830216][T13424] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2141'. [ 780.958173][T13435] 9pnet_virtio: no channels available for device ./bus [ 781.321670][ T25] audit: type=1804 audit(1782503111.482:69): pid=13438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2142" name="/newroot/118/bus/file0" dev="loop7" ino=1048651 res=1 errno=0 [ 783.040052][T13448] loop8: detected capacity change from 0 to 40427 [ 783.098116][T13448] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 783.106614][T13448] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 783.129842][T13448] F2FS-fs (loop8): invalid crc value [ 783.172050][T13448] F2FS-fs (loop8): Found nat_bits in checkpoint [ 783.358761][T13448] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 783.366529][T13448] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 783.417645][T13462] loop7: detected capacity change from 0 to 4096 [ 784.954494][T13471] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 787.456717][T13496] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2155'. [ 788.403571][T13505] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 788.414067][T13505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 791.075276][T13524] netlink: 'syz.6.2160': attribute type 3 has an invalid length. [ 791.092238][T13524] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2160'. [ 792.190286][T13545] loop7: detected capacity change from 0 to 512 [ 793.788145][T13545] EXT4-fs (loop7): Ignoring removed nobh option [ 793.862696][T13545] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 794.166466][T13545] EXT4-fs (loop7): 1 truncate cleaned up [ 794.172397][T13545] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 796.137813][T13583] lo speed is unknown, defaulting to 1000 [ 796.145779][T13583] lo speed is unknown, defaulting to 1000 [ 798.920760][T13603] netlink: 'syz.5.2178': attribute type 3 has an invalid length. [ 798.928852][T13603] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2178'. [ 799.331947][T13615] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2174'. [ 800.391909][T13638] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2184'. [ 802.228573][T13662] loop7: detected capacity change from 0 to 512 [ 802.361444][T13668] SET target dimension over the limit! [ 802.749729][T13662] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 802.839354][T13665] tipc: Enabling of bearer rejected, failed to enable media [ 802.860955][T13662] EXT4-fs error (device loop7): ext4_orphan_get:1432: comm syz.7.2190: bad orphan inode 13 [ 802.933157][T13662] ext4_test_bit(bit=12, block=18) = 1 [ 803.042642][T13662] is_bad_inode(inode)=0 [ 803.083345][T13662] NEXT_ORPHAN(inode)=0 [ 803.104566][T13662] max_ino=32 [ 803.107798][T13662] i_nlink=1 [ 804.051881][T13688] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2195'. [ 804.084424][T13662] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 804.460732][T13707] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 804.488990][T13707] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2190: bg 0: block 248: padding at end of block bitmap is not set [ 804.512882][T13707] Quota error (device loop7): write_blk: dquota write failed [ 804.521035][T13707] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 804.531292][T13707] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.2190: Failed to acquire dquot type 1 [ 804.839441][T13704] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2198'. [ 808.501403][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.507729][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.978464][T13761] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2208'. [ 812.099044][T13771] loop8: detected capacity change from 0 to 40427 [ 814.055285][T13771] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 814.063633][T13771] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 814.074344][T13771] F2FS-fs (loop8): invalid crc value [ 814.428654][T13771] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-4) [ 814.991827][T13800] device syzkaller0 entered promiscuous mode [ 816.354282][ T25] audit: type=1400 audit(1782503145.772:70): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13790 comm="syz.7.2216" [ 816.509576][T13800] tipc: Enabled bearer , priority 0 [ 816.660384][T13799] tipc: Resetting bearer [ 819.158730][T13799] tipc: Disabling bearer [ 819.171967][ T6871] tipc: Node number set to 3063385719 [ 820.059725][T13838] SET target dimension over the limit! [ 823.603131][T13848] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2228'. [ 823.670113][T13862] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2229'. [ 825.574779][T13878] device syzkaller0 entered promiscuous mode [ 825.659134][T13878] tc action pedit offset 136 out of bounds [ 827.965833][T13917] loop6: detected capacity change from 0 to 1024 [ 829.095743][T13924] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2246'. [ 829.115444][T13925] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2245'. [ 829.145600][T13924] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2246'. [ 829.191832][T13924] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2246'. [ 829.328377][T13932] tipc: Enabling of bearer rejected, failed to enable media [ 829.997036][T13944] device syzkaller0 entered promiscuous mode [ 830.073368][T13944] tc action pedit offset 136 out of bounds [ 833.824178][T13965] device team0 entered promiscuous mode [ 833.839616][T13969] kcapi: manufacturer command 4294967295 unknown. [ 834.780289][T13977] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 836.335603][ T2303] Bluetooth: hci0: command 0x0406 tx timeout [ 838.629566][T13984] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2259'. [ 838.986814][T13989] loop7: detected capacity change from 0 to 40427 [ 839.956937][T13989] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 839.965524][T13989] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 839.979842][T13989] F2FS-fs (loop7): invalid crc value [ 840.337015][T13989] F2FS-fs (loop7): Found nat_bits in checkpoint [ 842.242426][T13989] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 842.249925][T13989] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 843.666244][T14027] netlink: 'syz.8.2274': attribute type 1 has an invalid length. [ 843.683358][T14022] loop6: detected capacity change from 0 to 256 [ 843.789531][T14030] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2275'. [ 843.824816][T14022] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 843.876179][T14027] bond1: (slave bridge1): making interface the new active one [ 843.985554][T14039] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 843.998749][T14039] Error parsing options; rc = [-22] [ 844.057903][T14027] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 845.222589][T14047] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2279'. [ 845.523362][T14048] loop7: detected capacity change from 0 to 4096 [ 845.677547][T14048] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 845.690907][T14048] EXT4-fs (loop7): Test dummy encryption mode enabled [ 845.848346][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2273'. [ 845.863096][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2273'. [ 845.873042][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2273'. [ 845.883032][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2273'. [ 845.892558][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2273'. [ 847.538797][T14048] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 849.546184][T14080] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2288'. [ 850.524260][T14085] device syzkaller0 entered promiscuous mode [ 850.570703][T14092] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2292'. [ 850.906452][T14099] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2305'. [ 850.969941][T14102] loop7: detected capacity change from 0 to 256 [ 851.357708][T14102] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 852.700975][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2296'. [ 852.711568][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2296'. [ 852.720802][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2296'. [ 852.730057][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2296'. [ 852.739192][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2296'. [ 854.579571][T14134] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2302'. [ 861.907243][T14180] loop8: detected capacity change from 0 to 256 [ 862.049300][T14180] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 862.113911][T14187] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2321'. [ 862.494720][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2317'. [ 862.508973][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2317'. [ 862.518614][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2317'. [ 862.528268][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2317'. [ 862.537671][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2317'. [ 868.649493][T14229] loop8: detected capacity change from 0 to 2048 [ 869.674077][T14233] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2332'. [ 869.719459][T14229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 869.768890][T14236] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2333'. [ 869.972643][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.979056][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.837377][T14258] loop8: detected capacity change from 0 to 40427 [ 874.861618][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2337'. [ 874.871853][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2337'. [ 874.881054][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2337'. [ 874.890701][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2337'. [ 874.899712][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2337'. [ 875.123583][T14258] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 875.132067][T14258] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 875.479159][T14258] F2FS-fs (loop8): invalid crc value [ 875.685881][T14258] F2FS-fs (loop8): Found nat_bits in checkpoint [ 876.132287][T14258] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 