last executing test programs: 15m33.445904253s ago: executing program 0 (id=19): syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @mcast2, 0xd}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4040010) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, 0x0, 0x0) futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x2) recvmmsg(r3, &(0x7f0000004b80), 0x0, 0x10000, 0x0) 15m30.692549813s ago: executing program 0 (id=23): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') fanotify_init(0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000880)={'wg0\x00'}) socket$inet(0x2, 0x2, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x1000000000007d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 15m27.333194451s ago: executing program 0 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f00000003c0)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 15m26.240493912s ago: executing program 0 (id=29): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") r3 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./dummy\x00', 0x42, 0x1ff) write(r3, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0\x00', 0x34) close(r3) ioctl(r2, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c01000038010000010000000000000000000000000000000000000000000000000000007465737400") ioctl(r2, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") nanosleep(&(0x7f0000004000)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./dev/dm-0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000005000)="11111111111111111111111111111111", 0x10, 0x0) pwrite64(r4, &(0x7f0000005000)='\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"', 0x10, 0x1000) fsync(r4) close(r4) 15m23.231223524s ago: executing program 0 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0, 0x9, 0xba, &(0x7f0000000480)=""/186, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) 15m21.718220105s ago: executing program 0 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd09, 0x4, 0x10003, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x3, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x6, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x1, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0xbf, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x9, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 15m6.642657444s ago: executing program 32 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd09, 0x4, 0x10003, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x3, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x6, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x1, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0xbf, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x9, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 13m6.271959823s ago: executing program 3 (id=162): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000300) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 12m59.880849464s ago: executing program 3 (id=168): read$midi(0xffffffffffffffff, 0x0, 0x3b) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) getpgid(r2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[], 0x10) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 12m56.717575153s ago: executing program 3 (id=174): mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) pipe2(&(0x7f0000000040), 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x24040880) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) 12m53.337181432s ago: executing program 3 (id=177): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6d}}]}]}, 0x50}}, 0x8000) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 12m50.728940294s ago: executing program 3 (id=180): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m48.308700348s ago: executing program 3 (id=182): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000040)=[0x0], &(0x7f00000004c0)=[{}, {}], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x66, 0x2, 0x400000000000020e}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12m32.31134043s ago: executing program 33 (id=182): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000040)=[0x0], &(0x7f00000004c0)=[{}, {}], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x66, 0x2, 0x400000000000020e}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8m53.187854342s ago: executing program 4 (id=435): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x5, 0xfffffffc, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000010000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640000000cd050005000a0000000500010006"], 0x58}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) stat(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00\n'], 0x64}}, 0x4800) 8m50.507628868s ago: executing program 4 (id=437): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r5, &(0x7f0000000200)="dce4", 0x2) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x4000000) 8m48.624445377s ago: executing program 4 (id=438): pipe2(0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000140)={{0x0, 0xea60}, 0x15, 0x8}, 0x18) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) 8m47.27491411s ago: executing program 4 (id=439): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x2a, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m45.235035246s ago: executing program 4 (id=443): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m43.053341568s ago: executing program 4 (id=444): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) close(0x3) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="6b25986300b30600fc010000000000000000000000000000ff0200000000000000000000000000016c06040306080000fe8000000000000000000000000000bb00000000000000000000ffffac1414aafc00000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="7001feff9078000b220c1fbd64270d790044e1a5fea729d901ee22d318f11fe1521b140606e2d4c3d97bd10000000700000008fe0df989a54928de5e48ca582a020400010411e486d6446b102af749c19dbe3e8aa24321e2bfc3d901010000e565807f183ebdc0c69dd09c7643b937"], 0xdb) syz_emit_ethernet(0x10ee, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 8m26.980457254s ago: executing program 34 (id=444): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) close(0x3) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="6b25986300b30600fc010000000000000000000000000000ff0200000000000000000000000000016c06040306080000fe8000000000000000000000000000bb00000000000000000000ffffac1414aafc00000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="7001feff9078000b220c1fbd64270d790044e1a5fea729d901ee22d318f11fe1521b140606e2d4c3d97bd10000000700000008fe0df989a54928de5e48ca582a020400010411e486d6446b102af749c19dbe3e8aa24321e2bfc3d901010000e565807f183ebdc0c69dd09c7643b937"], 0xdb) syz_emit_ethernet(0x10ee, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 6m19.775951435s ago: executing program 2 (id=576): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1200204, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x0, 0xc64, &(0x7f0000000400)="$eJzs3U9sHNd5APDvjZZaUm4iJk4Vu43aTQuksmK5sqSYilW4q5pmG0CWhVDMLQBXIqUuTJEESTWykbZMLz30EKAoesiJQGsUSNHAqIugR7Z1geTiQ5FTT0ILG0HRA1sECFDA2GJm34orirJp8Y8o+/ezyW/2zXuz780MZyhiv3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET8zkvnTz6b7i1Pyw+jNwDAXrg4/vWTpza5/wMAH1+X7/PvfwAAAAAAAAAAAAAAYN9IUcTjkWL+4lqarF53DV5oz968NTE6tnmzoVS1PFDVL78Gnz11+sxXnhs524sf3H6nPRmvjF8+33hx7sb8wvTi4vRUY2K2fXVuqtjyFjZvP/3APTpe7oB6RNycunZtsXHqmdN3rb41/F79sSPD50aeOnG0W/dWY2J0bGy8r05t4IHf/R73y/A4GEWciBRP/+CnqRUR1Q7b5r74kHNntw1VgzheDWJidKwayEy7NbtUrrzU2xFFRKOvUbO3j/bgWGxLM2K57H7Z4ePl8MbnWwutKzPTjUuthaX2Untu9lLq9rYcTyOKOJsiViLidv3ezQ1EEbVI8b3Da+lKRBzo7YcvV4nB9+/H1n+ydkXZz8ZAxErxCByzfaweRbwcKX729rG4Wu6z/BVfini5jD+MeKOML0Sk8sQ4E/HuJucRj6ZaFPFn5fE/t5amqutB77py4RuNr81em+ur27uubO/+0Mlnz57fH4Y2xL2xz69Ng1FEq7rir6UH/2UHAAAAAAAAAAAAAAAAgJ02FEU8GSle+rc/qPKKo8pLP3xu5HeHP3UnZzxFPNHNCr2vFP8Xz0TEcrG1nNyDOYX4UrqU0kPOJf4kG4wi/jDn/32nV7i8T5ITAQAAAAAAAAAAAAAAAAAAPlGK+EmkeP6dY2kl+ucUb89eb1xuXZnpzgrbm/u3N2d6p9PpNFI3NnOczHE5x5UcV3O8nWMUuX2OzRwnc1zOcaWIqEfEan59O8c4kNvn2MxxMsflHFdyXM3xdo5Ry+1zbOY4meNyjitlrK0P+HYuD+nxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7rogi3o8U3/3WWooUEc2IyejG1frD7h0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUKqnIt6KFI3fa94pq0VEqv7vOlZ+OxPNg2X8bDRHyvhCNM/n2Kpirfmdh9B/tmcgFfHjSFEffPPOAf9U9/gPdF/dOQ3ijW+vv/qlWjce6K0cfq/+2JHD50bGfuWJ+y2nzTpw/EJ79uatxsTo2Nh4X3Etv/tn+8qG8/sWOzN0ImLxtddfbc3MTC88+EJ5CvRKjm5jO3u8MLQTY9/bhYOxL7qxlwufzufp9rbTyVv5qM2jti92wkNZeIgXJfZMef9/N1L85jv/3rvh937/+4Xu8p07fPz8j9bv/89v3NAu3f8f7yt7Pv82MlCLGFy6MT9wJGJw8bXXT7RvtK5PX5+ePXPy5FdHRr56+uTAwYjBa+1fjYju0sz0yR3YWQAAAAAAAAAAAAAAAAB7KRXx25Gi9eO11IiIW1W+1vC5kadOHD0QB6p8q7vytl4Zv3y+8eLcjfmF6cXF6anGxGz76tzU9FbfbrBK95oYHduVwXyooV3u/9Dgi3Pzry20r//+0qbrDw2ev7K4tNC6uvnqGIoiotlfcrzq8MToWNXpmXZrtmp6adNkuo9uIBXxH5Hi6plG+mIuy/l/GzP878r/X964oV3K//tMX1n5nikV8fNI8Rt//kR8sernobhnn+V6fx0pjp/9Qq4XB8t6vT50nyvQzQws6/5PpPj79++u28uHfHy97rNb3rGPiPL4H44Ub/3p9+PXclntruc/bH78D23c0BaPf+ePN7T7kOP/ub6yQ3c9r2Bnxv9JVx7/E5HihcffjF/PZbUPeP5H79kbx3LlO8/n2KWf/05fo+HqfT39AwAAAAAAAAAAIPLnv/4mUhwdq6XnctlWPv83tXFDu/T5r8/3lU2tf/6vvpuT94QppgAAAAD4mBhIRfwkUlxfevNODvXd+d99+Z+/tf6HsdG0YW31d75PV88N2Mm///Ubzu87uf1hAwAAAAAAAAAAAAAAAAAAwL6SUhHP5fnUJzeZT30oYrHI9VYjxUv/9XSul46U9XrzwA9X3wcvzs2eOD8zM3e1tdS6MjPdGJ9vXZ0u234uUqz91Rdy26KaX7073/zBO33pzcW+ECnG/rZXtzsXe29u8u584N252Mu6n4kU//l3d9ftzWP9i+t1T5V1/zJSfPMfN697ZL3u6bLu9yPFj77Z6NU9VNbtPR/18+t1n7k651GhAAAAAAAAAAAAAAAAAAAAbN9AKuJPIsV/31i5k8uf5/8f6HtZeePbffP9b3Crmud/uJr//37LDzL///C9Ld7vdEV0Dj/gqAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYH9LUcTrkWL+4lparZevuwYvtGdv3poYHdu82VCqWh6o6pdfg8+eOn3mK8+NnO3FD26/056MV8Yvn2+8OHdjfmF6cXF6qjEx2746NzW95S1st/1Gx6sd0Ljx6s2pa9cWG6eeOX3X6lvD79UfOzJ8buSpE0d7dSdGx8bG++rUBh743e+R7lN+MIr4i0jx9A9+mv6pHlHE9vfFh5w7u22oGsTxahATo2PVQGbardmlcuWl3o4oIhp9jZq9fbQHx2JbmhHLZffLDh8vhzc+31poXZmZblxqLSy1l9pzs5dSt7fleBpRxNkUsRIRt+v3bm4ging1Unzv8Fr653rEgd5++PLF8a+fPHX/fhS7OMYtKPvZGIhYKR6BY7aP1aOIf4gUP3v7WPxLPaIW3a/4UsTLZfxhxBvRPd6pPDHORLy7yXnEo6kWRfxvefzPraW36+X1oHddufCNxteW3uqv27uuPPL3h720z69Ng1HEj6or/lr6Vz/XAAAAAAAAAAAAAAAAAPtIEb8cKZ5/51iq8oN7SdEL7dnrjcutKzPdtL5e7l9vdafT6TRSNzZTt2Qyv17OcSXH1Rxv5xhFbp9js4yDnc5kfr2c40qOq8V6snHV/kBun2Mzx8kcl3NcyXE1x9s5Ri23z7GZ42SOyzmu5Lia4+0cY5/k7gEAAAAAAAAAAAAAAAAAAB8vRfVfiu9+ay116t35pSfLFc3O4YfdN3bf/wcAAP//wY7pwg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008044) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10000008}) 6m14.891978095s ago: executing program 2 (id=581): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x8}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xb, 0x6, 0x3, 0x7, 0x8, 0x2, 0x10, 0x4], 0x3, [0x1751, 0xb, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xc, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x9, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2002]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m11.200835368s ago: executing program 2 (id=584): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x2a, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m8.152067221s ago: executing program 2 (id=587): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m5.577945923s ago: executing program 2 (id=589): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1200204, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x0, 0xc64, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008044) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10000008}) 6m2.832002512s ago: executing program 2 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) 5m44.620387848s ago: executing program 35 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) 5m17.444065485s ago: executing program 5 (id=641): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x5, 0xfffffffc, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000010000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640000000cd050005000a0000000500010006"], 0x58}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900"], 0x64}}, 0x4800) stat(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00\n'], 0x64}}, 0x4800) 5m17.198165657s ago: executing program 5 (id=642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) unshare(0x26020480) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r6, r5, 0x5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f0000000300), 0x0}, 0x20) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x8081) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x22c00000000) 5m16.816399675s ago: executing program 5 (id=643): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x20000000, 0x0, &(0x7f0000000900), 0x2a0000) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000002c0)=""/48, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 5m15.271915048s ago: executing program 5 (id=645): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x1, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102000000400c200b1040000102"], 0x0) 5m12.507999307s ago: executing program 5 (id=650): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1200204, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x0, 0xc64, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = epoll_create(0x9) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008044) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000008}) 5m7.666945025s ago: executing program 5 (id=654): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 4m51.909811816s ago: executing program 36 (id=654): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 1m48.550648957s ago: executing program 6 (id=854): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1200204, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x0, 0xc64, &(0x7f0000000400)="$eJzs3U9sHNd5APDvjZZaUm4iJk4Vu43aTQuksmK5sqSYilW4q5pmG0CWhVDMLQBXIqUuTJEESTWykbZMLz30EKAoesiJQGsUSNHAqIugR7Z1geTiQ5FTT0ILG0HRA1sECFDA2GJm34orirJp8Y8o+/ezyW/2zXuz780MZyhiv3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET8zkvnTz6b7i1Pyw+jNwDAXrg4/vWTpza5/wMAH1+X7/PvfwAAAAAAAAAAAAAAYN9IUcTjkWL+4lqarF53DV5oz968NTE6tnmzoVS1PFDVL78Gnz11+sxXnhs524sf3H6nPRmvjF8+33hx7sb8wvTi4vRUY2K2fXVuqtjyFjZvP/3APTpe7oB6RNycunZtsXHqmdN3rb41/F79sSPD50aeOnG0W/dWY2J0bGy8r05t4IHf/R73y/A4GEWciBRP/+CnqRUR1Q7b5r74kHNntw1VgzheDWJidKwayEy7NbtUrrzU2xFFRKOvUbO3j/bgWGxLM2K57H7Z4ePl8MbnWwutKzPTjUuthaX2Untu9lLq9rYcTyOKOJsiViLidv3ezQ1EEbVI8b3Da+lKRBzo7YcvV4nB9+/H1n+ydkXZz8ZAxErxCByzfaweRbwcKX729rG4Wu6z/BVfini5jD+MeKOML0Sk8sQ4E/HuJucRj6ZaFPFn5fE/t5amqutB77py4RuNr81em+ur27uubO/+0Mlnz57fH4Y2xL2xz69Ng1FEq7rir6UH/2UHAAAAAAAAAAAAAAAAgJ02FEU8GSle+rc/qPKKo8pLP3xu5HeHP3UnZzxFPNHNCr2vFP8Xz0TEcrG1nNyDOYX4UrqU0kPOJf4kG4wi/jDn/32nV7i8T5ITAQAAAAAAAAAAAAAAAAAAPlGK+EmkeP6dY2kl+ucUb89eb1xuXZnpzgrbm/u3N2d6p9PpNFI3NnOczHE5x5UcV3O8nWMUuX2OzRwnc1zOcaWIqEfEan59O8c4kNvn2MxxMsflHFdyXM3xdo5Ry+1zbOY4meNyjitlrK0P+HYuD+nxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7rogi3o8U3/3WWooUEc2IyejG1frD7h0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUKqnIt6KFI3fa94pq0VEqv7vOlZ+OxPNg2X8bDRHyvhCNM/n2Kpirfmdh9B/tmcgFfHjSFEffPPOAf9U9/gPdF/dOQ3ijW+vv/qlWjce6K0cfq/+2JHD50bGfuWJ+y2nzTpw/EJ79uatxsTo2Nh4X3Etv/tn+8qG8/sWOzN0ImLxtddfbc3MTC88+EJ5CvRKjm5jO3u8MLQTY9/bhYOxL7qxlwufzufp9rbTyVv5qM2jti92wkNZeIgXJfZMef9/N1L85jv/3rvh937/+4Xu8p07fPz8j9bv/89v3NAu3f8f7yt7Pv82MlCLGFy6MT9wJGJw8bXXT7RvtK5PX5+ePXPy5FdHRr56+uTAwYjBa+1fjYju0sz0yR3YWQAAAAAAAAAAAAAAAAB7KRXx25Gi9eO11IiIW1W+1vC5kadOHD0QB6p8q7vytl4Zv3y+8eLcjfmF6cXF6anGxGz76tzU9FbfbrBK95oYHduVwXyooV3u/9Dgi3Pzry20r//+0qbrDw2ev7K4tNC6uvnqGIoiotlfcrzq8MToWNXpmXZrtmp6adNkuo9uIBXxH5Hi6plG+mIuy/l/GzP878r/X964oV3K//tMX1n5nikV8fNI8Rt//kR8sernobhnn+V6fx0pjp/9Qq4XB8t6vT50nyvQzQws6/5PpPj79++u28uHfHy97rNb3rGPiPL4H44Ub/3p9+PXclntruc/bH78D23c0BaPf+ePN7T7kOP/ub6yQ3c9r2Bnxv9JVx7/E5HihcffjF/PZbUPeP5H79kbx3LlO8/n2KWf/05fo+HqfT39AwAAAAAAAAAAIPLnv/4mUhwdq6XnctlWPv83tXFDu/T5r8/3lU2tf/6vvpuT94QppgAAAAD4mBhIRfwkUlxfevNODvXd+d99+Z+/tf6HsdG0YW31d75PV88N2Mm///Ubzu87uf1hAwAAAAAAAAAAAAAAAAAAwL6SUhHP5fnUJzeZT30oYrHI9VYjxUv/9XSul46U9XrzwA9X3wcvzs2eOD8zM3e1tdS6MjPdGJ9vXZ0u234uUqz91Rdy26KaX7073/zBO33pzcW+ECnG/rZXtzsXe29u8u584N252Mu6n4kU//l3d9ftzWP9i+t1T5V1/zJSfPMfN697ZL3u6bLu9yPFj77Z6NU9VNbtPR/18+t1n7k651GhAAAAAAAAAAAAAAAAAAAAbN9AKuJPIsV/31i5k8uf5/8f6HtZeePbffP9b3Crmud/uJr//37LDzL///C9Ld7vdEV0Dj/gqAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYH9LUcTrkWL+4lparZevuwYvtGdv3poYHdu82VCqWh6o6pdfg8+eOn3mK8+NnO3FD26/056MV8Yvn2+8OHdjfmF6cXF6qjEx2746NzW95S1st/1Gx6sd0Ljx6s2pa9cWG6eeOX3X6lvD79UfOzJ8buSpE0d7dSdGx8bG++rUBh743e+R7lN+MIr4i0jx9A9+mv6pHlHE9vfFh5w7u22oGsTxahATo2PVQGbardmlcuWl3o4oIhp9jZq9fbQHx2JbmhHLZffLDh8vhzc+31poXZmZblxqLSy1l9pzs5dSt7fleBpRxNkUsRIRt+v3bm4ging1Unzv8Fr653rEgd5++PLF8a+fPHX/fhS7OMYtKPvZGIhYKR6BY7aP1aOIf4gUP3v7WPxLPaIW3a/4UsTLZfxhxBvRPd6pPDHORLy7yXnEo6kWRfxvefzPraW36+X1oHddufCNxteW3uqv27uuPPL3h720z69Ng1HEj6or/lr6Vz/XAAAAAAAAAAAAAAAAAPtIEb8cKZ5/51iq8oN7SdEL7dnrjcutKzPdtL5e7l9vdafT6TRSNzZTt2Qyv17OcSXH1Rxv5xhFbp9js4yDnc5kfr2c40qOq8V6snHV/kBun2Mzx8kcl3NcyXE1x9s5Ri23z7GZ42SOyzmu5Lia4+0cY5/k7gEAAAAAAAAAAAAAAAAAAB8vRfVfiu9+ay116t35pSfLFc3O4YfdN3bf/wcAAP//wY7pwg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = epoll_create(0x9) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008044) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000008}) 