last executing test programs: 2m48.901274799s ago: executing program 0 (id=1): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x803, 0x0) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x38, 0x30, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x39, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x1d) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)={0x1, 0x0, @b}, 0x48, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0xcb) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 2m47.26033313s ago: executing program 0 (id=10): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x2) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 2m46.92371925s ago: executing program 0 (id=11): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x24) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000180)=0x4) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x5, 0x1000}], 0x1, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x8020000) 2m36.60424745s ago: executing program 0 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) r4 = getuid() quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) wait4(r6, 0x0, 0x2, 0x0) r7 = getpgid(0x0) getpriority(0x0, r7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2m20.669931482s ago: executing program 32 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) r4 = getuid() quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) wait4(r6, 0x0, 0x2, 0x0) r7 = getpgid(0x0) getpriority(0x0, r7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1m16.786190588s ago: executing program 3 (id=128): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="a000a8832206e809cc5a293169659c50c7059240fd8a7994044fbab9e7a9e370086d339eb8b3f7c0e9b76e", @ANYRES64], 0xa0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x53) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) setrlimit(0xa, &(0x7f00000001c0)={0x78}) ioctl$TIOCMIWAIT(r2, 0x5453, 0x300fff2) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() fsopen(&(0x7f0000000400)='smb3\x00', 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000100)={0x3, 0x0, [{0x1, 0x6, 0x1, 0xd, 0x2007, 0x7}, {0xa, 0x2, 0x7, 0x4, 0x7fff, 0x6, 0x70}, {0xc0000001, 0x8001, 0x4, 0xfffffff7, 0x7, 0x5, 0xfffffc01}]}) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_robust_list(&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f00000003c0)}, 0x1}, 0x18) syz_genetlink_get_family_id$tipc2(0x0, r3) 1m15.230881289s ago: executing program 3 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000100)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) getgroups(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100)) setgroups(0x0, 0x0) shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) syz_io_uring_setup(0x83a, &(0x7f00000000c0)={0x0, 0x3d06, 0x400, 0x2, 0x154}, 0x0, &(0x7f0000000200)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 1m11.288569265s ago: executing program 3 (id=130): sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 1m3.437135541s ago: executing program 3 (id=146): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4c22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0xfffd, @local}, {0x2, 0x4e27, @loopback}, 0x8d, 0x0, 0x0, 0x0, 0xdff6, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1m1.278900893s ago: executing program 3 (id=151): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000850) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000ffffffa600", 0x39}], 0x1) 57.495393529s ago: executing program 3 (id=155): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}, {&(0x7f00000006c0)=""/100, 0x64}, {&(0x7f0000000740)=""/104, 0x68}, {&(0x7f0000000880)=""/234, 0xea}], 0x4, 0x2, 0x5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000980)={0x180, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x93}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcd1d}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc33d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71b76de}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb05}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffb9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x929}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbad}]}, @TIPC_NLA_NET={0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x8001) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x000,usrquota_b\x00imit=8,\x00\x00\x00']) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) shutdown(r1, 0x0) epoll_create1(0x80000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 51.98844474s ago: executing program 4 (id=163): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000180), 0x5005) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchmodat(r5, &(0x7f0000000000)='.\x00', 0xe0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) socket$qrtr(0x2a, 0x2, 0x0) 50.359873875s ago: executing program 4 (id=166): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x0, 0x2) r5 = syz_open_dev$evdev(&(0x7f0000001800), 0x0, 0x2002) write$evdev(r5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@newae={0xac, 0x1e, 0x200, 0x70bd25, 0x25dfdbfc, {{@in=@local, 0x4d6, 0x2, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x84, 0x3503}, [@proto={0x5, 0x19, 0x2b}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @algo_auth={0x48, 0x1, {{'blake2s-224-x86\x00'}}}]}, 0xac}}, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x23) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x44, 0x0, [0x0, 0x1]}}) 48.564302063s ago: executing program 4 (id=169): socket$pptp(0x18, 0x1, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x70bd25, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 40.41668969s ago: executing program 33 (id=155): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}, {&(0x7f00000006c0)=""/100, 0x64}, {&(0x7f0000000740)=""/104, 0x68}, {&(0x7f0000000880)=""/234, 0xea}], 0x4, 0x2, 0x5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000980)={0x180, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x93}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcd1d}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc33d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71b76de}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb05}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffb9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x929}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbad}]}, @TIPC_NLA_NET={0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x8001) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x000,usrquota_b\x00imit=8,\x00\x00\x00']) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) shutdown(r1, 0x0) epoll_create1(0x80000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 