876.139542][T14258] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 877.009751][T14291] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2345'. [ 877.863340][T14293] loop6: detected capacity change from 0 to 32768 [ 877.969887][T14293] (syz.6.2346,14293,1):ocfs2_read_virt_blocks:999 ERROR: Inode #66 contains a hole at offset 0 [ 877.980891][T14293] (syz.6.2346,14293,1):ocfs2_read_dir_block:511 ERROR: status = -5 [ 877.989992][T14293] (syz.6.2346,14293,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 877.999525][T14293] (syz.6.2346,14293,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 877.999600][T14293] (syz.6.2346,14293,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 878.021278][T14293] (syz.6.2346,14293,1):ocfs2_initialize_super:2281 ERROR: status = -22 [ 878.029837][T14293] (syz.6.2346,14293,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 878.890294][T14307] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2350'. [ 882.222222][T14327] overlayfs: failed to clone lowerpath [ 883.243049][T14344] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2360'. [ 883.811147][T14352] loop7: detected capacity change from 0 to 764 [ 883.856527][T14352] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 884.085094][T14354] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2364'. [ 884.175041][T14359] netlink: 'syz.6.2363': attribute type 3 has an invalid length. [ 884.185652][T14359] netlink: 'syz.6.2363': attribute type 3 has an invalid length. [ 885.108826][T14358] loop8: detected capacity change from 0 to 128 [ 885.387563][T14358] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 885.423817][T14358] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 886.269364][T14378] IPVS: sh: FWM 3 0x00000003 - no destination available [ 887.194631][T14394] loop8: detected capacity change from 0 to 512 [ 888.269544][T14394] EXT4-fs (loop8): orphan cleanup on readonly fs [ 888.285506][T14394] EXT4-fs warning (device loop8): ext4_xattr_inode_get:506: inode #11: comm syz.8.2369: EA inode hash validation failed [ 888.300519][T14394] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 888.315263][T14394] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:984: inode #11: comm syz.8.2369: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 888.347836][T14394] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.8.2369: ea_inode dec ref err=-117 [ 888.362247][T14394] EXT4-fs (loop8): 1 orphan inode deleted [ 888.368555][T14394] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,data_err=ignore,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 890.653240][T14418] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2377'. [ 890.884196][T14430] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 890.893632][T14430] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 890.903204][T14430] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 893.885737][T14441] device syzkaller0 entered promiscuous mode [ 894.615454][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2386'. [ 895.667221][T14461] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2387'. [ 896.574265][T14470] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2391'. [ 896.684009][T14468] loop6: detected capacity change from 0 to 8192 [ 896.747510][T14468] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 896.785032][T14468] REISERFS (device loop6): using ordered data mode [ 896.791575][T14468] reiserfs: using flush barriers [ 897.049736][T14468] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 897.213850][T14482] ubi0: attaching mtd0 [ 897.306231][T14482] ubi0: scanning is finished [ 897.311471][T14482] ubi0: empty MTD device detected [ 897.615134][T14468] REISERFS (device loop6): checking transaction log (loop6) [ 897.619779][T14482] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 897.657934][T14468] REISERFS (device loop6): Using r5 hash to sort names [ 897.669116][T14468] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 898.431276][T14497] loop7: detected capacity change from 0 to 764 [ 898.540786][T14497] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 900.571360][T14507] loop8: detected capacity change from 0 to 40427 [ 900.587511][T14500] 9pnet: Insufficient options for proto=fd [ 900.612475][T14511] device syzkaller0 entered promiscuous mode [ 900.639808][T14507] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 900.648455][T14507] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 900.666787][T14507] F2FS-fs (loop8): invalid crc value [ 900.787240][T14507] F2FS-fs (loop8): Found nat_bits in checkpoint [ 901.222604][T14507] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 901.229974][T14507] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 901.402753][T14509] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2401'. [ 901.896870][T14520] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2402'. [ 902.174019][ T4232] Bluetooth: hci0: command 0x080f tx timeout [ 903.026374][T14529] loop6: detected capacity change from 0 to 2048 [ 903.643188][T14532] overlayfs: failed to clone lowerpath [ 903.671610][T14529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 903.788307][T14532] overlayfs: failed to clone lowerpath [ 904.048978][T14540] netlink: 'syz.7.2409': attribute type 8 has an invalid length. [ 905.097020][T14547] netlink: 'syz.2.2411': attribute type 3 has an invalid length. [ 905.105834][T14547] netlink: 'syz.2.2411': attribute type 3 has an invalid length. [ 906.130019][T14552] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2414'. [ 906.575313][T14557] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2415'. [ 907.707061][T14576] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 910.854938][ T6268] Bluetooth: hci2: command 0x0406 tx timeout [ 911.125723][T14591] device syzkaller0 entered promiscuous mode [ 912.848581][T14612] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 913.428929][T14615] loop8: detected capacity change from 0 to 764 [ 913.438629][T14616] loop7: detected capacity change from 0 to 256 [ 913.469460][T14615] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 913.665159][T14616] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 913.757727][T14616] attempt to access beyond end of device [ 913.757727][T14616] loop7: rw=524288, want=408, limit=256 [ 913.794157][ T25] audit: type=1804 audit(1782503243.962:71): pid=14623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2427" name="/newroot/171/file2/file1" dev="loop7" ino=1048652 res=1 errno=0 [ 913.833154][T14616] attempt to access beyond end of device [ 913.833154][T14616] loop7: rw=524288, want=664, limit=256 [ 913.857370][T14616] attempt to access beyond end of device [ 913.857370][T14616] loop7: rw=0, want=288, limit=256 [ 913.877963][ T25] audit: type=1800 audit(1782503244.052:72): pid=14616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2427" name="file1" dev="loop7" ino=1048652 res=0 errno=0 [ 913.900574][T14623] attempt to access beyond end of device [ 913.900574][T14623] loop7: rw=0, want=288, limit=256 [ 913.951227][ T25] audit: type=1800 audit(1782503244.102:73): pid=14623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2427" name="file1" dev="loop7" ino=1048652 res=0 errno=0 [ 915.514502][T14638] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 916.672000][T14646] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2432'. [ 918.360547][T14667] loop7: detected capacity change from 0 to 256 [ 925.853053][T14680] loop8: detected capacity change from 0 to 764 [ 926.696981][T14680] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 926.732281][T14691] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2447'. [ 928.468049][T14712] xt_HMARK: spi-set and port-set can't be combined [ 929.182615][T14715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.195226][T14715] netlink: 'syz.7.2452': attribute type 10 has an invalid length. [ 929.727713][T14705] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2462'. [ 930.919030][T14715] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.926359][T14715] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.002150][T14715] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.009322][T14715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.016991][T14715] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.024098][T14715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.034734][T14715] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 931.378171][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.384799][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.209273][T14745] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2468'. [ 939.917797][T14776] futex_wake_op: syz.5.2465 tries to shift op by 144; fix this program [ 941.448441][T14781] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2469'. [ 941.509088][T14785] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 941.517706][T14785] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 941.526164][T14785] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 941.547368][T14784] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2470'. [ 941.619420][T14789] bond0 speed is unknown, defaulting to 1000 [ 941.625827][T14789] bond0 speed is unknown, defaulting to 1000 [ 941.632215][T14789] bond0 speed is unknown, defaulting to 1000 [ 941.644016][T14789] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 941.662981][T14789] bond0 speed is unknown, defaulting to 1000 [ 941.670023][T14789] bond0 speed is unknown, defaulting to 1000 [ 941.677220][T14789] bond0 speed is unknown, defaulting to 1000 [ 941.684010][T14789] bond0 speed is unknown, defaulting to 1000 [ 941.690815][T14789] bond0 speed is unknown, defaulting to 1000 [ 941.697818][T14789] bond0 speed is unknown, defaulting to 1000 [ 941.704697][T14789] bond0 speed is unknown, defaulting to 1000 [ 942.527682][T14803] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2466'. [ 945.376093][T14823] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2481'. [ 946.826138][T14828] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2482'. [ 946.880392][T14831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2484'. [ 947.132309][T14827] loop8: detected capacity change from 0 to 8192 [ 947.224317][T14827] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 947.256740][T14827] REISERFS (device loop8): using ordered data mode [ 947.263279][T14827] reiserfs: using flush barriers [ 947.386239][T14827] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 947.433535][T14827] REISERFS (device loop8): checking transaction log (loop8) [ 947.475638][T14827] REISERFS (device loop8): Using r5 hash to sort names [ 947.482793][T14827] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 948.964712][T14862] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2492'. [ 949.108085][T14868] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2505'. [ 949.279432][T14870] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2493'. [ 949.777678][T14878] loop8: detected capacity change from 0 to 764 [ 949.863702][T14878] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 950.587820][T14881] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2495'. [ 950.781990][T14883] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2497'. [ 951.656559][T14894] loop7: detected capacity change from 0 to 256 [ 951.872321][T14894] FAT-fs (loop7): Unrecognized mount option "./file0" or missing value [ 953.846855][T14933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.859041][T14933] netlink: 'syz.6.2509': attribute type 10 has an invalid length. [ 953.881781][T14933] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 954.716265][T14934] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2508'. [ 954.780102][T14937] device syzkaller1 entered promiscuous mode [ 954.838767][T14938] xt_CONNSECMARK: invalid mode: 254 [ 955.125459][T14945] 9pnet_virtio: no channels available for device ./bus [ 960.435432][T14980] overlayfs: failed to clone lowerpath [ 960.488973][T14986] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2521'. [ 960.506805][T14983] loop8: detected capacity change from 0 to 256 [ 960.714795][T14983] FAT-fs (loop8): Unrecognized mount option "./file0" or missing value [ 960.739145][T14980] overlayfs: failed to clone lowerpath [ 962.855470][T14998] device syzkaller1 entered promiscuous mode [ 962.867043][T14998] xt_CONNSECMARK: invalid mode: 254 [ 963.109952][T14999] device syzkaller0 entered promiscuous mode [ 963.734992][T14997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.842309][T14997] netlink: 'syz.8.2524': attribute type 10 has an invalid length. [ 963.943204][T14997] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.952368][T14997] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.308868][T14997] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.316857][T14997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.324979][T14997] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.332679][T14997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.344906][T14997] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 969.582023][T15036] loop7: detected capacity change from 0 to 64 [ 969.720073][T15036] MINIX-fs: mounting file system with errors, running fsck is recommended [ 970.297518][T15047] MPTCP: addr_signal error, rm_addr=1 [ 970.865508][T15051] loop8: detected capacity change from 0 to 40427 [ 971.056213][T15051] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 971.065184][T15051] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 971.086989][T15051] F2FS-fs (loop8): invalid crc value [ 971.138677][T15061] xt_CONNSECMARK: invalid mode: 254 [ 971.165578][T15051] F2FS-fs (loop8): Found nat_bits in checkpoint [ 971.281217][T15062] tipc: Enabling of bearer rejected, failed to enable media [ 971.324578][T15051] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 971.331638][T15051] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 972.701077][T15080] loop6: detected capacity change from 0 to 764 [ 972.723326][T15088] loop7: detected capacity change from 0 to 764 [ 973.210575][T15092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 973.222978][T15092] netlink: 'syz.2.2540': attribute type 10 has an invalid length. [ 973.273604][T15080] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 973.288313][T15092] bridge0: port 3(syz_tun) entered disabled state [ 973.295137][T15092] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.302455][T15092] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.554521][T15092] bridge0: port 3(syz_tun) entered blocking state [ 973.561024][T15092] bridge0: port 3(syz_tun) entered forwarding state [ 973.567833][T15092] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.574928][T15092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.582276][T15092] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.589371][T15092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.598988][T15092] device bridge0 entered promiscuous mode [ 973.605199][T15092] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 974.405687][T15096] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2557'. [ 974.510737][T15088] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 975.025413][T15100] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2545'. [ 976.224169][T15111] loop8: detected capacity change from 0 to 1024 [ 976.309485][T15111] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 976.830354][T15113] loop7: detected capacity change from 0 to 40427 [ 976.894374][T15113] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 976.902870][T15113] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 976.919519][T15113] F2FS-fs (loop7): invalid crc value [ 977.022444][T15113] F2FS-fs (loop7): Found nat_bits in checkpoint [ 977.177868][T15113] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 977.186192][T15113] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 977.870627][T15125] attempt to access beyond end of device [ 977.870627][T15125] loop7: rw=34817, want=77856, limit=40427 [ 979.054441][T15100] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.063379][T15100] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.072371][T15100] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.081403][T15100] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.156451][T15123] device bridge2 entered promiscuous mode [ 979.282556][T15141] loop6: detected capacity change from 0 to 128 [ 981.023630][T15147] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 981.341649][ T25] audit: type=1804 audit(1782503311.512:74): pid=15157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2553" name="/newroot/254/bus/file0" dev="loop6" ino=1048653 res=1 errno=0 [ 981.610535][T15144] siw: device registration error -23 [ 981.622772][T15152] xt_CONNSECMARK: invalid mode: 254 [ 981.633117][T15144] dlm: dev_write: no op 0 74000000000000 [ 981.710272][T15159] loop7: detected capacity change from 0 to 4096 [ 983.330944][T15159] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 983.362886][T15172] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2560'. [ 983.405833][T15174] loop6: detected capacity change from 0 to 512 [ 983.612377][T15174] EXT4-fs (loop6): orphan cleanup on readonly fs [ 983.627350][T15159] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 983.630605][T15174] EXT4-fs error (device loop6): ext4_find_extent:893: inode #4: comm syz.6.2562: inode has invalid extent depth: 7 [ 984.798138][T15174] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=-117 [ 984.894334][T15174] EXT4-fs warning (device loop6): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 984.911962][T15159] ntfs3: loop7: Failed to load $Extend. [ 984.940963][T15174] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 984.953254][T15174] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 985.165787][T15190] loop8: detected capacity change from 0 to 40427 [ 985.252048][T15190] F2FS-fs (loop8): invalid crc value [ 986.078928][T15190] F2FS-fs (loop8): Found nat_bits in checkpoint [ 986.462119][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 986.473023][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 986.480510][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 986.490573][ T146] Workqueue: hci5 hci_rx_work [ 986.495372][ T146] Call Trace: [ 986.498694][ T146] [ 986.501695][ T146] dump_stack_lvl+0x188/0x250 [ 986.506493][ T146] ? show_regs_print_info+0x20/0x20 [ 986.511690][ T146] ? load_image+0x410/0x410 [ 986.516218][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 986.521568][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 986.526257][ T146] ? kthread+0x42e/0x520 [ 986.530598][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 986.535860][ T146] kobject_add_internal+0x5ba/0xcd0 [ 986.541145][ T146] kobject_add+0x160/0x230 [ 986.545568][ T146] ? kobject_init+0x1c0/0x1c0 [ 986.550247][ T146] ? __raw_spin_lock_init+0x41/0x100 [ 986.555544][ T146] ? klist_children_get+0x50/0x50 [ 986.560644][ T146] ? get_device_parent+0x121/0x3e0 [ 986.565758][ T146] device_add+0x470/0x1050 [ 986.570178][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 986.575216][ T146] le_conn_complete_evt+0xc2e/0x14d0 [ 986.580524][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 986.585664][ T146] hci_le_meta_evt+0x285/0x3ca0 [ 986.587664][T15190] F2FS-fs (loop8): Start checkpoint disabled! [ 986.590529][ T146] ? mark_lock+0x94/0x320 [ 986.590593][ T146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 986.607249][ T146] ? __cond_resched+0xd0/0xd0 [ 986.612048][ T146] ? lock_chain_count+0x20/0x20 [ 986.616912][ T146] ? hci_remote_host_features_evt+0x240/0x240 [ 986.622992][ T146] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 986.628641][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 986.632373][T15190] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 986.633866][ T146] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 986.633895][ T146] ? hci_event_packet+0x5b7/0x1310 [ 986.633920][ T146] hci_event_packet+0xe0b/0x1310 [ 986.656997][ T146] ? _raw_spin_unlock+0x40/0x40 [ 986.661862][ T146] ? rcu_lock_release+0x20/0x20 [ 986.666698][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 986.671890][ T146] hci_rx_work+0x255/0xa10 [ 986.676310][ T146] process_one_work+0x867/0xff0 [ 986.681250][ T146] ? worker_detach_from_pool+0x240/0x240 [ 