1m42.502517292s ago: executing program 6 (id=860): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 1m37.828468851s ago: executing program 6 (id=864): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4) write(r3, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758", 0x58) 1m31.548360266s ago: executing program 6 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r4, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9}) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000040), 0x0, 0x4}, 0x20) 1m29.840249547s ago: executing program 6 (id=872): socket$inet6(0xa, 0x3, 0x84) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x6a) r7 = fcntl$dupfd(r0, 0x406, r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x7a, 0x11cfa, 0x0, 0x8080008, 0x3, 0x4, 0x1000001}) 1m28.135666607s ago: executing program 6 (id=875): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/106, 0x6a) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket(0x10, 0x3, 0x0) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[@ANYRES8=r2], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000180)=""/87, 0x57}], 0x2, &(0x7f0000002040)=[{0x0}, {&(0x7f0000001f40)=""/192, 0xc0}, {0x0}], 0x3, 0x0) 1m12.10402461s ago: executing program 37 (id=875): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/106, 0x6a) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket(0x10, 0x3, 0x0) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[@ANYRES8=r2], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000180)=""/87, 0x57}], 0x2, &(0x7f0000002040)=[{0x0}, {&(0x7f0000001f40)=""/192, 0xc0}, {0x0}], 0x3, 0x0) 23.067644446s ago: executing program 9 (id=933): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44050) syz_open_dev$I2C(0x0, 0x2, 0x94bc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000012c0)=""/102376, 0x18fe8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 21.101263699s ago: executing program 8 (id=935): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x5, 0xfffffffc, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000010000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640000000cd050005000a0000000500010006"], 0x58}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff0b, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) stat(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00'], 0x64}}, 0x4800) 21.050533151s ago: executing program 1 (id=936): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r0 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x86242, 0x0) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0380, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$UHID_INPUT(r3, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KVM_CAP_HYPERV_VP_INDEX(r3, 0x4068aea3, 0x0) mount(0x0, &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 19.415099158s ago: executing program 9 (id=937): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\x92\b\xdc\xcc\xf0CM\x92\xbe\xe4\xb3,t\xf1\xf0\xcb\a\x97\xb2\xdd\xcd\x9dP\x9e\xd7\xe3/\xd2$#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r5, 0xa, 0x12) r7 = dup2(r5, r6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) fcntl$setown(r7, 0x8, r4) tkill(r4, 0x13) sendmsg$nl_route(r3, 0x0, 0x0) 15.859109245s ago: executing program 8 (id=941): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x890) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000280)=""/89, 0xfffffffffffffc73, 0x0, 0x0, 0x2}}, 0x48) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, @val=@tracing={0xffffffffffffffff, 0x8}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x4}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 15.857363715s ago: executing program 9 (id=949): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x5, 0xfffffffc, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000010000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640000000cd050005000a0000000500010006"], 0x58}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff0b, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) stat(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00'], 0x64}}, 0x4800) 13.688129907s ago: executing program 1 (id=943): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1200204, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x0, 0xc64, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = epoll_create(0x9) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008044) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000008}) 11.445182162s ago: executing program 9 (id=944): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1200204, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x0, 0xc64, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = epoll_create(0x9) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008044) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000008}) 11.347383677s ago: executing program 8 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x4008081) socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000001f80)=""/4096, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r6}) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 8.53012925s ago: executing program 9 (id=946): socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socket$inet6(0xa, 0x3, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 8.52978745s ago: executing program 7 (id=947): r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x103282, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2bf402, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000180)=0xc) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = memfd_create(&(0x7f0000000bc0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2fnj\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xcf\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x6) fcntl$addseals(r3, 0x409, 0x8) 7.873305241s ago: executing program 8 (id=948): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398b", 0xcb, 0xc001, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) 5.619967976s ago: executing program 8 (id=950): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x9, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x3, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0x4, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32c, 0x3, 0x1ff, 0x2000803, 0xfffffff8, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000040)=[0x0], &(0x7f00000004c0)=[{}, {}], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x66, 0x2, 0x400000000000020e}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.526484041s ago: executing program 7 (id=951): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\x92\b\xdc\xcc\xf0CM\x92\xbe\xe4\xb3,t\xf1\xf0\xcb\a\x97\xb2\xdd\xcd\x9dP\x9e\xd7\xe3/\xd2$#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60141, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) ioctl$TCFLSH(r3, 0x400455c8, 0x1) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/66) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.671122238s ago: executing program 7 (id=953): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x433) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffe9d, 0x0, 0x0, &(0x7f0000000340)=[@cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred], 0x58}, 0x10082) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x57}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.360997163s ago: executing program 8 (id=954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) 2.516232012s ago: executing program 7 (id=955): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x2, 0xf}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0xf9, 0x5, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, 0x87, 0x40, 0xfffffffc, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getqdisc={0x28, 0x26, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x1, 0xfff2}, {0xf, 0x7302c37d3782af2f}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80), 0x0, 0x4c040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.338457457s ago: executing program 9 (id=956): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) unshare(0x2a020400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@fallback, 0xffffffffffffffff, 0x36, 0x19}, 0x20) fcntl$notify(r1, 0x402, 0x1a) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x3, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0x1, 0x10, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x4, 0x5, 0x3, 0x8, 0x4, 0x1, 0x2000040], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x3a, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x443, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x1, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0xff, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x68, 0x1000, 0xa2, 0x7, 0xa9, 0x7, 0x6, 0x0, 0xbf, 0x0, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x512, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0xb5, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x9ceb, 0x7, 0x4, 0x5, 0xb1e, 0x8, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x5, 0xc, 0xffffffff, 0x4, @mcast2, @remote, 0x40, 0x1e, 0x4, 0x2512}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x1, r0, 0x4}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x2}, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000040)) 1.337352257s ago: executing program 7 (id=957): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1200204, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x0, 0xc64, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = epoll_create(0x9) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x4008044) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000008}) 0s ago: executing program 7 (id=958): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x66) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r7, 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): +0x129/0x1320 [ 498.769129][ T8382] ? preempt_schedule_thunk+0x1a/0x30 [ 498.774650][ T8382] ? __mutex_lock+0x321/0xc80 [ 498.779391][ T8382] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 498.785389][ T8382] ? preempt_schedule_notrace+0x110/0x110 [ 498.791216][ T8382] ? lock_chain_count+0x20/0x20 [ 498.796083][ T8382] ? free_vm_area+0x50/0x50 [ 498.800602][ T8382] ? asm_sysvec_call_function_single+0x1a/0x20 [ 498.806838][ T8382] ? lockdep_hardirqs_on+0x98/0x150 [ 498.812081][ T8382] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 498.817202][ T8382] vmalloc+0x79/0x90 [ 498.821118][ T8382] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 498.826249][ T8382] dvb_dvr_do_ioctl+0x12e/0x220 [ 498.831151][ T8382] dvb_usercopy+0x195/0x2b0 [ 498.835678][ T8382] ? dvb_dvr_release+0x3e0/0x3e0 [ 498.840632][ T8382] ? dvb_generic_ioctl+0xb0/0xb0 [ 498.845699][ T8382] ? dvb_dvr_poll+0x230/0x230 [ 498.850524][ T8382] ? dvb_dvr_poll+0x230/0x230 [ 498.855664][ T8382] dvb_dvr_ioctl+0x29/0x30 [ 498.860108][ T8382] __se_sys_ioctl+0xfd/0x170 [ 498.864762][ T8382] do_syscall_64+0x55/0xb0 [ 498.869289][ T8382] ? clear_bhb_loop+0x40/0x90 [ 498.874168][ T8382] ? clear_bhb_loop+0x40/0x90 [ 498.878889][ T8382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.884886][ T8382] RIP: 0033:0x7fd6fbf9e159 [ 498.889372][ T8382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.909375][ T8382] RSP: 002b:00007fd6fcda8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.917912][ T8382] RAX: ffffffffffffffda RBX: 00007fd6fc226090 RCX: 00007fd6fbf9e159 [ 498.925920][ T8382] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 498.933913][ T8382] RBP: 00007fd6fc03506b R08: 0000000000000000 R09: 0000000000000000 [ 498.941906][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.949890][ T8382] R13: 00007fd6fc226128 R14: 00007fd6fc226090 R15: 00007ffe18491a58 [ 498.957900][ T8382] [ 498.969526][ T8382] Mem-Info: [ 498.977545][ T8382] active_anon:56350 inactive_anon:0 isolated_anon:0 [ 498.977545][ T8382] active_file:18492 inactive_file:40459 isolated_file:0 [ 498.977545][ T8382] unevictable:768 dirty:271 writeback:0 [ 498.977545][ T8382] slab_reclaimable:11723 slab_unreclaimable:92172 [ 498.977545][ T8382] mapped:24356 shmem:51154 pagetables:671 [ 498.977545][ T8382] sec_pagetables:0 bounce:0 [ 498.977545][ T8382] kernel_misc_reclaimable:0 [ 498.977545][ T8382] free:1290157 free_pcp:9664 free_cma:0 [ 499.024791][ T8382] Node 0 active_anon:225400kB inactive_anon:0kB active_file:73968kB inactive_file:161632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97424kB dirty:1076kB writeback:0kB shmem:203080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11336kB pagetables:2684kB sec_pagetables:0kB all_unreclaimable? no [ 499.067912][ T8382] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 499.390905][ T8382] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.644395][ T8382] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 499.651826][ T8382] Node 0 DMA32 free:1243080kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:223304kB inactive_anon:0kB active_file:73968kB inactive_file:160808kB unevictable:1536kB writepending:1144kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:27668kB local_pcp:8368kB free_cma:0kB [ 500.264549][ T8382] lowmem_reserve[]: 0 0 0 0 0 [ 500.269348][ T8382] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 500.352884][ T8382] lowmem_reserve[]: 0 0 0 0 0 [ 500.362189][ T8382] Node 1 Normal free:3901848kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13120kB local_pcp:8960kB free_cma:0kB [ 500.444599][ T8382] lowmem_reserve[]: 0 0 0 0 0 [ 500.449373][ T8382] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 500.504573][ T8382] Node 0 DMA32: 530*4kB (UME) 349*8kB (UME) 178*16kB (UME) 210*32kB (UME) 89*64kB (UM) 87*128kB (UME) 32*256kB (UM) 4*512kB (UM) 16*1024kB (UM) 17*2048kB (UME) 284*4096kB (UM) = 1256016kB [ 500.575023][ T8382] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 500.594696][ T8382] Node 1 Normal: 240*4kB (UM) 45*8kB (UME) 35*16kB (UME) 156*32kB (UME) 41*64kB (UE) 9*128kB (UME) 2*256kB (U) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3901848kB [ 500.659501][ T8382] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.691141][ T8382] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.713658][ T8382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.745686][ T8382] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.764518][ T8382] 98020 total pagecache pages [ 500.769233][ T8382] 0 pages in swap cache [ 500.773383][ T8382] Free swap = 124728kB [ 500.804566][ T8382] Total swap = 124996kB [ 500.820459][ T8382] 2097051 pages RAM [ 500.884907][ T8382] 0 pages HighMem/MovableOnly [ 501.685145][ T8382] 416965 pages reserved [ 501.689357][ T8382] 0 pages cma reserved [ 501.920550][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.933977][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.916070][ T8419] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 503.924104][ T8419] netlink: 'syz.1.436': attribute type 2 has an invalid length. [ 504.436693][ T8417] IPVS: sh: FWM 3 0x00000003 - no destination available [ 504.582328][ T8422] syzkaller0: entered promiscuous mode [ 504.593504][ T8422] syzkaller0: entered allmulticast mode [ 506.011563][ T8422] tipc: Enabled bearer , priority 0 [ 506.099400][ T8422] tipc: Resetting bearer [ 506.176618][ T8418] tipc: Resetting bearer [ 506.200071][ T8418] tipc: Disabling bearer [ 508.335154][ T28] audit: type=1800 audit(1790073389.580:37): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.446" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 509.659555][ T8442] syz.5.446 (8442) used greatest stack depth: 19656 bytes left [ 509.895812][ T28] audit: type=1804 audit(1790073390.990:38): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.448" name="/newroot/125/file1" dev="fuse" ino=1 res=1 errno=0 [ 518.726308][ T8471] bond0: (slave bond_slave_0): Releasing backup interface [ 518.819862][ T8473] bond0: (slave bond_slave_1): Releasing backup interface [ 518.987943][ T8471] bond0: option mode: unable to set because the bond device is up [ 524.117072][ T7918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.126893][ T7918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.137674][ T7918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 524.158978][ T7918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 524.171272][ T7918] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 524.264696][ T7918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.405331][ T8496] loop5: detected capacity change from 0 to 32768 [ 524.420628][ T8496] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.461 (8496) [ 524.463488][ T8496] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 524.475993][ T8496] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 524.485246][ T8496] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 524.495983][ T8496] BTRFS info (device