35.056675284s ago: executing program 4 (id=179): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_dev$sndctrl(0x0, 0x80, 0x2) r0 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0x70, 0xb8, 0x7000000}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0xf7d}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/236, 0xec, 0x4eb) 33.679126519s ago: executing program 4 (id=181): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x7, 0xc, 0x5, 0x800}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0003006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r3, 0x1, r0, 0x1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000140)={0xa8, 0x0, 0x3, [{}]}, 0xa8) r8 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r8, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r8, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) read$watch_queue(r8, &(0x7f0000000040), 0x0) 28.731052929s ago: executing program 4 (id=186): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 17.662518493s ago: executing program 5 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xd, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e718") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) mount(0x0, 0x0, 0x0, 0x40078, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 17.661072176s ago: executing program 2 (id=197): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x4, "9e8d2745585f6400d1de4d18f5127e7a79a91a95161c79fb72b118bbcca20a4f", 0x34565559}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0xfe, 0xa7f, &(0x7f0000000b40)="$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") mount(0x0, &(0x7f0000000400)='./file2\x00', 0x0, 0x90000, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x181102, 0x8c) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000500)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x8, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000140)) recvfrom(r2, &(0x7f0000000240)=""/121, 0x79, 0x12002, 0x0, 0x0) 15.404561296s ago: executing program 5 (id=198): socket$unix(0x1, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = epoll_create(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40210, 0xffffffffffffffff, 0xf8238000) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='io\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES32, @ANYBLOB="00000000b8750000223d4d89000000000000000000000000000000002c2a9af3eab13ff39cf116c9fac641a8ddf8"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)) poll(&(0x7f0000000080), 0x20000000000003b4, 0xffff568d) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x60000000}) 14.220760083s ago: executing program 5 (id=199): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0d000000010001", 0x7) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x7) r4 = socket$inet_icmp(0x2, 0x2, 0x1) pwritev(r2, &(0x7f0000000b80)=[{&(0x7f00000004c0)="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", 0xfe}, {&(0x7f0000000040)="964a62aa320761923e3162153e3ab851227e8ae9cf32e0de3125dad2335c9e45e2b4c189706895847b2036", 0x2b}, {&(0x7f0000000740)="68c3c0f0b1f3d0e38e89e7cf6fe77dfd4ca5711389d8857ec13a1943f392ffd08bcc3340ede8e3426c4c6b5d0435033551a70ad9986044dcd56e4530658db43afe571046444d00553f3dab49a874e26ecb1fa265e9146feca0c43124e5b304c62daf55915fb4ec7ace98d45a535cb769f6c037d2e95959b3ee526f4a628cc4f21473992f273725b2ac", 0x89}, {&(0x7f0000000980)="513a74ba0136b72278dd35eb0e75b057a1e300b682d39729186c171bfa89618526335d3a867e5d7d0ac18f061899f4bb3daf2aefa483fab1dd0fb86bf81c4129847191684d85cc4502b527da727b1093b1b9888e49cb5f21f3d10570b64c5a7864df5cc738bc603c18b7eaeb033958688be70d798b0d336c346af5722dc1ab32aa10f66b71330b99ebff88f87ff853c2b9e76cdce87c429f22cd74ab50df5e93659e1ea5ec4ed4e19face893862e21c892846313fd3c6d6d2241707a4bcbdf13e6934b570bb615d40660baf5c45960f69ea950c68af2a51aee6c679885", 0xdd}, {&(0x7f0000001180)="00319c5137403821fce2e13e0acf3244b78079f1894f7c60304a020331c3742a46a7bc35c8fea1d0a69fa0752ada5d22fe89dd20a43ad0c6c62a28e8f8e44f3a764a6868a0aaa5e483938040123610f13255ff1a849835d4e98865180e0f7c3f608e29d9b0cf13962d41277181477dd86424029e594cbf6db11326baffb5c547ac0f65deadf59b9310bcf481aeaa23d523b1c23ed55fe8d56fc031267e690c5de8e2575dbd7fdb7d6b3a0720748d7e88225b50b7cd4add40b9da52f6d57a3f7e871ffc3c0d56390ce64ff58bae11309932e864848668bebc308d49ad67e1d9265df5e0ee087fee71e7b9c1ea825ae4aea6c4edab71577259dbcde53add6ca33cf9157fd6b280728970ced469d87c2abdb15fb8b111ae4b9b5d696741713e4a88a799f4049ad6ec6c0f21d01641764623b10135e597578bff1daccb0e6313039b0419ec1c8e506ad493452b26367d5a970795a1ca6f9cccb69265ff0a8fa22c06fbba49ca1cc4922e76515165cc47a3302bb2c89e94b106cbb9a51e5c5d8fbc2e3005070254dc1f5796c9803ed6f93f27ccd342c3183473f9101b7e8387c64417906161ed2e7ae3e2874dcfe99277854d866d54e9c50a04a8c26ef02ffae7088e1cd414d84516163d62adab58668bc79af6ebff590445129a48fe07df76b14a8801becf71fd1175f22864f83f1f94a284580706d65a79b3fa0ad3b84ae20152387160ac5a885ad4b4f8fd9b5ae52e4b02cf5eb39e7c9ecf466b0f7abcfc5faa4c8644e41cc50eebb8087faad8bcbd092a9c8e2c3f5ba68d024116818a0c06d0a61a50aa86ab224931190c1933a6e9468e84193bb1ee3b2efcef9ffde576a5805bc8a4e6d80aa7bdc99974a409d9c2e7e38675acd2199824c279785582284071e9d8e7e7909c3682ac6a591b4937bbb2bbb70d25ab3d24a2e681bfb278222534b571353be36dbe18f68d915b90ba98b8776c907be586634fcd6aec65ddf90eb6e6dbb04605b8d9a031e9e9e0717778c06db21e726e250584c7518868aa0e2cd374a95bc9ad4e9fd923563c80b68a99876d3ac3fda5d0e5e7e5b25a8b76a92bf18b67b065c35635f71f3412f42dd7618a7594c11779a5669a8d8f4bf470d425acd321cc9bc1f4b6abb596609a28cd2df8dd34eac86b8483ca1b46522d11b995e3661f7c7d35bf4a1874bb020004e4f1b5776b08fc1cdd1d7b24feff46f79f4a253fa304f0ed3160c49ecbc308d661a06232bb8155f78756431b3201b51547234a8f7d7b7a46a8060534e3498f97f96e6423eb0ecd7fe82835a05836677f5c3b57b7d4a32ab4fca8f9362bade6e8f57dbc3b4a12ffab7f3a75aa5c8c9ceb33e69eb432b55b97aa1892c51ebc5131249c3fe299a34fdbb7bfa45ad708463d0134a6f072b921c74a455d1a90d1c63ea44d539f47ec1fe2e1c199e93ed4bf077ccfb118ce9cb02b1fb4c86e3282441ded2e7878f8bc992acd5addb98d2542ef14e0efa649a89a5d90bba3fd3b3aa45bfc9cbfa3be21259f060750f3b49d4011da17b6fa9c045cc67df976f3803e924ca65c1a3c6e2553d7ae73442348744de305372926d817628477b1d27422995a2c25eb4cf59e57a26d8b00a730ae467f05350cece976a09d1a06720e4c9bdcd972d3504ee71daabad6ed3608464b65d49b9dc9157e73969478a131594fac72690e68a2c9dbd00f5419ef2ba4e9d529925c8e75d984df30eb0a533d030e1e009575ad1bca2529de887430cfda0c3e733e7a72968618ca8034eb11396b0eb3f2517df9b3ef5dfe98655eebed2bdfda4249e963d802c5d483cf8da1f9b8267b99657aa035461ea94982368f6f81335b985f3d2ca41554283fc152046e8cc6a36d97b967d44ea1c5bb17bf631482f585a4e5b287cf1068ff88ce743fdf2aa7303454caab6185f0be99a92dab64de294e0bb43b7897e782edd3e9a90da69279353da1254490acbde8f09108eb113f61bf160a2f51d1be6ec23a19962337b53d91496f4d322eea20d33f0b229ed18d549ec8ee9308b6b76e649bdf7a2005abc4494b69b98d524080876fb271961d56574ff36908598ee26ddfc1fd867ab4ca70acdefff3fdf0a79505352872619658360fd416dc99f8aa48a1a425317b3503be55cd0a37e9d6b9712697001c1347dac4441b71adb9506ac3", 