986.686888][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 986.692177][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 986.697184][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 986.702717][ T146] ? wq_worker_running+0x97/0x170 [ 986.707728][ T146] worker_thread+0xad7/0x12a0 [ 986.712407][ T146] kthread+0x42e/0x520 [ 986.716456][ T146] ? rcu_lock_release+0x20/0x20 [ 986.721287][ T146] ? kthread_blkcg+0xd0/0xd0 [ 986.725953][ T146] ret_from_fork+0x1f/0x30 [ 986.730495][ T146] [ 986.734495][ T146] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 986.747826][ T146] Bluetooth: hci5: failed to register connection device [ 987.264380][T15210] loop7: detected capacity change from 0 to 512 [ 987.408899][T15210] EXT4-fs (loop7): Ignoring removed orlov option [ 987.547521][T15210] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 987.710874][T15210] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 988.292949][ T25] audit: type=1800 audit(1782503318.462:75): pid=15210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2570" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 988.468394][T13764] attempt to access beyond end of device [ 988.468394][T13764] loop8: rw=2049, want=40976, limit=40427 [ 989.443979][T15233] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2575'. [ 990.669482][T15251] loop6: detected capacity change from 0 to 764 [ 991.118457][T15251] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 991.504834][T15269] mmap: syz.5.2582 (15269) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 992.027380][T15262] loop8: detected capacity change from 0 to 4096 [ 992.817982][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.824328][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.022219][T15276] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2587'. [ 994.831692][T15295] loop6: detected capacity change from 0 to 16 [ 995.454953][T15295] erofs: (device loop6): mounted with root inode @ nid 36. [ 995.773457][T15307] loop7: detected capacity change from 0 to 764 [ 996.275954][T15307] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 996.805729][T15322] loop6: detected capacity change from 0 to 256 [ 996.873344][T15322] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 996.900442][T15323] autofs4:pid:15323:autofs_fill_super: called with bogus options [ 997.258810][T15320] attempt to access beyond end of device [ 997.258810][T15320] loop6: rw=524288, want=408, limit=256 [ 997.273717][T15320] attempt to access beyond end of device [ 997.273717][T15320] loop6: rw=524288, want=664, limit=256 [ 997.286072][T15320] attempt to access beyond end of device [ 997.286072][T15320] loop6: rw=0, want=288, limit=256 [ 997.312995][ T25] audit: type=1800 audit(1782503327.482:76): pid=15320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2596" name="file1" dev="loop6" ino=1048663 res=0 errno=0 [ 997.651467][T15320] attempt to access beyond end of device [ 997.651467][T15320] loop6: rw=0, want=288, limit=256 [ 997.662332][ T25] audit: type=1804 audit(1782503327.822:77): pid=15320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2596" name="/newroot/264/file2/file1" dev="loop6" ino=1048663 res=1 errno=0 [ 997.727355][ T25] audit: type=1800 audit(1782503327.862:78): pid=15320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2596" name="file1" dev="loop6" ino=1048663 res=0 errno=0 [ 997.813332][T15333] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2602'. [ 1001.636347][T15389] loop7: detected capacity change from 0 to 40427 [ 1001.697489][T15392] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[15392] [ 1001.716039][T15392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2612'. [ 1001.746054][T15389] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1001.754339][T15389] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1001.778059][T15389] F2FS-fs (loop7): invalid crc value [ 1001.864517][T15389] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1001.930968][T15389] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1001.938200][T15389] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1002.460180][T15407] loop8: detected capacity change from 0 to 764 [ 1002.480323][T15403] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2616'. [ 1002.519498][T15407] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1005.182510][T15412] loop6: detected capacity change from 0 to 4096 [ 1005.203379][T15412] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 1005.341841][T15412] ntfs3: loop6: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 1005.406753][T15412] ntfs3: loop6: failed to read volume at offset 0x201800 [ 1005.430263][T15412] ntfs3: loop6: failed to read volume at offset 0x201800 [ 1005.437711][T15412] ntfs3: loop6: failed to read volume at offset 0x201800 [ 1005.445565][T15412] ntfs3: loop6: failed to read volume at offset 0x201800 [ 1005.457267][T15412] ntfs3: loop6: failed to read volume at offset 0x202800 [ 1005.475309][T15412] ntfs3: loop6: failed to read volume at offset 0x203800 [ 1005.482457][T15412] ntfs3: loop6: failed to read volume at offset 0x205800 [ 1005.490141][T15412] ntfs3: loop6: failed to read volume at offset 0x209800 [ 1007.743305][T15449] loop8: detected capacity change from 0 to 764 [ 1007.808475][T15449] rock: directory entry would overflow storage [ 1007.814903][T15449] rock: sig=0x4654, size=5, remaining=4 [ 1008.609532][T15457] siw: device registration error -23 [ 1008.622307][T15457] dlm: dev_write: no op 0 74000000000000 [ 1009.774533][T15460] loop6: detected capacity change from 0 to 40427 [ 1009.828965][T15460] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1009.836796][T15460] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1009.893922][T15460] F2FS-fs (loop6): invalid crc value [ 1009.942439][T15460] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1010.022223][T15460] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1010.029375][T15460] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1013.857957][T15495] device syzkaller0 entered promiscuous mode [ 1015.648287][T15517] device syzkaller0 entered promiscuous mode [ 1015.705138][T15517] tipc: Started in network mode [ 1015.730323][T15517] tipc: Node identity b6ee3ceafeee, cluster identity 4711 [ 1015.770129][T15517] tipc: Enabled bearer , priority 0 [ 1015.793402][T15516] tipc: Resetting bearer [ 1015.816916][T15516] tipc: Disabling bearer [ 1016.595832][T15526] loop8: detected capacity change from 0 to 40427 [ 1016.801506][T15526] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1016.809381][T15526] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1016.819504][T15526] F2FS-fs (loop8): invalid crc value [ 1016.890960][T15526] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1017.215047][T15526] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1017.222150][T15526] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1018.417637][T15546] loop7: detected capacity change from 0 to 512 [ 1018.451397][T15545] siw: device registration error -23 [ 1018.640249][T15546] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1018.672977][T15546] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.265230][T15558] xt_HMARK: spi-set and port-set can't be combined [ 1022.216026][T15592] loop8: detected capacity change from 0 to 128 [ 1022.707982][ T25] audit: type=1804 audit(1782503352.872:79): pid=15599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2654" name="/newroot/99/bus/file0" dev="loop8" ino=1048664 res=1 errno=0 [ 1023.710211][T15602] loop7: detected capacity change from 0 to 131072 [ 1023.777102][T15602] F2FS-fs (loop7): invalid crc value [ 1023.819279][T15602] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1025.194691][T15602] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 1027.894595][T15635] ipt_REJECT: ECHOREPLY no longer supported. [ 1027.916233][T15635] IPv6: NLM_F_CREATE should be specified when creating new route [ 1029.226040][T15645] loop8: detected capacity change from 0 to 764 [ 1032.388722][T15645] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1032.582590][T15659] loop6: detected capacity change from 0 to 764 [ 1032.646890][T15659] rock: directory entry would overflow storage [ 1032.653189][T15659] rock: sig=0x4654, size=5, remaining=4 [ 1034.632842][T15668] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1044.479533][T15750] loop8: detected capacity change from 0 to 1024 [ 1044.896628][T15766] overlayfs: failed to resolve './file0': -2 [ 1050.893716][T15820] Bluetooth: (null): Invalid header checksum [ 1050.912769][T15820] Bluetooth: (null): Invalid header checksum [ 1051.011962][T15820] Bluetooth: (null): Invalid header checksum [ 1051.034023][T15820] Bluetooth: (null): Invalid header checksum [ 1051.084945][T15825] Bluetooth: (null): Invalid header checksum [ 1051.194151][ T4559] Bluetooth: (null): Invalid header checksum [ 1051.414675][ T154] Bluetooth: (null): Invalid header checksum [ 1051.440985][ T154] Bluetooth: (null): Invalid header checksum [ 1051.572976][ T154] Bluetooth: (null): Invalid header checksum [ 1052.177431][ T154] Bluetooth: (null): Invalid header checksum [ 1052.253557][ T154] Bluetooth: (null): Invalid header checksum [ 1052.259842][ T154] Bluetooth: (null): Invalid header checksum [ 1052.266028][ T154] Bluetooth: (null): Invalid header checksum [ 1052.272147][ T154] Bluetooth: (null): Invalid header checksum [ 1052.278247][ T154] Bluetooth: (null): Invalid header checksum [ 1052.295944][ T154] Bluetooth: (null): Invalid header checksum [ 1052.405488][T15817] Bluetooth: (null): Invalid header checksum [ 1053.479680][ T4559] Bluetooth: (null): Invalid header checksum [ 1053.515800][ T4559] Bluetooth: (null): Invalid header checksum [ 1054.394246][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.400588][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.464125][ T4559] Bluetooth: (null): Invalid header checksum [ 1054.510789][ T4559] Bluetooth: (null): Invalid header checksum [ 1054.532504][T15871] loop8: detected capacity change from 0 to 16 [ 1054.543837][ T4559] Bluetooth: (null): Invalid header checksum [ 1054.575301][T15871] erofs: (device loop8): mounted with root inode @ nid 36. [ 1054.599277][ T4559] Bluetooth: (null): Invalid header checksum [ 1054.643462][ T4559] Bluetooth: (null): Invalid header checksum [ 1055.241396][ T4559] Bluetooth: (null): Invalid header checksum [ 1055.286932][ T4559] Bluetooth: (null): Invalid header checksum [ 1055.862640][ T4559] Bluetooth: (null): Invalid header checksum [ 1055.879090][ T4559] Bluetooth: (null): Invalid header checksum [ 1055.905535][ T4559] Bluetooth: (null): Invalid header checksum [ 1055.983940][ T4559] Bluetooth: (null): Invalid header checksum [ 1055.990107][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.048667][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.066291][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.092803][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.102876][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.131812][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.179074][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.203915][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.761612][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.777348][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.783475][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.800183][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.812746][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.826213][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.838609][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.916899][ T4559] Bluetooth: (null): Invalid header checksum [ 1056.949903][ T4559] Bluetooth: (null): Invalid header checksum [ 1057.006946][ T4559] Bluetooth: (null): Invalid header checksum [ 1057.079587][ T4559] Bluetooth: (null): Invalid header checksum [ 1057.186338][ T4559] Bluetooth: (null): Invalid header checksum [ 1057.285220][ T4559] Bluetooth: (null): Invalid header checksum [ 1057.375870][ T4559] Bluetooth: (null): Invalid header checksum [ 1058.194022][T15906] device batadv_slave_0 entered promiscuous mode [ 1058.946042][T15129] Process accounting resumed [ 1058.988347][T15904] device batadv_slave_0 left promiscuous mode [ 1059.355720][T15925] loop7: detected capacity change from 0 to 40427 [ 1059.945505][T15925] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1059.953301][T15925] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1059.964627][T15925] F2FS-fs (loop7): invalid crc value [ 1060.516032][T15925] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1060.554869][T15925] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1060.561976][T15925] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1060.728842][T15953] attempt to access beyond end of device [ 1060.728842][T15953] loop7: rw=34817, want=77856, limit=40427 [ 1063.031336][T15988] overlayfs: failed to clone upperpath [ 1063.673415][ T3854] device veth1_vlan left promiscuous mode [ 1066.188283][T16000] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1066.194837][T16000] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1066.246571][T16000] vhci_hcd vhci_hcd.0: Device attached [ 1066.282454][T16007] vhci_hcd: connection closed [ 1066.282849][T15817] vhci_hcd: stop threads [ 1066.294016][T15817] vhci_hcd: release socket [ 1066.298458][T15817] vhci_hcd: disconnect device [ 1067.049129][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2746'. [ 1067.058266][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2746'. [ 1067.073864][T16028] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2746'. [ 1068.253207][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2762'. [ 1068.262460][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2762'. [ 1068.272766][T16050] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2762'. [ 1072.174195][T16058] overlayfs: failed to clone upperpath [ 1072.531883][T16072] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1072.592470][T16078] netlink: 'syz.5.2756': attribute type 29 has an invalid length. [ 1072.687881][T16078] netlink: 'syz.5.2756': attribute type 29 has an invalid length. [ 1075.040217][T16103] loop8: detected capacity change from 0 to 40427 [ 1075.761358][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2766'. [ 1075.770925][T16102] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2766'. [ 1075.874672][T16103] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1075.882454][T16103] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1075.900847][T16103] F2FS-fs (loop8): invalid crc value [ 1075.985519][T16103] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1076.159353][T16103] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1076.166514][T16103] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1076.361765][T16118] SET target dimension over the limit! [ 1076.563973][T16120] attempt to access beyond end of device [ 1076.563973][T16120] loop8: rw=34817, want=77856, limit=40427 [ 1076.611954][T16114] loop6: detected capacity change from 0 to 2048 [ 1076.709410][T16114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1077.653055][T16126] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2771'. [ 1077.753540][T16132] batman_adv: batadv0: Adding interface: macvtap1 [ 1077.770456][T16132] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.012043][T16132] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1078.399116][T16136] batman_adv: batadv0: Removing interface: macvtap1 [ 1078.647983][T16141] loop6: detected capacity change from 0 to 764 [ 1078.690803][T16141] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1081.427491][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2779'. [ 1081.437098][T16158] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2779'. [ 1082.095231][T16178] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2785'. [ 1082.360531][T16180] device ip6_vti0 left promiscuous mode [ 1082.387992][T16180] device bond0 left promiscuous mode [ 1082.406167][T16180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.416818][T16180] device team0 left promiscuous mode [ 1082.422163][T16180] device team_slave_0 left promiscuous mode [ 1082.428783][T16180] device team_slave_1 left promiscuous mode [ 1082.439618][T16180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.115309][T16176] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2788'. [ 1086.191381][T16180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1087.504300][T16204] overlayfs: failed to clone upperpath [ 1089.585471][T16234] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2800'. [ 1090.390437][T16235] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2801'. [ 1090.405081][T16243] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2802'. [ 1091.117485][T16259] loop7: detected capacity change from 0 to 1024 [ 1092.472667][T16283] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2812'. [ 1094.441759][T16307] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2815'. [ 1094.576130][T16314] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2819'. [ 1096.113351][T16308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1096.649679][T16339] hub 8-0:1.0: USB hub found [ 1096.655308][T16339] hub 8-0:1.0: 1 port detected [ 1097.171697][T16349] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2824'. [ 1097.323578][T16356] loop7: detected capacity change from 0 to 512 [ 1098.392536][T16356] EXT4-fs (loop7): 1 orphan inode deleted [ 1098.413693][T16356] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 1098.486678][T16356] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.532112][T16375] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2830'. [ 1098.857783][T16374] loop8: detected capacity change from 0 to 764 [ 1099.382087][T16374] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1100.426719][T16389] loop6: detected capacity change from 0 to 1024 [ 1100.557516][T16389] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 1100.705741][T16389] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.866927][T16401] loop7: detected capacity change from 0 to 2048 [ 1101.040112][T16401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1101.054256][T16400] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2841'. [ 1101.473847][ T25] audit: type=1800 audit(1782503431.632:80): pid=16403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2836" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1102.128373][T16409] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 38692 - 0 [ 1102.199096][T16409] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 38692 - 0 [ 1102.246231][T16409] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 38692 - 0 [ 1102.272238][T16409] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 38692 - 0 [ 1102.281272][T16409] device geneve2 entered promiscuous mode [ 1102.349677][T16413] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.380412][T16413] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 38692 - 0 [ 1102.818620][T16424] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2846'. [ 1105.242268][T16442] loop8: detected capacity change from 0 to 512 [ 1105.386074][T16448] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2853'. [ 1105.925284][T16442] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1107.028027][T16465] loop6: detected capacity change from 0 to 128 [ 1107.109761][T16465] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1108.058085][T16476] loop7: detected capacity change from 0 to 764 [ 1108.410218][ T4270] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1108.746829][T16476] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1108.846147][T16482] loop8: detected capacity change from 0 to 764 [ 1108.910110][T16482] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1109.039382][T16490] loop6: detected capacity change from 0 to 512 [ 1109.124039][T16490] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1109.272214][T16490] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 1109.357056][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1109.389640][T16503] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2865'. [ 1109.689747][T16490] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #16: comm syz.6.2861: corrupted inode contents [ 1110.123817][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1110.130474][T16490] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #16: comm syz.6.2861: mark_inode_dirty error [ 1110.142503][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1110.149658][T16490] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #16: comm syz.6.2861: corrupted inode contents [ 1110.172404][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1110.179050][T16490] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.2861: mark_inode_dirty error [ 1110.204621][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1110.211872][T16490] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #16: comm syz.6.2861: corrupted inode contents [ 1110.234393][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1110.240919][T16490] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.2861: mark_inode_dirty error [ 1110.271296][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1110.328476][T16490] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #16: comm syz.6.2861: corrupted inode contents [ 1110.347311][ T25] audit: type=1800 audit(1782503440.522:81): pid=16513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2869" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1110.404568][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2868'. [ 1110.414682][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.432611][T16516] device bridge_slave_0 left promiscuous mode [ 1110.439504][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.619063][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1110.625794][T16490] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1110.635774][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1110.642483][T16490] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #16: comm syz.6.2861: corrupted inode contents [ 1110.654957][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1110.661560][T16490] EXT4-fs error (device loop6): ext4_truncate:4286: inode #16: comm syz.6.2861: mark_inode_dirty error [ 1110.784072][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1110.806691][T16490] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1111.145353][T16516] bond0: (slave bridge0): Releasing backup interface [ 1111.162404][T16490] EXT4-fs (loop6): Remounting filesystem read-only [ 1111.193379][T16490] EXT4-fs (loop6): 1 truncate cleaned up [ 1111.212870][T16490] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 1111.330769][T16490] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.840935][T16547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2877'. [ 1114.065787][T16554] SET target dimension over the limit! [ 1114.079639][T16553] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2878'. [ 1115.032644][T16570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2883'. [ 1115.056517][T16569] loop8: detected capacity change from 0 to 512 [ 1115.157999][T16569] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #15: comm syz.8.2881: iget: bad i_size value: 38620345925642 [ 1115.592699][T16569] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.2881: couldn't read orphan inode 15 (err -117) [ 1115.744827][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.756205][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.864325][T16569] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 1115.971579][T16589] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.2881: bg 0: block 5: invalid block bitmap [ 1116.016253][T16589] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 156 with error 28 [ 1120.025421][T16589] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1120.025421][T16589] [ 1120.040254][T16589] EXT4-fs (loop8): Total free blocks count 0 [ 1120.065235][T16589] EXT4-fs (loop8): Free/Dirty block details [ 1120.081990][T16589] EXT4-fs (loop8): free_blocks=0 [ 1120.087576][T16589] EXT4-fs (loop8): dirty_blocks=156 [ 1120.092878][T16589] EXT4-fs (loop8): Block reservation details [ 1120.099513][T16589] EXT4-fs (loop8): i_reserved_data_blocks=156 [ 1120.246674][ T2303] Process accounting resumed [ 1121.074606][ T25] audit: type=1326 audit(1782503451.212:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.5.2890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a915bce59 code=0x7ffc0000 [ 1121.605612][T16615] SET target dimension over the limit! [ 1122.284508][ T25] audit: type=1326 audit(1782503451.212:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.5.2890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a915bce59 code=0x7ffc0000 [ 1122.327613][T16619] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2892'. [ 1122.951547][ T25] audit: type=1326 audit(1782503451.242:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.5.2890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f4a915bce59 code=0x7ffc0000 [ 1122.980591][T16629] loop6: detected capacity change from 0 to 764 [ 1123.004182][ T25] audit: type=1326 audit(1782503451.242:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.5.2890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a915bce59 code=0x7ffc0000 [ 1123.067783][ T25] audit: type=1326 audit(1782503451.242:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.5.2890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a915bce59 code=0x7ffc0000 [ 1123.093109][ T25] audit: type=1326 audit(1782503451.252:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.5.2890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f4a915bce59 code=0x7ffc0000 [ 1123.117139][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.218290][T16629] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1125.942585][T16643] loop8: detected capacity change from 0 to 40427 [ 1126.053133][T16643] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1126.061023][T16643] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1126.101085][T16643] F2FS-fs (loop8): invalid crc value [ 1126.145606][T16665] loop7: detected capacity change from 0 to 256 [ 1126.153459][T16643] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1126.906349][T16665] exfat: Deprecated parameter 'namecase' [ 1126.920573][T16643] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1126.927795][T16643] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1126.941087][T16665] exfat: Deprecated parameter 'utf8' [ 1126.969292][T16665] exfat: Deprecated parameter 'namecase' [ 1126.976242][T16665] exfat: Unknown parameter 'namecaõe' [ 1128.677082][T16688] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2911'. [ 1129.562395][T16694] loop6: detected capacity change from 0 to 512 [ 1130.607044][T16694] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1130.792174][T16694] ext4 filesystem being mounted at /320/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1131.624626][T16716] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.633346][T16716] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.642252][T16716] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.650969][T16716] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1133.133556][T16716] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.142904][T16716] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.151886][T16716] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.160763][T16716] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.213966][T16737] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2924'. [ 1135.241154][T16752] device syzkaller0 entered promiscuous mode [ 1137.770648][T16792] autofs4:pid:16792:autofs_fill_super: called with bogus options [ 1137.930822][T16793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1137.960878][T16793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1137.971596][T16793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1139.055224][T16788] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2935'. [ 1141.033291][T16821] loop6: detected capacity change from 0 to 512 [ 1141.568687][T16821] EXT4-fs (loop6): 1 orphan inode deleted [ 1141.580778][T16821] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 1141.613072][T16821] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1141.634144][T16832] device syzkaller0 entered promiscuous mode [ 1143.747812][T16862] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2950'. [ 1143.759825][T16862] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2950'. [ 1144.196390][T16876] loop7: detected capacity change from 0 to 1024 [ 1145.679975][T15820] hfsplus: b-tree write err: -5, ino 25 [ 1145.694107][T15820] hfsplus: b-tree write err: -5, ino 4 [ 1145.719443][T15820] hfsplus: b-tree write err: -5, ino 2 [ 1145.830999][T16908] loop8: detected capacity change from 0 to 512 [ 1145.937358][T16916] MTD: Couldn't look up '/dev/nullb0': -15 [ 1146.021839][T16908] EXT4-fs (loop8): 1 orphan inode deleted [ 1146.097500][T16908] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 1146.115599][T16928] xt_NFQUEUE: number of queues (4096) out of range (got 67070) [ 1146.180627][T16908] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.227471][T16917] device syzkaller0 entered promiscuous mode [ 1148.083013][T16935] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2968'. [ 1148.093464][T16935] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2968'. [ 1150.840913][T16988] kernel profiling enabled (shift: 9) [ 1151.695940][T16997] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2985'. [ 1151.708493][T16997] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2985'. [ 1152.703569][T16983] device syzkaller0 entered promiscuous mode [ 1156.191978][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2993'. [ 1156.983614][T17040] futex_wake_op: syz.2.2996 tries to shift op by 144; fix this program [ 1161.553108][T17079] device syzkaller0 entered promiscuous mode [ 1162.849110][T17099] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1165.460988][T17125] loop7: detected capacity change from 0 to 40427 [ 1165.510733][T17125] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 1165.517212][T17125] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1165.533591][T17125] F2FS-fs (loop7): invalid crc value [ 1165.573472][T17125] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1165.638250][T17125] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1165.645581][T17125] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1165.944291][T17144] device