loop5): use zstd compression, level 3 [ 524.503470][ T8496] BTRFS info (device loop5): force clearing of disk cache [ 524.511089][ T8496] BTRFS info (device loop5): enabling disk space caching [ 524.518476][ T8496] BTRFS info (device loop5): disk space caching is enabled [ 524.645346][ T28] audit: type=1800 audit(1790073405.840:39): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.460" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 525.802415][ T8496] BTRFS info (device loop5): enabling ssd optimizations [ 525.809655][ T8496] BTRFS info (device loop5): auto enabling async discard [ 525.844907][ T8496] BTRFS info (device loop5): rebuilding free space tree [ 525.911257][ T8496] BTRFS info (device loop5): disabling free space tree [ 525.918353][ T8496] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 525.928623][ T8496] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 527.561373][ T5787] Bluetooth: hci4: command tx timeout [ 528.570609][ T7080] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 529.594549][ T5787] Bluetooth: hci4: command tx timeout [ 530.509311][ T1089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.674226][ T8490] chnl_net:caif_netlink_parms(): no params data found [ 531.681372][ T5787] Bluetooth: hci4: command tx timeout [ 532.248772][ T1089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.569668][ T28] audit: type=1326 audit(1790073415.020:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6fbf9e159 code=0x0 [ 534.579083][ T5787] Bluetooth: hci4: command tx timeout [ 534.667141][ T1089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.764981][ T8490] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.785151][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.801790][ T8490] bridge_slave_0: entered allmulticast mode [ 534.813924][ T8490] bridge_slave_0: entered promiscuous mode [ 534.850785][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.884541][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.891842][ T8490] bridge_slave_1: entered allmulticast mode [ 534.921697][ T8490] bridge_slave_1: entered promiscuous mode [ 535.040789][ T1089] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.176268][ T8490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.194266][ T8490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.782552][ T8490] team0: Port device team_slave_0 added [ 535.962290][ T8490] team0: Port device team_slave_1 added [ 537.421714][ T8574] sctp: failed to load transform for md5: -2 [ 537.643473][ T8490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.680087][ T8490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.725325][ T8490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.743451][ T8490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.754401][ T8490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.784045][ T8490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.950851][ T8490] hsr_slave_0: entered promiscuous mode [ 537.975648][ T8490] hsr_slave_1: entered promiscuous mode [ 538.700891][ T8606] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 538.709881][ T8606] netlink: 'syz.2.474': attribute type 2 has an invalid length. [ 539.066216][ T28] audit: type=1800 audit(1790073420.250:41): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.475" name="ipv4_address" dev="configfs" ino=20338 res=0 errno=0 [ 539.285116][ T28] audit: type=1800 audit(1790073420.560:42): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.475" name="ipv4_port" dev="configfs" ino=20365 res=0 errno=0 [ 539.472677][ T28] audit: type=1800 audit(1790073420.610:43): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.475" name="num" dev="configfs" ino=20366 res=0 errno=0 [ 539.590034][ T28] audit: type=1800 audit(1790073420.700:44): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.475" name="local" dev="configfs" ino=20367 res=0 errno=0 [ 539.692099][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 539.701558][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.957869][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.539365][ T8490] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 542.562365][ T8490] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 542.579629][ T8490] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 542.694939][ T8490] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 542.959279][ T1089] hsr_slave_0: left promiscuous mode [ 542.975717][ T1089] hsr_slave_1: left promiscuous mode [ 542.996929][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.014446][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.023113][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.045425][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.065373][ T1089] bridge_slave_1: left allmulticast mode [ 543.071290][ T1089] bridge_slave_1: left promiscuous mode [ 543.084819][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.095816][ T1089] bridge_slave_0: left allmulticast mode [ 543.101984][ T1089] bridge_slave_0: left promiscuous mode [ 543.124888][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.189972][ T1089] veth1_macvtap: left promiscuous mode [ 543.204551][ T1089] veth0_macvtap: left promiscuous mode [ 543.210732][ T1089] veth1_vlan: left promiscuous mode [ 543.224552][ T1089] veth0_vlan: left promiscuous mode [ 544.152337][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 544.214091][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 544.271989][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.330801][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.772711][ T1089] bond0 (unregistering): Released all slaves [ 544.977570][ T8490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.040868][ T8490] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.070323][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.077585][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.135541][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.142765][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.366707][ T1089] IPVS: stop unused estimator thread 0... [ 545.557182][ T8490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.955574][ T8490] veth0_vlan: entered promiscuous mode [ 545.975990][ T8490] veth1_vlan: entered promiscuous mode [ 546.028183][ T8490] veth0_macvtap: entered promiscuous mode [ 546.043293][ T8490] veth1_macvtap: entered promiscuous mode [ 546.074266][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.092315][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.108105][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.120725][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.138750][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.152000][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.171097][ T8490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.193205][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.206813][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.217909][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.229002][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.243844][ T8490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.268058][ T8490] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.278466][ T8490] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.300387][ T8490] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.313203][ T8490] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.455284][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.463967][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.527832][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.536347][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.087557][ T8682] loop6: detected capacity change from 0 to 4096 [ 548.381601][ T8682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 548.990028][ T8490] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.887895][ T8714] bridge_slave_0: left allmulticast mode [ 553.895317][ T8714] bridge_slave_0: left promiscuous mode [ 553.902390][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.956916][ T8714] bridge_slave_1: left allmulticast mode [ 553.963441][ T8714] bridge_slave_1: left promiscuous mode [ 553.970563][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.027975][ T8714] bond0: (slave bond_slave_0): Releasing backup interface [ 554.096014][ T8714] bond0: (slave bond_slave_1): Releasing backup interface [ 554.217809][ T8714] team0: Port device team_slave_0 removed [ 554.261439][ T8714] team0: Port device team_slave_1 removed [ 554.268968][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.276700][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.737813][ T8744] loop2: detected capacity change from 0 to 128 [ 559.327894][ T8744] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 559.969460][ T8744] fuse: Bad value for 'fd' [ 561.820515][ T1089] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 562.823338][ T8772] netlink: 'syz.6.485': attribute type 1 has an invalid length. [ 562.832051][ T8772] netlink: 'syz.6.485': attribute type 2 has an invalid length. [ 563.494480][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.506416][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.544389][ T8777] netlink: 84 bytes leftover after parsing attributes in process `syz.5.492'. [ 572.612534][ T8823] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 572.622050][ T8823] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 572.631087][ T8823] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 574.148706][ T8835] loop6: detected capacity change from 0 to 2048 [ 574.279151][ T8835] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 574.376821][ T8835] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 574.564418][ T8840] IPVS: ip_vs_add_dest(): server weight less than zero [ 576.559558][ T8840] macvlan1: entered promiscuous mode [ 585.224020][ T8904] loop6: detected capacity change from 0 to 128 [ 585.251532][ T8904] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 585.332586][ T8906] xt_hashlimit: size too large, truncated to 1048576 [ 585.339699][ T8906] xt_hashlimit: max too large, truncated to 1048576 [ 585.346691][ T8906] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 587.536721][ T8915] loop2: detected capacity change from 0 to 2048 [ 587.565291][ T8904] fuse: Bad value for 'fd' [ 587.569812][ T8915] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 587.635771][ T8915] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 589.806588][ T37] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 590.930968][ T8933] loop6: detected capacity change from 0 to 1024 [ 591.545274][ T8933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 591.557534][ T8933] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.833001][ T8490] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 597.594471][ T8971] team0 (unregistering): Port device team_slave_0 removed [ 597.639012][ T8971] team0 (unregistering): Port device team_slave_1 removed [ 599.388733][ T8980] null_blk: disk rnullb0 created [ 600.117617][ T9003] loop5: detected capacity change from 0 to 128 [ 600.217450][ T9003] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 600.226361][ T9005] loop2: detected capacity change from 0 to 2048 [ 600.242104][ T9005] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 600.345821][ T9005] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 601.397946][ T9003] fuse: Bad value for 'fd' [ 601.895195][ T9017] FAT-fs (loop5): error, corrupted directory (invalid i_start) [ 601.915850][ T9017] FAT-fs (loop5): Filesystem has been set read-only [ 602.107983][ T9003] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 624.800227][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.808926][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.362060][ T9151] ªªªªªª: renamed from vlan0 (while UP) [ 627.464560][ T9163] futex_wake_op: syz.5.560 tries to shift op by -1; fix this program [ 636.984645][ T9267] loop6: detected capacity change from 0 to 2048 [ 637.012425][ T9267] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 637.046165][ T9267] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 639.087196][ T9276] loop2: detected capacity change from 0 to 2048 [ 639.166402][ T9276] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 639.212465][ T9276] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 644.200674][ T9318] loop6: detected capacity change from 0 to 8 [ 647.787068][ T7918] Bluetooth: hci4: command 0x0406 tx timeout [ 650.327883][ T9352] process 'syz.6.577' launched './file0' with NULL argv: empty string added [ 651.666900][ T9357] loop6: detected capacity change from 0 to 2048 [ 651.715902][ T9357] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 651.768437][ T9357] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 652.911301][ T9361] loop2: detected capacity change from 0 to 2048 [ 652.999859][ T9361] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 653.051766][ T9361] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 664.651445][ T9433] loop2: detected capacity change from 0 to 2048 [ 664.782655][ T9433] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 664.913654][ T9433] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 667.718302][ T9459] netlink: 132 bytes leftover after parsing attributes in process `syz.6.594'. [ 671.504981][ T970] IPVS: starting estimator thread 0... [ 671.704521][ T9486] IPVS: using max 32 ests per chain, 76800 per kthread [ 673.126932][ T9489] netlink: 32 bytes leftover after parsing attributes in process `syz.5.597'. [ 679.639387][ T9537] kvm: kvm [9536]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 679.702520][ T9537] kvm: kvm [9536]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 684.359176][ T9567] syz.2.592 (9567) used greatest stack depth: 17800 bytes left [ 686.250605][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.257384][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.765514][ T7918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 686.777230][ T7918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 686.814388][ T7918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 686.826379][ T7918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 686.845072][ T7918] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 686.854200][ T7918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 688.964535][ T5787] Bluetooth: hci1: command tx timeout [ 690.445921][ T9580] chnl_net:caif_netlink_parms(): no params data found [ 690.913561][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.070903][ T7918] Bluetooth: hci1: command tx timeout [ 691.634614][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.642180][ T9580] bridge_slave_0: entered allmulticast mode [ 691.766310][ T9580] bridge_slave_0: entered promiscuous mode [ 691.835944][ T9580] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.009047][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.051245][ T9580] bridge_slave_1: entered allmulticast mode [ 692.072906][ T9615] loop6: detected capacity change from 0 to 256 [ 692.896957][ T9580] bridge_slave_1: entered promiscuous mode [ 693.124411][ T7918] Bluetooth: hci1: command tx timeout [ 693.131059][ T9580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.171529][ T9617] loop6: detected capacity change from 0 to 2048 [ 693.187221][ T9617] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 693.204013][ T9580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.254036][ T9617] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 695.801527][ T7918] Bluetooth: hci1: command tx timeout [ 695.971161][ T9580] team0: Port device team_slave_0 added [ 695.981472][ T9580] team0: Port device team_slave_1 added [ 696.113358][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.154290][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.235454][ T9580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.266662][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.273705][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.337550][ T9580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.696704][ T9580] hsr_slave_0: entered promiscuous mode [ 697.834959][ T9580] hsr_slave_1: entered promiscuous mode [ 697.915406][ T9580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.933300][ T9580] Cannot create hsr debugfs directory [ 698.027398][ T9629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 698.034026][ T9629] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 698.127508][ T9629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 698.133668][ T9629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 698.172357][ T9629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 699.385428][ T9580] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 699.409986][ T9580] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 699.490762][ T9580] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 699.505681][ T9634] syz.6.623: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 699.521298][ T9634] CPU: 1 PID: 9634 Comm: syz.6.623 Not tainted syzkaller #0 [ 699.528812][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.538990][ T9634] Call Trace: [ 699.542428][ T9634] [ 699.545399][ T9634] dump_stack_lvl+0x18c/0x250 [ 699.550143][ T9634] ? show_regs_print_info+0x20/0x20 [ 699.555400][ T9634] ? load_image+0x420/0x420 [ 699.559948][ T9634] ? __rcu_read_unlock+0x7c/0xd0 [ 699.565274][ T9634] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 699.571733][ T9634] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 699.578542][ T9634] warn_alloc+0x246/0x340 [ 699.583005][ T9634] ? zone_watermark_ok_safe+0x230/0x230 [ 699.588624][ T9634] __vmalloc_node_range+0x129/0x1320 [ 699.593961][ T9634] ? __mutex_trylock_common+0x160/0x270 [ 699.599732][ T9634] ? trace_raw_output_contention_end+0xd0/0xd0 [ 699.605926][ T9634] ? rcu_is_watching+0x15/0xb0 [ 699.610817][ T9634] ? trace_contention_end+0x39/0xe0 [ 699.616103][ T9634] ? __mutex_lock+0x30d/0xc80 [ 699.620828][ T9634] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 699.626754][ T9634] ? free_vm_area+0x50/0x50 [ 699.631481][ T9634] ? dvb_demux_do_ioctl+0x317/0x530 [ 699.636728][ T9634] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 699.642416][ T9634] ? mutex_lock_nested+0x20/0x20 [ 699.647397][ T9634] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 699.653247][ T9634] vmalloc+0x79/0x90 [ 699.657189][ T9634] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 699.663134][ T9634] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 699.668906][ T9634] dvb_demux_do_ioctl+0x454/0x530 [ 699.673981][ T9634] dvb_usercopy+0x195/0x2b0 [ 699.678530][ T9634] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 699.684118][ T9634] ? dvb_generic_ioctl+0xb0/0xb0 [ 699.689218][ T9634] ? dvb_demux_poll+0x210/0x210 [ 699.694137][ T9634] dvb_demux_ioctl+0x29/0x30 [ 699.698794][ T9634] __se_sys_ioctl+0xfd/0x170 [ 699.703448][ T9634] do_syscall_64+0x55/0xb0 [ 699.707998][ T9634] ? clear_bhb_loop+0x40/0x90 [ 699.712724][ T9634] ? clear_bhb_loop+0x40/0x90 [ 699.717445][ T9634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.723422][ T9634] RIP: 0033:0x7fba31b9e159 [ 699.728133][ T9634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.747789][ T9634] RSP: 002b:00007fba2fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.756260][ T9634] RAX: ffffffffffffffda RBX: 00007fba31e26090 RCX: 00007fba31b9e159 [ 699.764356][ T9634] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 699.772374][ T9634] RBP: 00007fba31c3506b R08: 0000000000000000 R09: 0000000000000000 [ 699.780649][ T9634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.788840][ T9634] R13: 00007fba31e26128 R14: 00007fba31e26090 R15: 00007fffc4217288 [ 699.796871][ T9634] [ 699.801117][ T9634] Mem-Info: [ 699.804487][ T9634] active_anon:15728 inactive_anon:7422 isolated_anon:0 [ 699.804487][ T9634] active_file:18493 inactive_file:40363 isolated_file:0 [ 699.804487][ T9634] unevictable:768 dirty:135 writeback:0 [ 699.804487][ T9634] slab_reclaimable:11674 slab_unreclaimable:95362 [ 699.804487][ T9634] mapped:24348 shmem:17216 pagetables:756 [ 699.804487][ T9634] sec_pagetables:0 bounce:0 [ 699.804487][ T9634] kernel_misc_reclaimable:0 [ 699.804487][ T9634] free:1319429 free_pcp:10513 free_cma:0 [ 699.850375][ T9634] Node 0 active_anon:62912kB inactive_anon:29688kB active_file:73972kB inactive_file:161248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97392kB dirty:536kB writeback:0kB shmem:67328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12240kB pagetables:3024kB sec_pagetables:0kB all_unreclaimable? no [ 699.883512][ T9634] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 699.913970][ T9634] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.941365][ T9634] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 699.947450][ T9634] Node 0 DMA32 free:1359516kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:62872kB inactive_anon:29688kB active_file:73972kB inactive_file:160424kB unevictable:1536kB writepending:532kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:29916kB local_pcp:20480kB free_cma:0kB [ 699.978831][ T9634] lowmem_reserve[]: 0 0 0 0 0 [ 699.984439][ T9634] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 700.011352][ T9634] lowmem_reserve[]: 0 0 0 0 0 [ 700.016438][ T9634] Node 1 Normal free:3902872kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12128kB local_pcp:3680kB free_cma:0kB [ 700.046401][ T9634] lowmem_reserve[]: 0 0 0 0 0 [ 700.051376][ T9634] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 700.066316][ T9634] Node 0 DMA32: 1109*4kB (UME) 405*8kB (UME) 1424*16kB (UME) 1287*32kB (UM) 921*64kB (UME) 497*128kB (UM) 226*256kB (UM) 107*512kB (UM) 26*1024kB (UM) 11*2048kB (ME) 245*4096kB (M) = 1359516kB [ 700.074347][ T7918] Bluetooth: hci4: command 0x0406 tx timeout [ 700.096791][ T9634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 700.109160][ T9634] Node 1 Normal: 240*4kB (UM) 45*8kB (UME) 35*16kB (UME) 176*32kB (UME) 47*64kB (UE) 9*128kB (UME) 2*256kB (U) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3902872kB [ 700.127945][ T9634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.137688][ T9634] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 700.147126][ T9634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.154536][ T7918] Bluetooth: hci1: command 0x0c1a tx timeout [ 700.163971][ T9634] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 700.173448][ T9634] 75744 total pagecache pages [ 700.178249][ T9634] 0 pages in swap cache [ 700.182493][ T9634] Free swap = 91684kB [ 700.186757][ T9634] Total swap = 124996kB [ 700.191387][ T9634] 2097051 pages RAM [ 700.195469][ T9634] 0 pages HighMem/MovableOnly [ 700.200190][ T9634] 416965 pages reserved [ 700.204416][ T9634] 0 pages cma reserved [ 700.804968][ T9580] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 701.854097][ T9580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.903512][ T9580] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.949748][ T9640] loop6: detected capacity change from 0 to 2048 [ 701.984287][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.991492][ T9215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.018093][ T9640] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 702.051985][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.059336][ T9215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.078653][ T9640] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 702.119597][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.627'. [ 703.110868][ T7918] Bluetooth: hci4: command 0x0406 tx timeout [ 703.117333][ T7918] Bluetooth: hci1: command 0x0c1a tx timeout [ 703.359748][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 703.776399][ T9647] vlan2: entered allmulticast mode [ 703.805445][ T9647] bridge1: entered allmulticast mode [ 703.841244][ T9580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 703.854310][ T9580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 703.932425][ T9642] bridge1: port 1(erspan0) entered blocking state [ 703.977619][ T9642] bridge1: port 1(erspan0) entered disabled state [ 704.034500][ T9642] erspan0: entered allmulticast mode [ 704.046037][ T9642] erspan0: entered promiscuous mode [ 704.053381][ T9642] bridge1: port 1(erspan0) entered blocking state [ 704.060094][ T9642] bridge1: port 1(erspan0) entered forwarding state [ 704.681624][ T9580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.227025][ T9648] Bluetooth: hci1: command 0x0c1a tx timeout [ 705.796934][ T9670] overlayfs: missing 'lowerdir' [ 708.154177][ T9580] veth0_vlan: entered promiscuous mode [ 708.266539][ T9580] veth1_vlan: entered promiscuous mode [ 708.407256][ T9580] veth0_macvtap: entered promiscuous mode [ 708.433641][ T9580] veth1_macvtap: entered promiscuous mode [ 708.495498][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.523578][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.555857][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.580344][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.614951][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.654560][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.707620][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.797702][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.239249][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.271774][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.292876][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.324586][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.344354][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.366781][ T9699] loop6: detected capacity change from 0 to 2048 [ 710.375995][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.395289][ T9699] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 710.419346][ T9580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.435043][ T9580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.444014][ T9580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.458094][ T9699] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 710.469368][ T9580] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.793666][ T9215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.843688][ T9215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.926861][ T9226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.971248][ T9226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.644607][ T9732] loop6: detected capacity change from 0 to 4096 [ 716.104542][ T9732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 716.298641][ T8490] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.744127][ T9781] gadgetfs: bound to dummy_udc driver [ 732.034424][ T9804] loop7: detected capacity change from 0 to 2048 [ 732.321942][ T9804] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 732.887222][ T9804] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 741.871121][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.881886][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.891022][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.899478][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.907354][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 741.916058][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.969665][ T9861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.039489][ T9793] udevd[9793]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.547420][ T5787] Bluetooth: hci0: command tx timeout [ 744.818200][ T9215] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.023383][ T6279] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 745.161678][ T9215] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.267582][ T6279] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.300759][ T6279] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 745.343167][ T6279] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 745.377275][ T6279] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 745.400871][ T9215] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.411445][ T6279] usb 8-1: SerialNumber: syz [ 745.434421][ T6279] hub 8-1:1.0: bad descriptor, ignoring hub [ 745.452397][ T6279] hub: probe of 8-1:1.0 failed with error -5 [ 745.463770][ T6279] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 745.549848][ T9215] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.010695][ T9863] chnl_net:caif_netlink_parms(): no params data found [ 746.556942][ T9648] Bluetooth: hci0: command tx timeout [ 746.651251][ T9910] netlink: 36 bytes leftover after parsing attributes in process `syz.7.677'. [ 746.988752][ T9215] tipc: Left network mode [ 747.015249][ T9863] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.066881][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.104507][ T9863] bridge_slave_0: entered allmulticast mode [ 747.131484][ T9863] bridge_slave_0: entered promiscuous mode [ 747.153713][ T9863] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.161316][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.168954][ T9863] bridge_slave_1: entered allmulticast mode [ 747.176634][ T9863] bridge_slave_1: entered promiscuous mode [ 747.507857][ T9863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.593612][ T9863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.680898][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.691568][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.788497][ T9863] team0: Port device team_slave_0 added [ 747.889492][ T9863] team0: Port device team_slave_1 added [ 748.156267][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.163282][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.675920][ T9648] Bluetooth: hci0: command tx timeout [ 748.694659][ T9863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.873796][ T788] usb 8-1: USB disconnect, device number 2 [ 748.887562][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.894833][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.985522][ T9932] x_tables: duplicate underflow at hook 3 [ 749.083652][ T9863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.229567][ T9215] bridge1: port 1(erspan0) entered disabled state [ 749.403226][ T9215] erspan0 (unregistering): left allmulticast mode [ 749.422575][ T9215] erspan0 (unregistering): left promiscuous mode [ 749.439724][ T9215] bridge1: port 1(erspan0) entered disabled state [ 750.797606][ T9648] Bluetooth: hci0: command tx timeout [ 751.349378][ T9940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.643303][ T9863] hsr_slave_0: entered promiscuous mode [ 753.692228][ T9863] hsr_slave_1: entered promiscuous mode [ 753.705338][ T9863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.713579][ T9863] Cannot create hsr debugfs directory [ 754.389251][ T9215] hsr_slave_0: left promiscuous mode [ 754.418457][ T9215] hsr_slave_1: left promiscuous mode [ 754.454730][ T9215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.490775][ T9215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.527695][ T9215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.558136][ T9215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.601292][ T9215] bridge_slave_1: left allmulticast mode [ 754.625117][ T9215] bridge_slave_1: left promiscuous mode [ 754.649499][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.691541][ T9215] bridge_slave_0: left allmulticast mode [ 754.711420][ T9215] bridge_slave_0: left promiscuous mode [ 754.731436][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.821883][ T9215] veth1_macvtap: left promiscuous mode [ 754.850433][ T9215] veth0_macvtap: left promiscuous mode [ 754.880149][ T9215] veth1_vlan: left promiscuous mode [ 754.907056][ T9215] veth0_vlan: left promiscuous mode [ 758.919662][ T9993] Cannot find set identified by id 0 to match [ 762.959849][T10012] x_tables: unsorted underflow at hook 3 [ 762.982223][T10012] hub 8-0:1.0: USB hub found [ 762.988825][T10012] hub 8-0:1.0: 1 port detected [ 765.448806][T10020] loop6: detected capacity change from 0 to 2048 [ 765.508929][T10020] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 765.562855][T10020] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 770.992919][T10046] loop6: detected capacity change from 0 to 2048 [ 771.009766][T10046] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 771.039373][T10046] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 774.460488][ T9215] bond0 (unregistering): Released all slaves [ 776.530582][T10057] syzkaller0: entered promiscuous mode [ 776.574501][T10057] syzkaller0: entered allmulticast mode [ 777.124435][ T9863] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 777.870419][ T9863] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 778.360929][ T9863] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 778.491530][ T9863] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 778.754698][ T9215] IPVS: stop unused estimator thread 0... [ 779.784174][ T5878] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 779.843351][ T9863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.888387][ T9863] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.982507][ T9238] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.989853][ T9238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.056163][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.063536][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.155241][ T5878] usb 8-1: Using ep0 maxpacket: 8 [ 780.164841][ T5878] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.184360][ T5878] usb 8-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 780.269751][T10110] trusted_key: encrypted_key: keylen parameter is missing [ 780.964528][ T5878] usb 8-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 780.980619][ T5878] usb 8-1: config 0 interface 0 has no altsetting 0 [ 780.988738][ T5878] usb 