0x600}, {&(0x7f00000008c0)="8b9f29984846719fd0bd6cd550ef39745e75f02f76d0d83ab1a503951d9650cf713e472009674ca6c2dd11466501e6acd08d79300e802a89582daaa3daa3158fdfc35de82e48f778fe10ffb2260ab8e6f3efe3cf62", 0x55}, {&(0x7f0000000a80)="7d0751c70109b104f22cf0a5ced2068b710f1f9fd6d6cc66262104e2811a1d08ff99a8e97e8156ef40785fc634026e7bf1153971351b9509c64c0e4d1931a42193ecc5782e3d4813f7564a80e66b6c99847e5ed2f531e78bfc65c1450e00ce1e19411a88e97b3fe59c26b2321967999e1d148f813e0cc7b5cfa376a3a266e0f172ff4f386c60dbe0426f9f22b51e47b45750ceb69621c39c583eb751facfc341901eed93d8b38e8738e00258863382cbdeeb1f35022758903afada0874e7fc42d2e09d90ec54bff0673f9b39601d7e62357940de205377fe7ce0984108ece1c74aa39d8f23215b59eb3415da85aa5007264a01997a650d954b20d34c6e", 0xfd}], 0x7, 0x2f8, 0xfffffffd) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x8, 0x1, 0x2, {0x6, @pix_mp={0xa6, 0x1, 0x30364d54, 0x4, 0x5, [{0xc, 0x10001}, {0x100, 0x7}, {0x6, 0x2}, {0xdff, 0x4601}, {0x401, 0x2c}, {0x2, 0xdf}, {0xd, 0x3}, {0x800, 0x2}], 0x44, 0x2, 0x0, 0x2, 0x5}}, 0x80000000}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000400)={0x2, @private=0xa010101, 0x4e20, 0x2, 'wlc\x00', 0x1d, 0x9, 0x5c}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000190001002dbd7000fbdbdf25022080030304fe0b00010000060015000400000008000f000400000008000200ac1414ffff000f001d00000008001e00ff01000008000200ac1414aa080007000000000008001e000200000006001c004e23000008000100e0000001"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) 11.975032127s ago: executing program 34 (id=186): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 11.141232408s ago: executing program 5 (id=201): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f, 0x0, 0x83}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) read$midi(r0, 0x0, 0x20) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x1, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x20) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, 0x0, 0xc040) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f00000001c0)=0x4) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg(r4, 0x0, 0x4000890) chdir(&(0x7f0000000240)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0xffd2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x110, r2, 0x56bce000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)) 10.700455047s ago: executing program 2 (id=202): write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000180)=""/18, 0x12}], 0x2}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) unshare(0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000090000000000000000ffff00850000007a0000009500000000000000", @ANYBLOB="917e00e6ae4f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2b, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x7, 0x2, 0xcc7, 0x8, 0x7, 0x654, 0x100, 0x7, 0x1, 0x6, 0x4, 0x6, 0xffffffff, 0x3, 0x1a449, 0x3, 0x40000003, 0x89, 0x3, 0xf23, 0x6, 0x2000000b, 0x8, 0x3, 0x8, 0x4, 0x10000, 0xfffffff8]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000500)=""/205, 0xcd}], 0x1, 0x1000, 0x101) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) 10.390522809s ago: executing program 1 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f0000fcd000/0x1000)=nil, 0x1000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') setgroups(0x24, 0xffffffffffffffff) preadv(r4, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) getsockopt$inet6_int(r3, 0x29, 0x11, 0x0, &(0x7f0000000100)) 9.09760544s ago: executing program 2 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 9.055704582s ago: executing program 1 (id=205): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r4 = timerfd_create(0x8, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x90000004}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r6, 0x4b41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[], 0x40}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 7.262299365s ago: executing program 1 (id=206): r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r6, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}}, 0x20000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) readv(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x802) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, 0x0, 0x0) write(r7, &(0x7f0000000140), 0x0) 7.103372077s ago: executing program 2 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc) mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x2000001, 0x4010933, r0, 0xb4b40000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = io_uring_setup(0x423a, &(0x7f0000000000)={0x0, 0x6087, 0x40}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20fffe85) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000002c80)={0x2020}, 0x1c93) pread64(r7, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef) 6.028917817s ago: executing program 1 (id=208): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r5 = shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(r4, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r5) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 3.824525429s ago: executing program 2 (id=209): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0d000000010001", 0x7) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x7) r4 = socket$inet_icmp(0x2, 0x2, 0x1) pwritev(r2, &(0x7f0000000b80)=[{&(0x7f00000004c0)="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", 0xfe}, {&(0x7f0000000040)="964a62aa320761923e3162153e3ab851227e8ae9cf32e0de3125dad2335c9e45e2b4c189706895847b2036", 0x2b}, {&(0x7f0000000740)="68c3c0f0b1f3d0e38e89e7cf6fe77dfd4ca5711389d8857ec13a1943f392ffd08bcc3340ede8e3426c4c6b5d0435033551a70ad9986044dcd56e4530658db43afe571046444d00553f3dab49a874e26ecb1fa265e9146feca0c43124e5b304c62daf55915fb4ec7ace98d45a535cb769f6c037d2e95959b3ee526f4a628cc4f21473992f273725b2ac", 0x89}, {&(0x7f0000000980)="513a74ba0136b72278dd35eb0e75b057a1e300b682d39729186c171bfa89618526335d3a867e5d7d0ac18f061899f4bb3daf2aefa483fab1dd0fb86bf81c4129847191684d85cc4502b527da727b1093b1b9888e49cb5f21f3d10570b64c5a7864df5cc738bc603c18b7eaeb033958688be70d798b0d336c346af5722dc1ab32aa10f66b71330b99ebff88f87ff853c2b9e76cdce87c429f22cd74ab50df5e93659e1ea5ec4ed4e19face893862e21c892846313fd3c6d6d2241707a4bcbdf13e6934b570bb615d40660baf5c45960f69ea950c68af2a51aee6c679885", 0xdd}, {&(0x7f0000001180)="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", 0x600}, {&(0x7f00000008c0)="8b9f29984846719fd0bd6cd550ef39745e75f02f76d0d83ab1a503951d9650cf713e472009674ca6c2dd11466501e6acd08d79300e802a89582daaa3daa3158fdfc35de82e48f778fe10ffb2260ab8e6f3efe3cf62", 