syz_tun left promiscuous mode [ 1165.956107][T17144] bridge0: port 3(syz_tun) entered disabled state [ 1165.975023][T17144] bond0: (slave bridge0): Releasing backup interface [ 1165.991505][T17144] device bridge0 left promiscuous mode [ 1166.034018][T17144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.041689][T17144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.317854][T17144] batman_adv: batadv0: Interface deactivated: dummy0 [ 1166.332497][T17144] batman_adv: batadv0: Removing interface: dummy0 [ 1166.340963][T17144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1166.357327][T17144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1166.372338][T17144] device bridge_slave_0 left promiscuous mode [ 1166.383285][T17144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.841607][T17144] device bridge_slave_1 left promiscuous mode [ 1166.852937][T17144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.888859][T17144] bond0: (slave bond_slave_1): Releasing backup interface [ 1166.941665][T17144] device bond_slave_1 left promiscuous mode [ 1167.425152][T17144] team0: Port device team_slave_0 removed [ 1167.588376][T17144] team0: Port device team_slave_1 removed [ 1168.392996][T17144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.400901][T17144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.409657][T17144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.417912][T17144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.435249][T17144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1168.458339][T17144] bond1: (slave macvlan2): Releasing active interface [ 1168.467998][T17144] bond1: (slave macvlan2): the permanent HWaddr of slave - 36:26:6b:6e:4c:23 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1168.560985][T17144] bond1: (slave ip6gretap1): making interface the new active one [ 1168.591143][T17144] bond1: (slave ip6gretap1): Releasing active interface [ 1170.044930][ T9756] attempt to access beyond end of device [ 1170.044930][ T9756] loop7: rw=2049, want=45104, limit=40427 [ 1170.158405][T17183] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 1173.088355][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 1174.590271][T17202] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 1175.804057][T17226] device syzkaller0 entered promiscuous mode [ 1177.146978][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.153376][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.691509][T17271] loop8: detected capacity change from 0 to 4096 [ 1179.748190][T17271] ntfs3: Unknown parameter 'Ÿ6ä‡SËvj' [ 1180.576461][T17275] loop6: detected capacity change from 0 to 764 [ 1180.895223][T17275] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1183.923515][T17317] loop7: detected capacity change from 0 to 128 [ 1184.085488][T17319] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1184.477609][T17317] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1184.490121][T17317] hpfs: filesystem error: improperly stopped [ 1184.496203][T17317] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1184.503987][T17317] hpfs: You really don't want any checks? You are crazy... [ 1184.511671][T17317] hpfs: hpfs_map_sector(): read error [ 1184.517309][T17317] hpfs: code page support is disabled [ 1184.523648][T17317] hpfs: hpfs_map_4sectors(): unaligned read [ 1184.529871][T17317] hpfs: hpfs_map_4sectors(): unaligned read [ 1184.535857][T17317] hpfs: filesystem error: unable to find root dir [ 1185.810802][T17331] loop8: detected capacity change from 0 to 4096 [ 1186.161685][T17334] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1186.267184][T17340] loop7: detected capacity change from 0 to 64 [ 1187.647527][T17331] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean [ 1187.866582][T17340] hfs: found bad thread record in catalog [ 1187.918461][T17340] hfs: get root inode failed [ 1190.373625][T17373] loop6: detected capacity change from 0 to 128 [ 1190.385182][T17371] loop8: detected capacity change from 0 to 16 [ 1190.425188][T17373] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1190.437046][T17373] hpfs: filesystem error: improperly stopped [ 1190.443040][T17373] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1190.450851][T17373] hpfs: You really don't want any checks? You are crazy... [ 1190.458469][T17373] hpfs: hpfs_map_sector(): read error [ 1190.464001][T17373] hpfs: code page support is disabled [ 1190.472084][T17373] hpfs: hpfs_map_4sectors(): unaligned read [ 1190.479246][T17373] hpfs: hpfs_map_4sectors(): unaligned read [ 1190.485820][T17373] hpfs: filesystem error: unable to find root dir [ 1190.577431][T17371] erofs: (device loop8): mounted with root inode @ nid 36. [ 1190.897179][T17380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1190.929551][T17380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1190.940415][T17380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1191.074718][T17380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1191.432521][T17382] MTD: Couldn't look up '/dev/nullb0': -15 [ 1191.614458][T17389] attempt to access beyond end of device [ 1191.614458][T17389] loop8: rw=0, want=304, limit=16 [ 1191.626245][T17389] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1192.966024][T17398] loop6: detected capacity change from 0 to 764 [ 1193.259427][T17398] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1193.984306][T17412] netlink: 'syz.5.3091': attribute type 49 has an invalid length. [ 1197.213272][T17424] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1197.236578][T17424] VFS: Can't find a romfs filesystem on dev nullb0. [ 1197.236578][T17424] [ 1199.883617][T17473] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3116'. [ 1200.161575][T17477] loop6: detected capacity change from 0 to 764 [ 1200.204795][T17477] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1200.671164][T17481] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1201.589242][T17490] loop7: detected capacity change from 0 to 764 [ 1201.834818][T17490] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1203.220141][T15129] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1203.358431][T17522] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3119'. [ 1203.813890][T15129] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1204.128105][T15129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.136207][T15129] usb 7-1: Product: syz [ 1204.141371][T15129] usb 7-1: Manufacturer: syz [ 1204.146054][T15129] usb 7-1: SerialNumber: syz [ 1204.161778][T15129] usb 7-1: config 0 descriptor?? [ 1204.218856][T17527] syz.2.3120 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1204.482612][T15129] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1206.094703][T15129] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -110 [ 1207.460187][T15129] usb 7-1: USB disconnect, device number 6 [ 1208.096061][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3128'. [ 1209.505649][T17568] loop8: detected capacity change from 0 to 256 [ 1209.593403][T17571] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1210.277033][T17568] FAT-fs (loop8): Directory bread(block 64) failed [ 1210.397741][T17568] FAT-fs (loop8): Directory bread(block 65) failed [ 1210.404600][T17568] FAT-fs (loop8): Directory bread(block 66) failed [ 1210.411127][T17568] FAT-fs (loop8): Directory bread(block 67) failed [ 1210.418020][T17568] FAT-fs (loop8): Directory bread(block 68) failed [ 1210.424752][T17568] FAT-fs (loop8): Directory bread(block 69) failed [ 1210.431299][T17568] FAT-fs (loop8): Directory bread(block 70) failed [ 1210.438425][T17568] FAT-fs (loop8): Directory bread(block 71) failed [ 1210.445268][T17568] FAT-fs (loop8): Directory bread(block 72) failed [ 1210.451801][T17568] FAT-fs (loop8): Directory bread(block 73) failed [ 1212.455227][T17613] loop6: detected capacity change from 0 to 764 [ 1212.706576][T17613] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1213.719417][T17626] loop8: detected capacity change from 0 to 40427 [ 1213.825613][T17626] F2FS-fs (loop8): invalid crc value [ 1213.905386][T17626] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1213.941140][T17626] F2FS-fs (loop8): Start checkpoint disabled! [ 1214.001949][T17626] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1214.385258][T17634] netlink: 'syz.8.3146': attribute type 1 has an invalid length. [ 1215.293102][T17638] loop7: detected capacity change from 0 to 256 [ 1215.352358][ T4409] attempt to access beyond end of device [ 1215.352358][ T4409] loop8: rw=2049, want=40976, limit=40427 [ 1215.398722][T17640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3151'. [ 1215.409579][T17638] FAT-fs (loop7): Directory bread(block 64) failed [ 1215.424002][T17638] FAT-fs (loop7): Directory bread(block 65) failed [ 1215.465676][T17638] FAT-fs (loop7): Directory bread(block 66) failed [ 1215.503451][T17638] FAT-fs (loop7): Directory bread(block 67) failed [ 1215.533083][T17638] FAT-fs (loop7): Directory bread(block 68) failed [ 1215.570314][T17638] FAT-fs (loop7): Directory bread(block 69) failed [ 1215.623795][T17638] FAT-fs (loop7): Directory bread(block 70) failed [ 1215.631136][T17638] FAT-fs (loop7): Directory bread(block 71) failed [ 1215.645244][T17638] FAT-fs (loop7): Directory bread(block 72) failed [ 1215.652935][T17638] FAT-fs (loop7): Directory bread(block 73) failed [ 1215.902255][T17661] SET target dimension over the limit! [ 1218.790007][T17680] loop6: detected capacity change from 0 to 764 [ 1218.796939][T17678] xt_l2tp: unknown flags: 17 [ 1218.929210][T17678] loop7: detected capacity change from 0 to 32768 [ 1218.977778][T17685] MTD: Couldn't look up '/dev/nullb0': -15 [ 1219.008103][T17680] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1221.472839][T17721] loop7: detected capacity change from 0 to 1024 [ 1221.631402][T17721] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1221.682515][T17721] EXT4-fs (loop7): invalid journal inode [ 1221.773138][T17721] EXT4-fs (loop7): can't get journal size [ 1221.945802][T17721] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 1223.286854][T17738] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1223.311475][T17738] VFS: Can't find a romfs filesystem on dev nullb0. [ 1223.311475][T17738] [ 1224.304901][ T8400] [ 1224.307269][ T8400] ====================================================== [ 1224.314281][ T8400] WARNING: possible circular locking dependency detected [ 1224.321301][ T8400] syzkaller #0 Not tainted [ 1224.325711][ T8400] ------------------------------------------------------ [ 1224.332341][T17757] device syzkaller0 entered promiscuous mode [ 1224.332714][ T8400] syz-executor/8400 is trying to acquire lock: [ 1224.344814][ T8400] ffff88814ca30138 ((wq_completion)loop6){+.