8-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 780.998192][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.006940][T10112] loop6: detected capacity change from 0 to 2048 [ 781.025429][ T5878] usb 8-1: config 0 descriptor?? [ 781.077533][T10112] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 781.156138][T10112] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 783.442027][ T9863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.814679][ T5878] usb 8-1: string descriptor 0 read error: -71 [ 783.822555][ T5878] hub 8-1:0.0: bad descriptor, ignoring hub [ 783.854284][ T5878] hub: probe of 8-1:0.0 failed with error -5 [ 783.926260][ T5878] usb 8-1: USB disconnect, device number 3 [ 787.642022][ T9863] veth0_vlan: entered promiscuous mode [ 787.718821][ T9863] veth1_vlan: entered promiscuous mode [ 787.857106][ T9863] veth0_macvtap: entered promiscuous mode [ 787.906579][ T9863] veth1_macvtap: entered promiscuous mode [ 788.090138][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.144331][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.193272][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.244405][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.402219][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.522628][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.746708][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.907940][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.993602][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.034777][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.064635][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.104559][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.140772][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.277332][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.428314][ T9863] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.504364][ T9863] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.519138][ T9863] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.570203][ T9863] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.836785][T10182] loop7: detected capacity change from 0 to 2048 [ 792.915919][T10182] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 792.969068][T10182] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 792.989210][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.045800][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.005119][T10179] nvmet: transport type 0 not supported [ 794.129083][ T9233] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 794.166622][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.200092][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.212037][T10183] (NULL device *): Create Association LS failed: Association Allocation Failed [ 794.265142][ T9233] (NULL device *): queue 0 connect admin queue failed (-6). [ 794.272604][ T9233] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 794.302985][ T9233] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 794.326973][T10185] nvme nvme0: NVME-FC{0}: new ctrl: NQN "testsubsys" [ 796.228115][ T28] audit: type=1807 audit(1790073677.500:45): action=measure uid>1000 res=1 [ 796.396318][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 796.517944][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 796.774475][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 796.847697][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 796.920388][T10200] ima: policy update completed [ 796.926714][ T28] audit: type=1802 audit(1790073678.200:46): pid=10200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.6.726" res=1 errno=0 [ 796.985685][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 799.118452][T10225] Cannot find add_set index 2 as target [ 800.057228][ T2934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 800.080633][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 800.154966][ T2934] (NULL device *): queue 0 connect admin queue failed (-6). [ 800.185319][ T2934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 800.192947][ T2934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 802.063467][T10233] loop7: detected capacity change from 0 to 2048 [ 802.164484][T10233] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 802.220345][T10233] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 802.237589][ T137] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 802.286919][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 803.274358][ T137] (NULL device *): queue 0 connect admin queue failed (-6). [ 803.304664][ T137] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 803.313058][ T137] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 805.439250][ T9233] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 805.531290][ T5878] (NULL device *): Create Association LS failed: Association Allocation Failed [ 805.773795][ T9233] (NULL device *): queue 0 connect admin queue failed (-6). [ 805.796782][ T9233] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 805.834991][ T9233] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 807.935374][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 808.018662][ T6279] (NULL device *): Create Association LS failed: Association Allocation Failed [ 808.100454][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 808.201289][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 808.365603][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 808.710184][T10273] loop7: detected capacity change from 0 to 2048 [ 809.246327][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.252809][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.338832][T10273] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 809.602926][T10273] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 809.903880][ T9871] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 810.594910][ T9233] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 811.085652][ T8613] (NULL device *): Create Association LS failed: Association Allocation Failed [ 811.096372][ T9233] (NULL device *): queue 0 connect admin queue failed (-6). [ 811.103732][ T9233] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 811.112152][ T9233] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 812.306350][T10298] loop8: detected capacity change from 0 to 2048 [ 814.048957][T10298] EXT4-fs (loop8): invalid inodes per group: 0 [ 814.048957][T10298] [ 814.085256][ T1089] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 814.163092][ T5820] (NULL device *): Create Association LS failed: Association Allocation Failed [ 814.201568][ T1089] (NULL device *): queue 0 connect admin queue failed (-6). [ 814.225617][ T1089] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 814.348978][ T1089] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 814.645309][T10306] batman_adv: batadv0: Adding interface: macvlan2 [ 814.651815][T10306] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.742242][T10306] batman_adv: batadv0: Interface activated: macvlan2 [ 814.828707][T10311] loop6: detected capacity change from 0 to 128 [ 814.943634][T10311] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 814.983939][T10311] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 816.119521][ T8490] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 816.477829][ T130] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 816.718004][T10339] i2c i2c-0: new_device: Missing parameters [ 817.483007][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 818.854580][ T130] (NULL device *): queue 0 connect admin queue failed (-6). [ 818.861953][ T130] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 818.898894][ T130] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 819.063240][T10345] loop7: detected capacity change from 0 to 2048 [ 819.104388][T10345] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 819.158799][T10345] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 821.567005][ T9238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 821.695083][T10183] (NULL device *): Create Association LS failed: Association Allocation Failed [ 821.722308][ T9238] (NULL device *): queue 0 connect admin queue failed (-6). [ 821.840607][ T9238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 821.849790][ T9238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 823.300815][T10372] loop8: detected capacity change from 0 to 128 [ 823.915374][T10377] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9863] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10377] [ 824.063781][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 824.206987][T10183] (NULL device *): Create Association LS failed: Association Allocation Failed [ 824.257449][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 824.308759][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 824.342750][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 826.878836][ T137] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 826.931056][ T5820] (NULL device *): Create Association LS failed: Association Allocation Failed [ 826.994374][ T137] (NULL device *): queue 0 connect admin queue failed (-6). [ 827.062197][ T137] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 827.080317][ T137] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 827.511025][T10397] loop6: detected capacity change from 0 to 2048 [ 827.658078][T10397] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 827.868279][T10397] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 830.810168][ T137] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 830.874608][T10408] loop7: detected capacity change from 0 to 256 [ 830.930767][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 830.984405][ T137] (NULL device *): queue 0 connect admin queue failed (-6). [ 830.999450][ T137] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 831.655245][ T9793] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 831.783973][ T137] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 834.449451][ T9233] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 834.529289][ T788] (NULL device *): Create Association LS failed: Association Allocation Failed [ 834.544533][ T9233] (NULL device *): queue 0 connect admin queue failed (-6). [ 834.552076][ T9233] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 834.574249][ T9233] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 837.626407][ T9226] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 837.639674][T10183] (NULL device *): Create Association LS failed: Association Allocation Failed [ 837.649036][ T9226] (NULL device *): queue 0 connect admin queue failed (-6). [ 837.658623][ T9226] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 837.666287][ T9226] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 838.154814][T10443] loop6: detected capacity change from 0 to 8 [ 838.207975][T10443] SQUASHFS error: zlib decompression failed, data probably corrupt [ 838.244288][T10443] SQUASHFS error: Failed to read block 0x9b: -5 [ 838.250609][T10443] SQUASHFS error: Unable to read metadata cache entry [99] [ 838.298135][T10443] SQUASHFS error: Unable to read inode 0x127 [ 838.726741][T10443] loop6: detected capacity change from 0 to 4096 [ 838.798018][T10454] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 839.685454][ T2934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 839.737910][ T8613] (NULL device *): Create Association LS failed: Association Allocation Failed [ 839.844364][ T2934] (NULL device *): queue 0 connect admin queue failed (-6). [ 839.851742][ T2934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 839.901121][ T2934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 841.995278][ T9215] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 842.042228][ T5820] (NULL device *): Create Association LS failed: Association Allocation Failed [ 842.064385][ T9215] (NULL device *): queue 0 connect admin queue failed (-6). [ 842.078081][ T9215] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 842.122114][ T9215] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 842.759811][T10477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.247501][ T9215] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 844.520565][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 844.672046][ T9215] (NULL device *): queue 0 connect admin queue failed (-6). [ 844.731177][ T9215] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 844.739283][ T9215] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 847.606319][ T2934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 848.071323][ T788] (NULL device *): Create Association LS failed: Association Allocation Failed [ 848.150933][ T2934] (NULL device *): queue 0 connect admin queue failed (-6). [ 848.174436][ T2934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 848.182197][ T2934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 850.026331][T10534] loop7: detected capacity change from 0 to 2048 [ 851.603712][T10534] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 851.649412][T10534] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 851.674888][ T2934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 852.030060][ T8613] (NULL device *): Create Association LS failed: Association Allocation Failed [ 852.041258][ T2934] (NULL device *): queue 0 connect admin queue failed (-6). [ 852.074518][ T2934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 852.082146][ T2934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 852.838423][T10543] loop7: detected capacity change from 0 to 1024 [ 853.124372][T10543] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 853.385728][T10543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.840286][T10561] netlink: 'syz.6.785': attribute type 4 has an invalid length. [ 853.848333][T10561] netlink: 17 bytes leftover after parsing attributes in process `syz.6.785'. [ 854.231809][ T2934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 854.439567][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 854.501599][ T2934] (NULL device *): queue 0 connect admin queue failed (-6). [ 854.542509][ T2934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 854.564782][ T2934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 855.694520][T10581] ubi0: attaching mtd0 [ 855.716451][T10581] ubi0: scanning is finished [ 855.721432][T10581] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 855.953284][T10581] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 856.035182][ T9580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.662215][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 856.733351][ T5820] (NULL device *): Create Association LS failed: Association Allocation Failed [ 856.743159][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 856.752070][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 856.761477][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 859.222928][ T2934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 859.238383][ T27] (NULL device *): Create Association LS failed: Association Allocation Failed [ 859.247688][ T2934] (NULL device *): queue 0 connect admin queue failed (-6). [ 859.255086][ T2934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 859.262759][ T2934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 859.401632][T10604] lo: entered allmulticast mode [ 859.407918][T10604] tunl0: entered allmulticast mode [ 859.414068][T10604] gre0: entered allmulticast mode [ 859.421121][T10604] gretap0: entered allmulticast mode [ 859.429679][T10604] erspan0: entered allmulticast mode [ 859.475525][T10604] ip_vti0: entered allmulticast mode [ 859.504664][T10602] loop7: detected capacity change from 0 to 2048 [ 859.505647][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.792'. [ 859.546699][T10604] ip6_vti0: entered allmulticast mode [ 859.553036][T10602] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 859.575260][T10604] sit0: entered allmulticast mode [ 859.581317][T10604] ip6tnl0: entered allmulticast mode [ 859.590767][T10602] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 859.645913][T10604] ip6gre0: entered allmulticast mode [ 859.657734][T10604] syz_tun: entered allmulticast mode [ 859.842122][T10604] ip6gretap0: entered allmulticast mode [ 860.027733][T10604] bridge0: entered allmulticast mode [ 860.455426][T10604] vcan0: entered allmulticast mode [ 860.461259][T10604] bond0: entered allmulticast mode [ 861.194471][T10604] bond_slave_0: entered allmulticast mode [ 861.200290][T10604] bond_slave_1: entered allmulticast mode [ 861.236804][T10604] team0: entered allmulticast mode [ 861.260410][T10604] team_slave_0: entered allmulticast mode [ 861.274834][ T2934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 861.311992][T10604] team_slave_1: entered allmulticast mode [ 861.325635][T10604] dummy0: entered allmulticast mode [ 861.331111][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 