0x55}, {&(0x7f0000000a80)="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", 0xfd}], 0x7, 0x2f8, 0xfffffffd) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x8, 0x1, 0x2, {0x6, @pix_mp={0xa6, 0x1, 0x30364d54, 0x4, 0x5, [{0xc, 0x10001}, {0x100, 0x7}, {0x6, 0x2}, {0xdff, 0x4601}, {0x401, 0x2c}, {0x2, 0xdf}, {0xd, 0x3}, {0x800, 0x2}], 0x44, 0x2, 0x0, 0x2, 0x5}}, 0x80000000}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000400)={0x2, @private=0xa010101, 0x4e20, 0x2, 'wlc\x00', 0x1d, 0x9, 0x5c}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000190001002dbd7000fbdbdf25022080030304fe0b00010000060015000400000008000f000400000008000200ac1414ffff000f001d00000008001e00ff01000008000200ac1414aa080007000000000008001e000200000006001c004e23000008000100e0000001"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) 3.799987201s ago: executing program 5 (id=210): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000060000001800"/28, @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) read$FUSE(r0, &(0x7f0000001c40)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000050ff"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x800) 749.09051ms ago: executing program 2 (id=213): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x4, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 5 (id=214): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r6 = shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(r5, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r6) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r4, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 73.305283][ T5832] cgroup: Unknown subsys name 'net' [ 73.433593][ T5832] cgroup: Unknown subsys name 'cpuset' [ 73.443427][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.075827][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.932861][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.950319][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.973021][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.982093][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.991187][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.007485][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.014633][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.015582][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.022333][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.031289][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.038345][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.051952][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.054609][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.060263][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.069849][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.075520][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.081234][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.095145][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.095694][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.105414][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.110334][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.124481][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.126251][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.145561][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.161989][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.923278][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 79.956472][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 79.992966][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 80.128938][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 80.167306][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 80.370275][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.378628][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.386553][ T5858] bridge_slave_0: entered allmulticast mode [ 80.394315][ T5858] bridge_slave_0: entered promiscuous mode [ 80.416217][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.423598][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.431549][ T5844] bridge_slave_0: entered allmulticast mode [ 80.439035][ T5844] bridge_slave_0: entered promiscuous mode [ 80.475756][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.483260][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.490848][ T5858] bridge_slave_1: entered allmulticast mode [ 80.499054][ T5858] bridge_slave_1: entered promiscuous mode [ 80.507437][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.515086][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.522769][ T5848] bridge_slave_0: entered allmulticast mode [ 80.530389][ T5848] bridge_slave_0: entered promiscuous mode [ 80.538677][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.546654][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.554507][ T5844] bridge_slave_1: entered allmulticast mode [ 80.562115][ T5844] bridge_slave_1: entered promiscuous mode [ 80.617473][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.624861][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.632568][ T5848] bridge_slave_1: entered allmulticast mode [ 80.640398][ T5848] bridge_slave_1: entered promiscuous mode [ 80.671918][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.679229][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.686747][ T5846] bridge_slave_0: entered allmulticast mode [ 80.694641][ T5846] bridge_slave_0: entered promiscuous mode [ 80.703348][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.710768][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.718102][ T5853] bridge_slave_0: entered allmulticast mode [ 80.725865][ T5853] bridge_slave_0: entered promiscuous mode [ 80.763589][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.776224][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.783558][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.791188][ T5846] bridge_slave_1: entered allmulticast mode [ 80.798663][ T5846] bridge_slave_1: entered promiscuous mode [ 80.806689][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.814308][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.821728][ T5853] bridge_slave_1: entered allmulticast mode [ 80.830449][ T5853] bridge_slave_1: entered promiscuous mode [ 80.842632][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.867513][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.902503][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.916410][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.973884][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.001001][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.014305][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.027740][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.064994][ T5844] team0: Port device team_slave_0 added [ 81.074107][ T5844] team0: Port device team_slave_1 added [ 81.093732][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.105855][ T5858] team0: Port device team_slave_0 added [ 81.161185][ T5858] team0: Port device team_slave_1 added [ 81.170384][ T5848] team0: Port device team_slave_0 added [ 81.176610][ T51] Bluetooth: hci0: command tx timeout [ 81.176617][ T5861] Bluetooth: hci4: command tx timeout [ 81.182249][ T5857] Bluetooth: hci2: command tx timeout [ 81.182425][ T5861] Bluetooth: hci3: command tx timeout [ 81.213797][ T5846] team0: Port device team_slave_0 added [ 81.250820][ T51] Bluetooth: hci1: command tx timeout [ 81.257266][ T5848] team0: Port device team_slave_1 added [ 81.280058][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.287133][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.313544][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.328255][ T5846] team0: Port device team_slave_1 added [ 81.352695][ T5853] team0: Port device team_slave_0 added [ 81.383466][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.390616][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.416939][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.442172][ T5853] team0: Port device team_slave_1 added [ 81.449750][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.456715][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.482897][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.495935][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.502975][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.529894][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.552191][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.559180][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.585855][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.598339][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.605471][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.631609][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.657365][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.664540][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.690481][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.721590][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.728645][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.755596][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.781404][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.788681][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.815682][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.830987][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.838215][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.864713][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.933940][ T5844] hsr_slave_0: entered promiscuous mode [ 81.941541][ T5844] hsr_slave_1: entered promiscuous mode [ 81.993850][ T5848] hsr_slave_0: entered promiscuous mode [ 82.001284][ T5848] hsr_slave_1: entered promiscuous mode [ 82.008265][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 82.014553][ T5848] Cannot create hsr debugfs directory [ 82.046197][ T5858] hsr_slave_0: entered promiscuous mode [ 82.054366][ T5858] hsr_slave_1: entered promiscuous mode [ 82.061269][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 82.067306][ T5858] Cannot create hsr debugfs directory [ 82.151803][ T5846] hsr_slave_0: entered promiscuous mode [ 82.158650][ T5846] hsr_slave_1: entered promiscuous mode [ 82.165497][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 82.171280][ T5846] Cannot create hsr debugfs directory [ 82.194680][ T5853] hsr_slave_0: entered promiscuous mode [ 82.201725][ T5853] hsr_slave_1: entered promiscuous mode [ 82.208107][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 82.214163][ T5853] Cannot create hsr debugfs directory [ 82.887132][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.912539][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.923920][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.947231][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.026792][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.040479][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.053692][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.068306][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.203260][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.217285][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.240360][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.249688][ T51] Bluetooth: hci3: command tx timeout [ 83.255652][ T51] Bluetooth: hci2: command tx timeout [ 83.255702][ T5861] Bluetooth: hci4: command tx timeout [ 83.262475][ T51] Bluetooth: hci0: command tx timeout [ 83.289826][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.316854][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.330345][ T51] Bluetooth: hci1: command tx timeout [ 83.413809][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.426320][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.444536][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.480364][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.502707][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.546802][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.554487][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.607480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.615532][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.646226][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.664193][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.677002][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.688099][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.805088][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.875772][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.947190][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.954470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.010242][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.017471][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.114871][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.225197][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.242720][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.287100][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.294394][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.314921][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.322274][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.350294][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.432378][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.463288][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.513124][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.520560][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.563446][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.570650][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.625516][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.667910][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.675160][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.709220][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.738706][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.746285][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.797710][ T5848] veth0_vlan: entered promiscuous mode [ 84.915824][ T5848] veth1_vlan: entered promiscuous mode [ 85.157344][ T5844] veth0_vlan: entered promiscuous mode [ 85.256602][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.270546][ T5848] veth0_macvtap: entered promiscuous mode [ 85.284847][ T5844] veth1_vlan: entered promiscuous mode [ 85.329312][ T5848] veth1_macvtap: entered promiscuous mode [ 85.341108][ T51] Bluetooth: hci0: command tx timeout [ 85.341156][ T5861] Bluetooth: hci3: command tx timeout [ 85.346564][ T51] Bluetooth: hci4: command tx timeout [ 85.346586][ T51] Bluetooth: hci2: command tx timeout [ 85.409593][ T5861] Bluetooth: hci1: command tx timeout [ 85.460683][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.500739][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.553064][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.598982][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.611304][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.642379][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.652415][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.688959][ T5844] veth0_macvtap: entered promiscuous mode [ 85.745507][ T5844] veth1_macvtap: entered promiscuous mode [ 85.797876][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.844680][ T5846] veth0_vlan: entered promiscuous mode [ 85.909228][ T5846] veth1_vlan: entered promiscuous mode [ 85.930715][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.945685][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.956209][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.975008][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.030379][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.040063][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.049224][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.089984][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.112814][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.124510][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.134728][ T5858] veth0_vlan: entered promiscuous mode [ 86.214699][ T5858] veth1_vlan: entered promiscuous mode [ 86.265218][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.282256][ T5846] veth0_macvtap: entered promiscuous mode [ 86.355267][ T5853] veth0_vlan: entered promiscuous mode [ 86.391061][ T5846] veth1_macvtap: entered promiscuous mode [ 86.415229][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.425213][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.458845][ T5853] veth1_vlan: entered promiscuous mode [ 86.849010][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.903318][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.914584][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.136209][ T5858] veth0_macvtap: entered promiscuous mode [ 87.309942][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.410942][ T5857] Bluetooth: hci2: command tx timeout [ 87.410966][ T51] Bluetooth: hci4: command tx timeout [ 87.417142][ T5164] Bluetooth: hci0: command tx timeout [ 87.424769][ T5858] veth1_macvtap: entered promiscuous mode [ 87.428554][ T5861] Bluetooth: hci3: command tx timeout [ 87.481064][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.490499][ T5861] Bluetooth: hci1: command tx timeout [ 87.528691][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.557276][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.580483][ T5971] loop3: detected capacity change from 0 to 1024 [ 87.894573][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.268417][ T5853] veth0_macvtap: entered promiscuous mode [ 88.357425][ T5853] veth1_macvtap: entered promiscuous mode [ 88.412051][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.585345][ T5974] loop1: detected capacity change from 0 to 32768 [ 88.616993][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.642390][ T5974] (syz.1.2,5974,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.657442][ T5974] (syz.1.2,5974,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.684414][ T12] hfsplus: b-tree write err: -5, ino 25 [ 88.712860][ T5974] JBD2: Ignoring recovery information on journal [ 88.741576][ T12] hfsplus: b-tree write err: -5, ino 4 [ 88.776972][ T5974] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 88.813302][ T12] hfsplus: b-tree write err: -5, ino 2 [ 88.862264][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.908409][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.005005][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.054671][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.064846][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.111653][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.324436][ T5980] loop3: detected capacity change from 0 to 40427 [ 89.336926][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.359898][ T5980] F2FS-fs (loop3): invalid crc value [ 89.375271][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.505110][ T5980] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 89.518285][ T5980] F2FS-fs (loop3): Start checkpoint disabled! [ 89.537114][ T5980] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 89.549518][ T5980] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 89.612896][ T30] audit: type=1800 audit(1773837920.764:2): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 89.687485][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.216251][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.236942][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.257740][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.268453][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.307083][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.502068][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.544151][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.567705][ T36] kworker/u8:2: attempt to access beyond end of device [ 90.567705][ T36] loop3: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 90.642300][ T36] kworker/u8:2: attempt to access