+.}-{0:0}, at: flush_workqueue+0x14e/0x1390 [ 1224.354559][ T8400] [ 1224.354559][ T8400] but task is already holding lock: [ 1224.361903][ T8400] ffff888020a0c468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 1224.370737][ T8400] [ 1224.370737][ T8400] which lock already depends on the new lock. [ 1224.370737][ T8400] [ 1224.381118][ T8400] [ 1224.381118][ T8400] the existing dependency chain (in reverse order) is: [ 1224.390111][ T8400] [ 1224.390111][ T8400] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 1224.397563][ T8400] __mutex_lock_common+0x1e5/0x2400 [ 1224.403274][ T8400] mutex_lock_killable_nested+0x17/0x20 [ 1224.409320][ T8400] lo_open+0x6a/0x100 [ 1224.413804][ T8400] blkdev_get_whole+0x90/0x390 [ 1224.419145][ T8400] blkdev_get_by_dev+0x2da/0xa50 [ 1224.424579][ T8400] blkdev_open+0x128/0x2c0 [ 1224.429496][ T8400] do_dentry_open+0x7f7/0xf90 [ 1224.434746][ T8400] path_openat+0x2718/0x2fb0 [ 1224.439844][ T8400] do_filp_open+0x1df/0x400 [ 1224.444842][ T8400] do_sys_openat2+0x14b/0x500 [ 1224.450014][ T8400] __x64_sys_openat+0x135/0x160 [ 1224.455370][ T8400] do_syscall_64+0x4c/0xa0 [ 1224.460286][ T8400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1224.466677][ T8400] [ 1224.466677][ T8400] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 1224.474470][ T8400] __mutex_lock_common+0x1e5/0x2400 [ 1224.480169][ T8400] mutex_lock_nested+0x17/0x20 [ 1224.485431][ T8400] blkdev_get_by_dev+0x162/0xa50 [ 1224.490865][ T8400] swsusp_check+0xa1/0x2b0 [ 1224.495799][ T8400] software_resume+0xc6/0x3b0 [ 1224.500972][ T8400] resume_store+0xe4/0x130 [ 1224.505883][ T8400] kernfs_fop_write_iter+0x3a8/0x500 [ 1224.511715][ T8400] vfs_write+0x748/0xd70 [ 1224.516461][ T8400] ksys_write+0x153/0x260 [ 1224.521301][ T8400] do_syscall_64+0x4c/0xa0 [ 1224.526220][ T8400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1224.532617][ T8400] [ 1224.532617][ T8400] -> #5 (system_transition_mutex/1){+.+.}-{3:3}: [ 1224.541117][ T8400] __mutex_lock_common+0x1e5/0x2400 [ 1224.546820][ T8400] mutex_lock_nested+0x17/0x20 [ 1224.552088][ T8400] software_resume+0x7c/0x3b0 [ 1224.557271][ T8400] resume_store+0xe4/0x130 [ 1224.562186][ T8400] kernfs_fop_write_iter+0x3a8/0x500 [ 1224.567970][ T8400] vfs_write+0x748/0xd70 [ 1224.572709][ T8400] ksys_write+0x153/0x260 [ 1224.577546][ T8400] do_syscall_64+0x4c/0xa0 [ 1224.582474][ T8400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1224.588877][ T8400] [ 1224.588877][ T8400] -> #4 (&of->mutex){+.+.}-{3:3}: [ 1224.596080][ T8400] __mutex_lock_common+0x1e5/0x2400 [ 1224.601782][ T8400] mutex_lock_nested+0x17/0x20 [ 1224.607049][ T8400] kernfs_seq_start+0x55/0x3c0 [ 1224.612320][ T8400] seq_read_iter+0x387/0xc50 [ 1224.617481][ T8400] vfs_read+0x75e/0xd50 [ 1224.622136][ T8400] ksys_read+0x153/0x260 [ 1224.626874][ T8400] do_syscall_64+0x4c/0xa0 [ 1224.631793][ T8400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1224.638183][ T8400] [ 1224.638183][ T8400] -> #3 (&p->lock){+.+.}-{3:3}: [ 1224.645197][ T8400] __mutex_lock_common+0x1e5/0x2400 [ 1224.650898][ T8400] mutex_lock_nested+0x17/0x20 [ 1224.656160][ T8400] seq_read_iter+0x9d/0xc50 [ 1224.661160][ T8400] generic_file_splice_read+0x3ed/0x5f0 [ 1224.667266][ T8400] splice_direct_to_actor+0x41f/0xc00 [ 1224.673136][ T8400] do_splice_direct+0x1d4/0x2f0 [ 1224.678481][ T8400] do_sendfile+0x524/0xe30 [ 1224.683394][ T8400] __se_sys_sendfile64+0x141/0x1a0 [ 1224.689001][ T8400] do_syscall_64+0x4c/0xa0 [ 1224.693918][ T8400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1224.700309][ T8400] [ 1224.700309][ T8400] -> #2 (sb_writers#3){.+.+}-{0:0}: [ 1224.707668][ T8400] lo_write_bvec+0x194/0x780 [ 1224.712758][ T8400] loop_process_work+0x1b66/0x24c0 [ 1224.718404][ T8400] process_one_work+0x867/0xff0 [ 1224.723758][ T8400] worker_thread+0xad7/0x12a0 [ 1224.729022][ T8400] kthread+0x42e/0x520 [ 1224.733591][ T8400] ret_from_fork+0x1f/0x30 [ 1224.738508][ T8400] [ 1224.738508][ T8400] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1224.747603][ T8400] process_one_work+0x7ba/0xff0 [ 1224.752956][ T8400] worker_thread+0xad7/0x12a0 [ 1224.758131][ T8400] kthread+0x42e/0x520 [ 1224.762697][ T8400] ret_from_fork+0x1f/0x30 [ 1224.767612][ T8400] [ 1224.767612][ T8400] -> #0 ((wq_completion)loop6){+.+.}-{0:0}: [ 1224.775661][ T8400] __lock_acquire+0x2c66/0x7b50 [ 1224.781011][ T8400] lock_acquire+0x19e/0x400 [ 1224.786016][ T8400] flush_workqueue+0x16a/0x1390 [ 1224.791368][ T8400] drain_workqueue+0xca/0x370 [ 1224.796541][ T8400] destroy_workqueue+0x7b/0xb20 [ 1224.801890][ T8400] __loop_clr_fd+0x22f/0xb50 [ 1224.806975][ T8400] blkdev_put+0x52b/0x780 [ 1224.811801][ T8400] deactivate_locked_super+0x93/0xf0 [ 1224.817584][ T8400] cleanup_mnt+0x426/0x4d0 [ 1224.822496][ T8400] task_work_run+0x125/0x1a0 [ 1224.827586][ T8400] exit_to_user_mode_loop+0x10f/0x130 [ 1224.833513][ T8400] exit_to_user_mode_prepare+0xee/0x180 [ 1224.839564][ T8400] syscall_exit_to_user_mode+0x16/0x40 [ 1224.845570][ T8400] do_syscall_64+0x58/0xa0 [ 1224.850486][ T8400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1224.856880][ T8400] [ 1224.856880][ T8400] other info that might help us debug this: [ 1224.856880][ T8400] [ 1224.867083][ T8400] Chain exists of: [ 1224.867083][ T8400] (wq_completion)loop6 --> &disk->open_mutex --> &lo->lo_mutex [ 1224.867083][ T8400] [ 1224.880521][ T8400] Possible unsafe locking scenario: [ 1224.880521][ T8400] [ 1224.887952][ T8400] CPU0 CPU1 [ 1224.893289][ T8400] ---- ---- [ 1224.898639][ T8400] lock(&lo->lo_mutex); [ 1224.902946][ T8400] lock(&disk->open_mutex); [ 1224.910118][ T8400] lock(&lo->lo_mutex); [ 1224.916942][ T8400] lock((wq_completion)loop6); [ 1224.921774][ T8400] [ 1224.921774][ T8400] *** DEADLOCK *** [ 1224.921774][ T8400] [ 1224.929896][ T8400] 2 locks held by syz-executor/8400: [ 1224.935156][ T8400] #0: ffff88802084d918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf1/0x780 [ 1224.944457][ T8400] #1: ffff888020a0c468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 1224.953741][ T8400] [ 1224.953741][ T8400] stack backtrace: [ 1224.959605][ T8400] CPU: 1 PID: 8400 Comm: syz-executor Not tainted syzkaller #0 [ 1224.967215][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1224.977342][ T8400] Call Trace: [ 1224.980602][ T8400] [ 1224.983517][ T8400] dump_stack_lvl+0x188/0x250 [ 1224.988182][ T8400] ? load_image+0x410/0x410 [ 1224.992665][ T8400] ? show_regs_print_info+0x20/0x20 [ 1224.997844][ T8400] ? print_circular_bug+0x12b/0x1a0 [ 1225.003113][ T8400] check_noncircular+0x296/0x330 [ 1225.008033][ T8400] ? add_chain_block+0x9b0/0x9b0 [ 1225.012947][ T8400] ? lockdep_lock+0xf1/0x1f0 [ 1225.017524][ T8400] ? mark_lock+0x94/0x320 [ 1225.021832][ T8400] ? _find_first_zero_bit+0xd1/0xf0 [ 1225.027043][ T8400] __lock_acquire+0x2c66/0x7b50 [ 1225.031886][ T8400] ? verify_lock_unused+0x140/0x140 [ 1225.037156][ T8400] ? verify_lock_unused+0x140/0x140 [ 1225.042338][ T8400] ? verify_lock_unused+0x140/0x140 [ 1225.047518][ T8400] ? verify_lock_unused+0x140/0x140 [ 1225.052695][ T8400] ? verify_lock_unused+0x140/0x140 [ 1225.057873][ T8400] ? memset+0x1e/0x40 [ 1225.061919][ T8400] lock_acquire+0x19e/0x400 [ 1225.066403][ T8400] ? flush_workqueue+0x14e/0x1390 [ 1225.071418][ T8400] ? __mutex_trylock_common+0x15c/0x260 [ 1225.076945][ T8400] ? read_lock_is_recursive+0x10/0x10 [ 1225.082297][ T8400] ? __init_swait_queue_head+0xa4/0x140 [ 1225.087821][ T8400] flush_workqueue+0x16a/0x1390 [ 1225.092651][ T8400] ? flush_workqueue+0x14e/0x1390 [ 1225.097676][ T8400] ? lock_chain_count+0x20/0x20 [ 1225.102508][ T8400] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1225.107957][ T8400] ? lockdep_hardirqs_off+0x70/0x100 [ 1225.113229][ T8400] ? drain_workqueue+0x2f/0x370 [ 1225.118060][ T8400] ? rcu_work_rcufn+0x120/0x120 [ 1225.122977][ T8400] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1225.128609][ T8400] ? finish_wait+0xc3/0x1c0 [ 1225.133116][ T8400] drain_workqueue+0xca/0x370 [ 1225.137785][ T8400] destroy_workqueue+0x7b/0xb20 [ 1225.142628][ T8400] __loop_clr_fd+0x22f/0xb50 [ 1225.147224][ T8400] ? bdev_evict_inode+0x30/0x30 [ 1225.152062][ T8400] ? lo_release+0x15e/0x1f0 [ 1225.156550][ T8400] ? lo_open+0x100/0x100 [ 1225.160772][ T8400] blkdev_put+0x52b/0x780 [ 1225.165086][ T8400] deactivate_locked_super+0x93/0xf0 [ 1225.170355][ T8400] cleanup_mnt+0x426/0x4d0 [ 1225.174754][ T8400] task_work_run+0x125/0x1a0 [ 1225.179328][ T8400] exit_to_user_mode_loop+0x10f/0x130 [ 1225.184687][ T8400] exit_to_user_mode_prepare+0xee/0x180 [ 1225.190226][ T8400] syscall_exit_to_user_mode+0x16/0x40 [ 1225.195667][ T8400] do_syscall_64+0x58/0xa0 [ 1225.200096][ T8400] ? clear_bhb_loop+0x30/0x80 [ 1225.204757][ T8400] ? clear_bhb_loop+0x30/0x80 [ 1225.209417][ T8400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1225.215301][ T8400] RIP: 0033:0x7f5a65ad3097 [ 1225.219702][ T8400] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1225.239363][ T8400] RSP: 002b:00007ffd126e0ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1225.247813][ T8400] RAX: 0000000000000000 RBX: 00007f5a65b672ca RCX: 00007f5a65ad3097 [ 1225.256120][ T8400] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd126e0fb0 [ 1225.264089][ T8400] RBP: 00007ffd126e0fb0 R08: 00007ffd126e1fb0 R09: 00000000ffffffff [ 1225.272050][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd126e2040 [ 1225.280008][ T8400] R13: 00007f5a65b672ca R14: 0000000000129fce R15: 00007ffd126e2080 [ 1225.287971][ T8400] [ 1225.309435][T17760] overlayfs: failed to clone lowerpath [ 1225.528245][T17761] MTD: Couldn't look up '/dev/nullb0': -15