861.355635][T10604] nlmon0: entered allmulticast mode [ 861.366957][ T2934] (NULL device *): queue 0 connect admin queue failed (-6). [ 861.405303][T10604] caif0: entered allmulticast mode [ 861.415448][ T2934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 861.453669][T10604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 861.480289][ T2934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 863.595514][ T9226] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 864.996615][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 865.006961][ T9226] (NULL device *): queue 0 connect admin queue failed (-6). [ 865.024353][ T9226] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 865.031976][ T9226] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 867.238027][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 867.314335][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 867.324318][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 867.331676][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 867.394350][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 867.721160][ T6279] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 868.573026][ T6279] usb 7-1: Using ep0 maxpacket: 16 [ 868.614548][ T6279] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.634446][ T9648] Bluetooth: hci0: command 0x0406 tx timeout [ 868.651586][ T6279] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.662822][ T6279] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.683356][ T6279] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 868.696970][ T6279] usb 7-1: config 0 interface 0 has no altsetting 0 [ 868.703910][ T6279] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 868.722460][ T6279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.497418][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 869.504867][ T6279] usb 7-1: config 0 descriptor?? [ 869.574315][ T8613] (NULL device *): Create Association LS failed: Association Allocation Failed [ 869.591136][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 869.634828][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 869.642818][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 870.133739][T10671] loop8: detected capacity change from 0 to 2048 [ 870.147883][ T6279] logitech-djreceiver 0003:046D:C53A.0001: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 870.192899][T10671] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 870.414528][T10671] UDF-fs: warning (device loop8): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 870.567209][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.573687][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.199034][T10683] loop6: detected capacity change from 0 to 256 [ 871.891064][T10683] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 871.973510][ T6279] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 872.185484][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 872.201190][ T8613] (NULL device *): Create Association LS failed: Association Allocation Failed [ 872.211466][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 872.219160][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 872.228942][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 872.819499][T10690] loop7: detected capacity change from 0 to 2048 [ 872.869781][T10690] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 872.869827][T10686] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 872.923168][T10690] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 874.070712][T10702] tcpci: probe of 0-0002 failed with error -5 [ 874.125143][T10698] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 874.133676][T10698] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 874.190209][ T27] usb 7-1: USB disconnect, device number 2 [ 874.267454][T10702] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 874.318481][ T1089] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 874.401487][T10698] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 874.944522][ T5878] (NULL device *): Create Association LS failed: Association Allocation Failed [ 874.965646][ T1089] (NULL device *): queue 0 connect admin queue failed (-6). [ 875.039251][ T1089] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 875.094570][ T1089] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 875.485073][T10694] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 877.247768][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 877.315947][ T5878] (NULL device *): Create Association LS failed: Association Allocation Failed [ 877.348447][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 877.399533][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 877.412404][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 878.309821][T10731] loop6: detected capacity change from 0 to 2048 [ 878.737424][T10731] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 879.065389][T10731] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 879.830335][ T9226] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 880.160371][ T5820] (NULL device *): Create Association LS failed: Association Allocation Failed [ 880.405807][ T9226] (NULL device *): queue 0 connect admin queue failed (-6). [ 880.427716][T10742] loop7: detected capacity change from 0 to 2048 [ 880.448063][ T9226] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 880.476225][ T9226] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 880.515340][T10742] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 880.572457][T10742] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 882.916155][ T137] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 883.098861][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 883.355005][ T137] (NULL device *): queue 0 connect admin queue failed (-6). [ 883.362387][ T137] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 883.407428][ T137] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 885.530136][ T137] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 885.564601][ T8613] (NULL device *): Create Association LS failed: Association Allocation Failed [ 885.580536][ T137] (NULL device *): queue 0 connect admin queue failed (-6). [ 886.235253][ T137] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 886.242873][ T137] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 888.924250][ T130] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 888.984498][ T5820] (NULL device *): Create Association LS failed: Association Allocation Failed [ 888.993727][ T130] (NULL device *): queue 0 connect admin queue failed (-6). [ 889.035476][ T130] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 889.043199][ T130] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 889.049567][T10787] loop7: detected capacity change from 0 to 2048 [ 889.196747][T10787] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 889.253641][T10787] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 891.125189][ T9231] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 891.204295][ T5878] (NULL device *): Create Association LS failed: Association Allocation Failed [ 891.219585][ T9231] (NULL device *): queue 0 connect admin queue failed (-6). [ 891.239218][ T9231] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 891.275592][ T9231] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 891.946537][T10823] loop7: detected capacity change from 0 to 1024 [ 891.959113][T10823] EXT4-fs (loop7): filesystem is read-only [ 891.965029][T10823] EXT4-fs (loop7): Number of reserved GDT blocks insanely large: 1280 [ 892.034913][T10441] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 894.766180][ T2934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 894.797853][ T27] (NULL device *): Create Association LS failed: Association Allocation Failed [ 894.807793][ T2934] (NULL device *): queue 0 connect admin queue failed (-6). [ 894.815454][ T2934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 894.823827][ T2934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 895.160975][T10842] /dev/sg0: Can't lookup blockdev [ 897.849777][ T9226] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 897.890739][ T27] (NULL device *): Create Association LS failed: Association Allocation Failed [ 897.914860][ T9226] (NULL device *): queue 0 connect admin queue failed (-6). [ 897.922226][ T9226] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 897.943466][T10852] loop6: detected capacity change from 0 to 2048 [ 897.969866][ T9226] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 898.010651][T10852] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 898.022414][T10854] FAULT_INJECTION: forcing a failure. [ 898.022414][T10854] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 898.040635][T10852] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 898.820391][T10854] CPU: 0 PID: 10854 Comm: syz.1.833 Not tainted syzkaller #0 [ 898.828139][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.838350][T10854] Call Trace: [ 898.841663][T10854] [ 898.844660][T10854] dump_stack_lvl+0x18c/0x250 [ 898.849403][T10854] ? show_regs_print_info+0x20/0x20 [ 898.854748][T10854] ? load_image+0x420/0x420 [ 898.859476][T10854] ? __lock_acquire+0x7d80/0x7d80 [ 898.864566][T10854] should_fail_ex+0x394/0x4c0 [ 898.869343][T10854] prepare_alloc_pages+0x1e1/0x5b0 [ 898.874506][T10854] __alloc_pages+0x134/0x460 [ 898.879143][T10854] ? zone_statistics+0x170/0x170 [ 898.884120][T10854] ? __mod_lruvec_page_state+0xa5/0x410 [ 898.889740][T10854] ? do_raw_spin_unlock+0x121/0x230 [ 898.894999][T10854] ? __pmd_alloc+0x68c/0x8c0 [ 898.899726][T10854] pte_alloc_one+0x84/0x540 [ 898.904284][T10854] ? pfn_modify_allowed+0x560/0x560 [ 898.909532][T10854] ? hugepage_vma_check+0x471/0x560 [ 898.914794][T10854] handle_mm_fault+0x2f72/0x4a50 [ 898.919958][T10854] ? handle_mm_fault+0xe6/0x4a50 [ 898.924945][T10854] ? numa_migrate_prep+0x350/0x350 [ 898.930122][T10854] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 898.935452][T10854] do_user_addr_fault+0x736/0x12d0 [ 898.940627][T10854] exc_page_fault+0x64/0x100 [ 898.945253][T10854] asm_exc_page_fault+0x26/0x30 [ 898.950135][T10854] RIP: 0010:strncpy_from_user+0x10b/0x2f0 [ 898.955872][T10854] Code: 00 00 48 89 de e8 85 a5 20 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48 [ 898.975580][T10854] RSP: 0018:ffffc9000b827e58 EFLAGS: 00050246 [ 898.981659][T10854] RAX: ffffffff8466ea0b RBX: 0000000000000fe0 RCX: ffff888026da3c00 [ 898.989739][T10854] RDX: 0000000000000002 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 898.997720][T10854] RBP: 0000000000000000 R08: ffffea0000b47807 R09: 1ffffd4000168f00 [ 899.005700][T10854] R10: dffffc0000000000 R11: fffff94000168f01 R12: 0000000000000000 [ 899.013903][T10854] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000 [ 899.021909][T10854] ? strncpy_from_user+0xeb/0x2f0 [ 899.026964][T10854] ? strncpy_from_user+0xeb/0x2f0 [ 899.032000][T10854] getname_flags+0xf6/0x500 [ 899.036522][T10854] __x64_sys_mkdirat+0x7c/0xa0 [ 899.041331][T10854] do_syscall_64+0x55/0xb0 [ 899.045779][T10854] ? clear_bhb_loop+0x40/0x90 [ 899.050836][T10854] ? clear_bhb_loop+0x40/0x90 [ 899.055536][T10854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.061448][T10854] RIP: 0033:0x7f5b5d39e159 [ 899.065893][T10854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.085512][T10854] RSP: 002b:00007f5b5e260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 899.094030][T10854] RAX: ffffffffffffffda RBX: 00007f5b5d625fa0 RCX: 00007f5b5d39e159 [ 899.102011][T10854] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffffffffffffff [ 899.110177][T10854] RBP: 00007f5b5d43506b R08: 0000000000000000 R09: 0000000000000000 [ 899.118379][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.126357][T10854] R13: 00007f5b5d626038 R14: 00007f5b5d625fa0 R15: 00007fffa43923e8 [ 899.134445][T10854] [ 901.051985][ T1089] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 902.050621][ T5820] (NULL device *): Create Association LS failed: Association Allocation Failed [ 902.063702][ T1089] (NULL device *): queue 0 connect admin queue failed (-6). [ 902.366443][ T1089] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 902.374657][ T1089] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 904.829712][ T130] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 904.864281][T10862] veth2: entered allmulticast mode [ 904.879624][ T27] (NULL device *): Create Association LS failed: Association Allocation Failed [ 904.891092][ T130] (NULL device *): queue 0 connect admin queue failed (-6). [ 904.921036][ T130] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 904.984308][ T130] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 907.234890][ T9238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 907.256311][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 907.266239][ T9238] (NULL device *): queue 0 connect admin queue failed (-6). [ 907.273872][ T9238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 907.337326][T10886] loop6: detected capacity change from 0 to 2048 [ 907.362447][T10886] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 907.412824][T10886] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 907.443644][ T9238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 910.977525][ T9226] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 911.004941][ T5878] (NULL device *): Create Association LS failed: Association Allocation Failed [ 911.324315][ T9226] (NULL device *): queue 0 connect admin queue failed (-6). [ 911.331730][ T9226] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 911.340229][ T9226] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 911.349442][T10903] syzkaller0: entered promiscuous mode [ 911.378806][T10903] syzkaller0: entered allmulticast mode [ 913.047107][T10910] loop8: detected capacity change from 0 to 2048 [ 913.857001][ T9238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 913.886485][T10910] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 913.945560][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 913.956071][T10915] loop6: detected capacity change from 0 to 8 [ 913.998952][T10910] UDF-fs: warning (device loop8): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 914.012839][ T9238] (NULL device *): queue 0 connect admin queue failed (-6). [ 914.030573][T10915] SQUASHFS error: zlib decompression failed, data probably corrupt [ 914.038730][ T9238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 914.044202][T10915] SQUASHFS error: Failed to read block 0x9b: -5 [ 914.080716][T10915] SQUASHFS error: Unable to read metadata cache entry [99] [ 914.086579][ T9238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 914.810647][T10915] SQUASHFS error: Unable to read inode 0x127 [ 915.500607][T10915] loop6: detected capacity change from 0 to 4096 [ 915.518150][T10917] loop7: detected capacity change from 0 to 2048 [ 915.575727][T10917] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 915.605190][T10917] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 915.652899][T10921] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 915.730373][T10648] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 916.741968][ T130] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 916.806057][ T5878] (NULL device *): Create Association LS failed: Association Allocation Failed [ 916.824851][ T130] (NULL device *): queue 0 connect admin queue failed (-6). [ 916.832537][ T130] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 916.840419][ T130] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 918.874477][ T1089] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 918.933907][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 920.460009][ T1089] (NULL device *): queue 0 connect admin queue failed (-6). [ 920.469970][ T1089] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 920.477917][ T1089] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 921.678045][T10945] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 923.207855][T10948] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 924.047550][ T9238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 924.060934][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 924.074455][ T9238] (NULL device *): queue 0 connect admin queue failed (-6). [ 924.081914][ T9238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 924.106852][ T9238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 924.715983][T10954] FAULT_INJECTION: forcing a failure. [ 924.715983][T10954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 924.781430][T10954] CPU: 0 PID: 10954 Comm: syz.7.858 Not tainted syzkaller #0 [ 924.789331][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 924.799433][T10954] Call Trace: [ 924.802847][T10954] [ 924.805833][T10954] dump_stack_lvl+0x18c/0x250 [ 924.810564][T10954] ? show_regs_print_info+0x20/0x20 [ 