beyond end of device [ 90.642300][ T36] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 90.809227][ T5989] vivid-007: ================= START STATUS ================= [ 90.820829][ T5989] vivid-007: Enable Output Cropping: true [ 90.827022][ T5989] vivid-007: Enable Output Composing: true [ 90.833291][ T5989] vivid-007: Enable Output Scaler: true [ 90.841862][ T5989] vivid-007: Tx RGB Quantization Range: Automatic [ 90.844402][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 90.844426][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.844437][ T36] Workqueue: writeback wb_workfn (flush-7:3) [ 90.844473][ T36] Call Trace: [ 90.844480][ T36] [ 90.844488][ T36] dump_stack_lvl+0xe8/0x150 [ 90.844516][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 90.844546][ T36] f2fs_write_end_io+0x1274/0x1740 [ 90.844594][ T36] __submit_merged_bio+0x256/0x700 [ 90.844624][ T36] __submit_merged_write_cond+0x3c9/0x4e0 [ 90.844655][ T36] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 90.844713][ T36] f2fs_write_data_pages+0x287e/0x34f0 [ 90.844775][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 90.844797][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 90.844868][ T36] ? finish_task_switch+0x41f/0xbe0 [ 90.844891][ T36] ? lockdep_hardirqs_on+0x7a/0x110 [ 90.844911][ T36] ? finish_task_switch+0x41f/0xbe0 [ 90.844978][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 90.845003][ T36] do_writepages+0x32e/0x550 [ 90.845032][ T36] ? reacquire_held_locks+0x104/0x190 [ 90.845049][ T36] ? writeback_sb_inodes+0x477/0x1a20 [ 90.845068][ T36] ? preempt_schedule_thunk+0x16/0x30 [ 90.845093][ T36] __writeback_single_inode+0x133/0x11a0 [ 90.845124][ T36] writeback_sb_inodes+0x992/0x1a20 [ 90.845177][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 90.845197][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 90.845261][ T36] ? rcu_is_watching+0x15/0xb0 [ 90.845288][ T36] wb_writeback+0x456/0xb70 [ 90.845314][ T36] ? queue_io+0x211/0x4a0 [ 90.845344][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 90.845362][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 90.845401][ T36] wb_workfn+0x414/0xf50 [ 90.845423][ T36] ? look_up_lock_class+0x57/0x110 [ 90.845457][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 90.845479][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 90.845503][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 90.845548][ T36] ? process_one_work+0x8bb/0x1780 [ 90.845571][ T36] process_one_work+0x9ab/0x1780 [ 90.845619][ T36] ? __pfx_process_one_work+0x10/0x10 [ 90.845641][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 90.845680][ T36] worker_thread+0xba8/0x11e0 [ 90.845720][ T36] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 90.845741][ T36] ? __kthread_parkme+0x7a/0x1f0 [ 90.845759][ T36] ? __kthread_parkme+0x19c/0x1f0 [ 90.845784][ T36] kthread+0x388/0x470 [ 90.845804][ T36] ? __pfx_worker_thread+0x10/0x10 [ 90.845819][ T36] ? __pfx_kthread+0x10/0x10 [ 90.845840][ T36] ret_from_fork+0x51e/0xb90 [ 90.845868][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 90.845890][ T36] ? __switch_to+0xc7d/0x1450 [ 90.845915][ T36] ? __pfx_kthread+0x10/0x10 [ 90.845937][ T36] ret_from_fork_asm+0x1a/0x30 [ 90.845973][ T36] [ 91.139152][ T5989] vivid-007: Transmit Mode: HDMI [ 91.145932][ T5989] vivid-007: Hotplug Present: 0x00000000 [ 91.154922][ T5989] vivid-007: RxSense Present: 0x00000000 [ 91.161031][ T5989] vivid-007: EDID Present: 0x00000000 [ 91.168116][ T5989] vivid-007: ================== END STATUS ================== [ 91.170901][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.438675][ T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 91.524352][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.532758][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 91.532784][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.532797][ T36] Workqueue: writeback wb_workfn (flush-7:3) [ 91.532826][ T36] Call Trace: [ 91.532833][ T36] [ 91.532841][ T36] dump_stack_lvl+0xe8/0x150 [ 91.532872][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 91.532903][ T36] f2fs_write_end_io+0x1274/0x1740 [ 91.532961][ T36] __submit_merged_bio+0x256/0x700 [ 91.532994][ T36] __submit_merged_write_cond+0x3c9/0x4e0 [ 91.533026][ T36] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 91.533075][ T36] f2fs_write_data_pages+0x287e/0x34f0 [ 91.533138][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 91.533162][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.533238][ T36] ? finish_task_switch+0x41f/0xbe0 [ 91.533263][ T36] ? lockdep_hardirqs_on+0x7a/0x110 [ 91.533285][ T36] ? finish_task_switch+0x41f/0xbe0 [ 91.533352][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 91.533379][ T36] do_writepages+0x32e/0x550 [ 91.533408][ T36] ? reacquire_held_locks+0x104/0x190 [ 91.533427][ T36] ? writeback_sb_inodes+0x477/0x1a20 [ 91.533448][ T36] ? preempt_schedule_thunk+0x16/0x30 [ 91.533476][ T36] __writeback_single_inode+0x133/0x11a0 [ 91.533506][ T36] writeback_sb_inodes+0x992/0x1a20 [ 91.533558][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 91.533580][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.533644][ T36] ? rcu_is_watching+0x15/0xb0 [ 91.533672][ T36] wb_writeback+0x456/0xb70 [ 91.533697][ T36] ? queue_io+0x211/0x4a0 [ 91.533728][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 91.533748][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.533786][ T36] wb_workfn+0x414/0xf50 [ 91.533809][ T36] ? look_up_lock_class+0x57/0x110 [ 91.533842][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 91.533864][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.533887][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 91.533939][ T36] ? process_one_work+0x8bb/0x1780 [ 91.533965][ T36] process_one_work+0x9ab/0x1780 [ 91.534011][ T36] ? __pfx_process_one_work+0x10/0x10 [ 91.534036][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.534079][ T36] worker_thread+0xba8/0x11e0 [ 91.534106][ T36] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 91.534130][ T36] ? __kthread_parkme+0x7a/0x1f0 [ 91.534148][ T36] ? __kthread_parkme+0x19c/0x1f0 [ 91.534173][ T36] kthread+0x388/0x470 [ 91.534195][ T36] ? __pfx_worker_thread+0x10/0x10 [ 91.534211][ T36] ? __pfx_kthread+0x10/0x10 [ 91.534233][ T36] ret_from_fork+0x51e/0xb90 [ 91.534261][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 91.534283][ T36] ? __switch_to+0xc7d/0x1450 [ 91.534309][ T36] ? __pfx_kthread+0x10/0x10 [ 91.534329][ T36] ret_from_fork_asm+0x1a/0x30 [ 91.534362][ T36] [ 91.534420][ T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 