924.815812][T10954] ? load_image+0x420/0x420 [ 924.820364][T10954] ? __lock_acquire+0x7d80/0x7d80 [ 924.825443][T10954] should_fail_ex+0x394/0x4c0 [ 924.830179][T10954] prepare_alloc_pages+0x1e1/0x5b0 [ 924.835341][T10954] __alloc_pages+0x134/0x460 [ 924.839146][T10956] loop6: detected capacity change from 0 to 2048 [ 924.839980][T10954] ? zone_statistics+0x170/0x170 [ 924.851315][T10954] ? __mod_lruvec_page_state+0xa5/0x410 [ 924.857006][T10954] ? do_raw_spin_unlock+0x121/0x230 [ 924.862284][T10954] ? __pmd_alloc+0x68c/0x8c0 [ 924.865265][T10956] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 924.866904][T10954] pte_alloc_one+0x84/0x540 [ 924.881533][T10954] ? pfn_modify_allowed+0x560/0x560 [ 924.886247][T10956] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 924.886894][T10954] ? hugepage_vma_check+0x471/0x560 [ 924.903166][T10954] handle_mm_fault+0x2f72/0x4a50 [ 924.908159][T10954] ? handle_mm_fault+0xe6/0x4a50 [ 924.913150][T10954] ? numa_migrate_prep+0x350/0x350 [ 924.918396][T10954] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 924.923820][T10954] do_user_addr_fault+0x736/0x12d0 [ 924.928982][T10954] exc_page_fault+0x64/0x100 [ 924.933602][T10954] asm_exc_page_fault+0x26/0x30 [ 924.938495][T10954] RIP: 0010:strncpy_from_user+0x10b/0x2f0 [ 924.944268][T10954] Code: 00 00 48 89 de e8 85 a5 20 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48 [ 924.964090][T10954] RSP: 0018:ffffc9000bf37e58 EFLAGS: 00050246 [ 924.970188][T10954] RAX: ffffffff8466ea0b RBX: 0000000000000fe0 RCX: ffff888023a40000 [ 924.978552][T10954] RDX: 0000000000000002 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 924.986539][T10954] RBP: 0000000000000000 R08: ffffea000189c807 R09: 1ffffd4000313900 [ 924.994692][T10954] R10: dffffc0000000000 R11: fffff94000313901 R12: 0000000000000000 [ 925.002670][T10954] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000 [ 925.010743][T10954] ? strncpy_from_user+0xeb/0x2f0 [ 925.015790][T10954] ? strncpy_from_user+0xeb/0x2f0 [ 925.020884][T10954] getname_flags+0xf6/0x500 [ 925.025416][T10954] __x64_sys_mkdirat+0x7c/0xa0 [ 925.030217][T10954] do_syscall_64+0x55/0xb0 [ 925.034754][T10954] ? clear_bhb_loop+0x40/0x90 [ 925.039461][T10954] ? clear_bhb_loop+0x40/0x90 [ 925.044258][T10954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 925.050176][T10954] RIP: 0033:0x7f4258b9e159 [ 925.054620][T10954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.074252][T10954] RSP: 002b:00007f4256df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 925.082705][T10954] RAX: ffffffffffffffda RBX: 00007f4258e25fa0 RCX: 00007f4258b9e159 [ 925.090776][T10954] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffffffffffffff [ 925.098784][T10954] RBP: 00007f4258c3506b R08: 0000000000000000 R09: 0000000000000000 [ 925.106766][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.114763][T10954] R13: 00007f4258e26038 R14: 00007f4258e25fa0 R15: 00007ffdfb7147c8 [ 925.122768][T10954] [ 925.215809][T10648] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 926.174461][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 926.235336][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 926.264574][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 926.271945][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 926.296618][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 928.314429][ T9231] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 928.526806][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 929.284239][ T9231] (NULL device *): queue 0 connect admin queue failed (-6). [ 929.334097][ T9231] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 929.344401][ T9231] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 929.674322][T10979] loop7: detected capacity change from 0 to 256 [ 931.227949][T10979] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 931.240667][T10979] exFAT-fs (loop7): failed to load alloc-bitmap [ 931.247144][T10979] exFAT-fs (loop7): failed to recognize exfat type [ 931.434313][ T9215] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 933.174372][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.176143][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 933.184238][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.243392][ T9215] (NULL device *): queue 0 connect admin queue failed (-6). [ 933.280057][ T9215] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 933.300082][T10985] netlink: 'syz.1.866': attribute type 29 has an invalid length. [ 933.313862][ T9215] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 933.422606][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 933.482500][T10985] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 933.505832][T10991] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 934.363824][T10991] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 934.398913][T10991] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 934.541718][T10991] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 934.581327][T10991] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 934.588585][T10991] pci 0000:00:05.0: vgaarb: bridge control possible [ 934.595221][T10991] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 934.608834][ T23] IPVS: starting estimator thread 0... [ 934.620527][T10991] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 935.503093][T10994] IPVS: using max 17 ests per chain, 40800 per kthread [ 935.543015][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 935.776679][ T5820] (NULL device *): Create Association LS failed: Association Allocation Failed [ 935.922454][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 936.011845][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 936.090438][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 936.433969][T10996] loop7: detected capacity change from 0 to 2048 [ 937.102891][T10996] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 937.580333][T10996] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 938.315523][ T9231] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 939.184827][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 939.214323][ T9231] (NULL device *): queue 0 connect admin queue failed (-6). [ 939.221695][ T9231] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 939.244261][ T9231] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 941.117718][T11024] loop7: detected capacity change from 0 to 128 [ 941.141845][T11025] IPVS: length: 170 != 24 [ 941.233876][T11024] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 941.284345][ T9231] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 941.328266][ T23] (NULL device *): Create Association LS failed: Association Allocation Failed [ 941.339930][T10648] udevd[10648]: incorrect ext4 checksum on /dev/loop7 [ 941.381997][ T9231] (NULL device *): queue 0 connect admin queue failed (-6). [ 941.421495][ T9231] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 941.450844][ T9231] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 941.493685][T10648] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 943.949828][ T9238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 943.975433][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 943.985626][ T9238] (NULL device *): queue 0 connect admin queue failed (-6). [ 943.993037][ T9238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 944.000744][ T9238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 944.245399][T11033] loop7: detected capacity change from 0 to 8192 [ 944.296900][T11033] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 944.338202][T11033] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 944.385412][T11033] REISERFS (device loop7): using journaled data mode [ 944.392666][T11033] reiserfs: using flush barriers [ 944.554475][T11033] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 944.673761][T11033] REISERFS (device loop7): checking transaction log (loop7) [ 944.805024][T11033] REISERFS (device loop7): Using tea hash to sort names [ 944.836187][T11033] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 944.874393][T11033] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 946.156840][ T9238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 946.300469][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 946.334946][ T9238] (NULL device *): queue 0 connect admin queue failed (-6). [ 946.364877][ T9238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 946.414309][ T9238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 949.053982][ T9226] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 950.785540][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 950.865367][ T9226] (NULL device *): queue 0 connect admin queue failed (-6). [ 950.872836][ T9226] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 950.974232][ T9226] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 952.409047][T11085] /dev/sg0: Can't lookup blockdev [ 953.624686][ T9238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 954.473677][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 954.574372][ T9238] (NULL device *): queue 0 connect admin queue failed (-6). [ 954.581751][ T9238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 954.664741][ T9238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 956.806830][ T1089] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 956.867953][ T788] (NULL device *): Create Association LS failed: Association Allocation Failed [ 956.877222][ T1089] (NULL device *): queue 0 connect admin queue failed (-6). [ 956.906978][ T1089] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 957.144461][ T1089] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 959.355586][ T137] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 959.430586][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 959.465587][ T137] (NULL device *): queue 0 connect admin queue failed (-6). [ 959.472960][ T137] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 959.568067][ T137] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 959.677985][ T9648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 959.689575][ T9648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 959.710103][ T9648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 959.748930][ T9648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 959.764993][ T9648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 959.784413][ T9648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 961.379699][T11130] netlink: 56 bytes leftover after parsing attributes in process `syz.1.894'. [ 961.564389][T11130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.894'. [ 961.643991][T11122] chnl_net:caif_netlink_parms(): no params data found [ 961.705295][ T9231] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 961.754360][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 961.781599][ T9231] (NULL device *): queue 0 connect admin queue failed (-6). [ 961.816367][ T9231] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 961.840208][ T9231] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 961.934397][ T9648] Bluetooth: hci3: command tx timeout [ 961.968366][T11122] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.057587][T11122] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.134863][T11122] bridge_slave_0: entered allmulticast mode [ 962.142674][T11122] bridge_slave_0: entered promiscuous mode [ 962.198065][T11122] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.473480][T11122] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.527691][T11122] bridge_slave_1: entered allmulticast mode [ 962.744098][T11149] loop7: detected capacity change from 0 to 1024 [ 962.756050][T11149] EXT4-fs: inline encryption not supported [ 963.214026][T11149] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 963.245197][T11122] bridge_slave_1: entered promiscuous mode [ 963.285635][T11149] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #3: block 1: comm syz.7.897: lblock 1 mapped to illegal pblock 1 (length 1) [ 963.304233][T11149] Quota error (device loop7): write_blk: dquota write failed [ 963.312007][T11149] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 963.322211][T11149] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.897: Failed to acquire dquot type 0 [ 963.335502][T11149] EXT4-fs error (device loop7): ext4_free_blocks:6694: comm syz.7.897: Freeing blocks not in datazone - block = 0, count = 4096 [ 963.356905][T11149] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.897: Invalid inode bitmap blk 0 in block_group 0 [ 963.398337][ T1089] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 963.414518][T11149] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 963.429817][T11149] EXT4-fs (loop7): 1 orphan inode deleted [ 963.437355][T11149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.532042][ T1089] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 963.556604][T11122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.571106][T11122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.610972][ T1089] EXT4-fs error (device loop7): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0 [ 963.617749][T11122] team0: Port device team_slave_0 added [ 963.745069][T11122] team0: Port device team_slave_1 added [ 963.818671][ T9580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.852656][T11122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.884320][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.921155][ T1089] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 963.974583][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 963.993855][T11122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.000124][ T1089] (NULL device *): queue 0 connect admin queue failed (-6). [ 964.012571][ T9648] Bluetooth: hci3: command tx timeout [ 964.066310][T11122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.073794][ T1089] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 964.073945][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.135141][T11122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.145910][ T1089] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 964.342508][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.8.896'. [ 964.351498][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.8.896'. [ 964.557426][T11122] hsr_slave_0: entered promiscuous mode [ 964.604774][T11122] hsr_slave_1: entered promiscuous mode [ 964.624676][T11122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 964.641489][T11122] Cannot create hsr debugfs directory [ 966.099895][ T9648] Bluetooth: hci3: command tx timeout [ 966.255663][ T1089] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 966.345241][ T788] (NULL device *): Create Association LS failed: Association Allocation Failed [ 966.379858][ T1089] (NULL device *): queue 0 connect admin queue failed (-6). [ 966.425370][ T1089] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 966.449866][ T1089] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 968.795077][ T9648] Bluetooth: hci3: command tx timeout [ 968.803685][ T9231] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 968.885086][ T788] (NULL device *): Create Association LS failed: Association Allocation Failed [ 968.915882][ T9231] (NULL device *): queue 0 connect admin queue failed (-6). [ 968.944827][T11122] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 968.952328][ T9231] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 968.970506][ T9231] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 969.022555][T11122] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 969.118936][T11122] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 969.165776][T11122] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 970.849581][T11122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.900414][T11122] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.997128][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.004380][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.044448][ T9231] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 971.060330][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.067701][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.206895][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 971.986689][ T9231] (NULL device *): queue 0 connect admin queue failed (-6). [ 971.994080][ T9231] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 972.042624][ T9231] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 973.551827][T11122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.019391][T11202] smc: net device vlan1 applied user defined pnetid SYZ2 [ 974.812944][ T1089] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 974.827144][ T23] (NULL device *): Create Association LS failed: Association Allocation Failed [ 974.837011][ T1089] (NULL device *): queue 0 connect admin queue failed (-6). [ 974.844777][ T1089] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 974.852513][ T1089] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 977.878358][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 977.953734][T10183] (NULL device *): Create Association LS failed: Association Allocation Failed [ 977.963789][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 977.972680][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 978.046804][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 980.103840][ T9238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 980.274850][ T8613] (NULL device *): Create Association LS failed: Association Allocation Failed [ 980.573194][ T9238] (NULL device *): queue 0 connect admin queue failed (-6). [ 980.667361][ T9238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 980.770511][ T9238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 982.181913][T11122] veth0_vlan: entered promiscuous mode [ 982.264016][T11122] veth1_vlan: entered promiscuous mode [ 982.354829][T11122] veth0_macvtap: entered promiscuous mode [ 982.396668][T11122] veth1_macvtap: entered promiscuous mode [ 982.477908][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.514300][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.558094][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.577402][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.587965][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.599638][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.612085][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.639305][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.661320][T11122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.674428][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.685336][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.790327][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.834462][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.854954][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.866197][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.705119][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 983.883598][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.914726][T10183] (NULL device *): Create Association LS failed: Association Allocation Failed [ 983.939834][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.187537][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 984.199481][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 984.214326][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 984.267718][T11122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.468216][T11122] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.524397][ T2934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 986.632714][T11122] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.663913][ T8613] (NULL device *): Create Association LS failed: Association Allocation Failed [ 986.683628][T11122] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.700391][ T2934] (NULL device *): queue 0 connect admin queue failed (-6). [ 986.709086][T11122] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.718369][ T2934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 986.730856][ T2934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 990.103106][ T2934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 990.462977][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.7.923'. [ 990.479533][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.7.923'. [ 990.896580][ T27] (NULL device *): Create Association LS failed: Association Allocation Failed [ 990.906753][ T2934] (NULL device *): queue 0 connect admin queue failed (-6). [ 990.914267][ T2934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 990.924334][ T2934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 990.990144][ T9247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.027277][ T9247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.078679][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.104669][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.964425][ T137] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 993.117175][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 993.220081][ T137] (NULL device *): queue 0 connect admin queue failed (-6). [ 993.299274][ T137] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 993.401029][ T137] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 993.442184][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.448746][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.182252][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 998.273682][ T8613] (NULL device *): Create Association LS failed: Association Allocation Failed [ 998.283680][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 998.291121][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 998.299012][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 998.526623][T11287] Bluetooth: MGMT ver 1.22 [ 999.455891][T11301] loop9: detected capacity change from 0 to 256 [ 1002.295096][ T9238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 1002.349587][T11301] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 1002.362960][T11301] exFAT-fs (loop9): failed to load alloc-bitmap [ 1002.369437][T11301] exFAT-fs (loop9): failed to recognize exfat type [ 1002.376221][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 1002.376535][ T9238] (NULL device *): queue 0 connect admin queue failed (-6). [ 1002.376562][ T9238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 1002.376582][ T9238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1004.395534][ T9226] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 1004.673070][ T23] (NULL device *): Create Association LS failed: Association Allocation Failed [ 1004.766771][ T9226] (NULL device *): queue 0 connect admin queue failed (-6). [ 1004.774574][ T9226] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 1004.782210][ T9226] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1004.989156][T11310] loop8: detected capacity change from 0 to 2048 [ 1005.022468][T11310] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 1005.596693][T11310] UDF-fs: warning (device loop8): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1005.794832][ T23] Process accounting resumed [ 1007.906990][ T9233] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 1008.054680][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 1008.084512][ T9233] (NULL device *): queue 0 connect admin queue failed (-6). [ 1008.091931][ T9233] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 1009.695507][ T9233] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1012.025410][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 1012.075306][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 1012.094848][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 1012.131028][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 1012.172745][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1015.300595][ T137] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 1015.345093][ T27] (NULL device *): Create Association LS failed: Association Allocation Failed [ 1017.441625][ T137] (NULL device *): queue 0 connect admin queue failed (-6). [ 1017.485647][ T137] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 1017.493387][ T137] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1017.830586][T11358] loop9: detected capacity change from 0 to 2048 [ 1017.957524][T11358] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 1018.045549][T11358] UDF-fs: warning (device loop9): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1020.666715][ T9231] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 1021.099620][ T5819] (NULL device *): Create Association LS failed: Association Allocation Failed [ 1021.108841][ T9231] (NULL device *): queue 0 connect admin queue failed (-6). [ 1021.117116][ T9231] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 1021.124749][ T9231] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1023.320755][ T9231] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 1023.394829][ T27] (NULL device *): Create Association LS failed: Association Allocation Failed [ 1023.412094][ T9231] (NULL device *): queue 0 connect admin queue failed (-6). [ 1023.455374][ T9231] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 1023.463093][ T9231] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1025.537277][ T9247] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 1025.622796][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 1025.687799][ T9247] (NULL device *): queue 0 connect admin queue failed (-6). [ 1025.714228][ T9247] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 1025.753109][ T9247] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1026.956530][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.9.946'. [ 1026.968485][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.9.946'. [ 1027.863865][T11411] loop7: detected capacity change from 0 to 2048 [ 1027.915910][T11411] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1027.947471][T11411] UDF-fs: warning (device loop7): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1029.026595][ T9231] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 1029.114702][ T8684] (NULL device *): Create Association LS failed: Association Allocation Failed [ 1029.124043][ T9231] (NULL device *): queue 0 connect admin queue failed (-6). [ 1029.154609][ T9231] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 1029.183157][ T9231] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1029.211645][T11401] ------------[ cut here ]------------ [ 1029.218016][T11401] failed to allocate ring buffer on CPU 0 [ 1029.233490][T11401] WARNING: CPU: 0 PID: 11401 at kernel/trace/ring_buffer.c:5861 trace_rb_cpu_prepare+0x2fa/0x330 [ 1029.244974][T11401] Modules linked in: [ 1029.248930][T11401] CPU: 0 PID: 11401 Comm: syz.8.954 Not tainted syzkaller #0 [ 1029.256812][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1029.267540][T11401] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330 [ 1029.273710][T11401] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 00 fd ff 48 c7 c7 e0 ef ce 8a 89 de e8 36 c4 c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 28 00 fd ff e9 32 ff ff ff e8 1e 00 [ 1029.295103][T11401] RSP: 0018:ffffc9000499fab8 EFLAGS: 00010246 [ 1029.301417][T11401] RAX: d60cf15006f46700 RBX: 0000000000000000 RCX: 0000000000080000 [ 1029.309948][T11401] RDX: ffffc90010c23000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1029.319027][T11401] RBP: 0000000000000000 R08: ffffc9000499f7c7 R09: 1ffff92000933ef8 [ 1029.327286][T11401] R10: dffffc0000000000 R11: fffff52000933ef9 R12: 0000000000000000 [ 1029.335385][T11401] R13: ffff888028d83b00 R14: ffff888030320410 R15: ffff8880303204b0 [ 1029.343437][T11401] FS: 00007ffac6df66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1029.352851][T11401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1029.360242][T11401] CR2: 0000001b33815ff8 CR3: 0000000075761000 CR4: 00000000003506f0 [ 1029.368397][T11401] Call Trace: [ 1029.371768][T11401] [ 1029.374933][T11401] ? rb_get_reader_page+0xd90/0xd90 [ 1029.380202][T11401] cpuhp_invoke_callback+0x481/0x7e0 [ 1029.385655][T11401] ? __cpuhp_state_add_instance_cpuslocked+0x124/0x570 [ 1029.392656][T11401] ? rb_get_reader_page+0xd90/0xd90 [ 1029.398002][T11401] ? mutex_lock_nested+0x20/0x20 [ 1029.403097][T11401] cpuhp_issue_call+0x3ed/0x740 [ 1029.408977][T11401] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 1029.415977][T11401] __cpuhp_state_add_instance+0x25/0x40 [ 1029.421624][T11401] __ring_buffer_alloc+0x30e/0x550 [ 1029.426963][T11401] allocate_trace_buffers+0x70/0x290 [ 1029.432347][T11401] ? __raw_spin_lock_init+0x45/0x100 [ 1029.437933][T11401] trace_array_create_systems+0x311/0xc70 [ 1029.443828][T11401] instance_mkdir+0xd1/0x130 [ 1029.448552][T11401] tracefs_syscall_mkdir+0x128/0x1a0 [ 1029.453970][T11401] vfs_mkdir+0x2a5/0x470 [ 1029.458358][T11401] do_mkdirat+0x1dc/0x450 [ 1029.462798][T11401] ? vfs_mkdir+0x470/0x470 [ 1029.467455][T11401] __x64_sys_mkdirat+0x89/0xa0 [ 1029.472380][T11401] do_syscall_64+0x55/0xb0 [ 1029.476981][T11401] ? clear_bhb_loop+0x40/0x90 [ 1029.481785][T11401] ? clear_bhb_loop+0x40/0x90 [ 1029.486639][T11401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.492630][T11401] RIP: 0033:0x7ffac8b9e159 [ 1029.497281][T11401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.518148][T11401] RSP: 002b:00007ffac6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1029.526888][T11401] RAX: ffffffffffffffda RBX: 00007ffac8e26090 RCX: 00007ffac8b9e159 [ 1029.535176][T11401] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1029.543290][T11401] RBP: 00007ffac8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1029.551407][T11401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.559600][T11401] R13: 00007ffac8e26128 R14: 00007ffac8e26090 R15: 00007ffd79c0da18 [ 1029.567893][T11401] [ 1029.571045][T11401] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1029.578438][T11401] CPU: 0 PID: 11401 Comm: syz.8.954 Not tainted syzkaller #0 [ 1029.585840][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1029.595902][T11401] Call Trace: [ 1029.599280][T11401] [ 1029.602217][T11401] dump_stack_lvl+0x18c/0x250 [ 1029.607011][T11401] ? show_regs_print_info+0x20/0x20 [ 1029.612349][T11401] ? load_image+0x420/0x420 [ 1029.616893][T11401] panic+0x2ca/0x720 [ 1029.620813][T11401] ? bpf_jit_dump+0xd0/0xd0 [ 1029.625342][T11401] __warn+0x2e0/0x470 [ 1029.629419][T11401] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 1029.634897][T11401] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 1029.640283][T11401] report_bug+0x2be/0x4f0 [ 1029.644784][T11401] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 1029.650182][T11401] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 1029.655651][T11401] ? trace_rb_cpu_prepare+0x2fc/0x330 [ 1029.661035][T11401] handle_bug+0xcf/0x120 [ 1029.665378][T11401] exc_invalid_op+0x1a/0x50 [ 1029.669899][T11401] asm_exc_invalid_op+0x1a/0x20 [ 1029.674859][T11401] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330 [ 1029.680880][T11401] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 00 fd ff 48 c7 c7 e0 ef ce 8a 89 de e8 36 c4 c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 28 00 fd ff e9 32 ff ff ff e8 1e 00 [ 1029.700952][T11401] RSP: 0018:ffffc9000499fab8 EFLAGS: 00010246 [ 1029.707135][T11401] RAX: d60cf15006f46700 RBX: 0000000000000000 RCX: 0000000000080000 [ 1029.715218][T11401] RDX: ffffc90010c23000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1029.723237][T11401] RBP: 0000000000000000 R08: ffffc9000499f7c7 R09: 1ffff92000933ef8 [ 1029.731498][T11401] R10: dffffc0000000000 R11: fffff52000933ef9 R12: 0000000000000000 [ 1029.739679][T11401] R13: ffff888028d83b00 R14: ffff888030320410 R15: ffff8880303204b0 [ 1029.747710][T11401] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 1029.753207][T11401] ? rb_get_reader_page+0xd90/0xd90 [ 1029.758521][T11401] cpuhp_invoke_callback+0x481/0x7e0 [ 1029.763835][T11401] ? __cpuhp_state_add_instance_cpuslocked+0x124/0x570 [ 1029.770794][T11401] ? rb_get_reader_page+0xd90/0xd90 [ 1029.776005][T11401] ? mutex_lock_nested+0x20/0x20 [ 1029.780958][T11401] cpuhp_issue_call+0x3ed/0x740 [ 1029.785836][T11401] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 1029.792645][T11401] __cpuhp_state_add_instance+0x25/0x40 [ 1029.798228][T11401] __ring_buffer_alloc+0x30e/0x550 [ 1029.803364][T11401] allocate_trace_buffers+0x70/0x290 [ 1029.808688][T11401] ? __raw_spin_lock_init+0x45/0x100 [ 1029.814004][T11401] trace_array_create_systems+0x311/0xc70 [ 1029.819751][T11401] instance_mkdir+0xd1/0x130 [ 1029.824362][T11401] tracefs_syscall_mkdir+0x128/0x1a0 [ 1029.829755][T11401] vfs_mkdir+0x2a5/0x470 [ 1029.834014][T11401] do_mkdirat+0x1dc/0x450 [ 1029.838353][T11401] ? vfs_mkdir+0x470/0x470 [ 1029.842884][T11401] __x64_sys_mkdirat+0x89/0xa0 [ 1029.847657][T11401] do_syscall_64+0x55/0xb0 [ 1029.852355][T11401] ? clear_bhb_loop+0x40/0x90 [ 1029.857056][T11401] ? clear_bhb_loop+0x40/0x90 [ 1029.861836][T11401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.867753][T11401] RIP: 0033:0x7ffac8b9e159 [ 1029.872191][T11401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.891926][T11401] RSP: 002b:00007ffac6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1029.900470][T11401] RAX: ffffffffffffffda RBX: 00007ffac8e26090 RCX: 00007ffac8b9e159 [ 1029.908460][T11401] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1029.916466][T11401] RBP: 00007ffac8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1029.924486][T11401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.932472][T11401] R13: 00007ffac8e26128 R14: 00007ffac8e26090 R15: 00007ffd79c0da18 [ 1029.940566][T11401] [ 1029.943915][T11401] Kernel Offset: disabled [ 1029.948388][T11401] Rebooting in 86400 seconds..