91.919385][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.939407][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.941656][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.992372][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.048145][ T1224] cfg80211: failed to load regulatory.db [ 92.149064][ T5844] ocfs2: Unmounting device (7,1) on (node local) [ 92.560699][ T5997] loop4: detected capacity change from 0 to 256 [ 92.595052][ T5997] vfat: Bad value for 'dmask' [ 92.622316][ T5998] loop2: detected capacity change from 0 to 2048 [ 94.420092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.952565][ T5998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.232030][ T30] audit: type=1800 audit(1773837926.384:3): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 96.215037][ T6019] loop1: detected capacity change from 0 to 256 [ 96.227147][ T6019] exfat: Deprecated parameter 'utf8' [ 96.233110][ T6019] exfat: Deprecated parameter 'namecase' [ 96.295210][ T6019] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 97.259124][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.335856][ T6024] loop3: detected capacity change from 0 to 1024 [ 98.405345][ T6024] ======================================================= [ 98.405345][ T6024] WARNING: The mand mount option has been deprecated and [ 98.405345][ T6024] and is ignored by this kernel. Remove the mand [ 98.405345][ T6024] option from the mount to silence this warning. [ 98.405345][ T6024] ======================================================= [ 98.505129][ T6028] syz.1.14 (6028): /proc/6025/oom_adj is deprecated, please use /proc/6025/oom_score_adj instead. [ 98.800828][ T6024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.841723][ T6024] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.005662][ T6036] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 101.515475][ T6052] netlink: 'syz.2.18': attribute type 4 has an invalid length. [ 102.379415][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.280832][ T6066] xt_TPROXY: Can be used only with -p tcp or -p udp [ 105.970914][ T5991] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.149755][ T6079] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 107.980126][ T6090] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 107.987929][ T6090] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 107.997237][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 108.246822][ T6092] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.444787][ T5991] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.882868][ T5991] usb 4-1: Using ep0 maxpacket: 32 [ 109.450774][ T5991] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.513219][ T5991] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.682702][ T5991] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.40 [ 109.767790][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.852405][ T5991] usb 4-1: Product: syz [ 109.924450][ T5991] usb 4-1: Manufacturer: syz [ 109.969503][ T5991] usb 4-1: SerialNumber: syz [ 110.732542][ T5991] gspca_main: spca501-2.14.0 probing 0000:0000 [ 111.219710][ T6099] loop2: detected capacity change from 0 to 512 [ 111.230651][ T6099] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.237739][ T6099] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.250847][ T6099] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.262375][ T5991] gspca_spca501: reg write: error -110 [ 111.267892][ T5991] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 111.275641][ T5991] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 111.299473][ T6099] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.30: bad orphan inode 131083 [ 111.310002][ T6099] loop2: lost filesystem error report for type 5 error -117 [ 111.319359][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 111.334573][ C0] EXT4-fs (loop2): initial error at time 1773837942: ext4_orphan_get:1417 [ 111.343191][ C0] EXT4-fs (loop2): last error at time 1773837942: ext4_orphan_get:1417 [ 111.359017][ T6099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.379228][ T6099] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 111.414908][ T5991] usb 4-1: 0:2 : does not exist [ 111.587172][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.632299][ T6113] mmap: syz.3.34 (6113) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.660141][ T6113] loop3: detected capacity change from 0 to 256 [ 111.692156][ T6113] exfat: Deprecated parameter 'utf8' [ 111.705017][ T6102] syz.1.31 (6102) used greatest stack depth: 17288 bytes left [ 111.722851][ T6113] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 113.288784][ T5991] usb 4-1: USB disconnect, device number 3 [ 114.123695][ T5895] udevd[5895]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.459561][ T6108] Zero length message leads to an empty skb [ 115.062413][ T6129] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 115.369414][ T809] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.630950][ T809] usb 3-1: config 48 has an invalid descriptor of length 102, skipping remainder of the config [ 115.734769][ T6137] xt_TCPMSS: Only works on TCP SYN packets [ 115.876735][ T809] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 1 [ 116.117983][ T809] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 116.419188][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.438185][ T809] usb 3-1: Product: syz [ 116.443915][ T809] usb 3-1: Manufacturer: syz [ 116.448650][ T809] usb 3-1: SerialNumber: syz [ 116.982775][ T6147] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 117.058303][ T6147] loop1: detected capacity change from 0 to 256 [ 118.203044][ T6147] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 118.872141][ T809] usb 3-1: USB disconnect, device number 2 [ 118.947576][ T6155] syzkaller0: entered promiscuous mode [ 118.979433][ T6155] syzkaller0: entered allmulticast mode [ 120.205751][ T5164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.215924][ T5164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.226870][ T5164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.322339][ T6173] binder_alloc: binder_alloc_mmap_handler: 6166 200000fed000-200001000000 already mapped failed -16 [ 120.932699][ T5164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.943039][ T5164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.298576][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 121.327837][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 121.365209][ T6175] ceph: No mds server is up or the cluster is laggy [ 121.389026][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 121.428424][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 121.915582][ T6180] sctp: [Deprecated]: syz.2.47 (pid 6180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.915582][ T6180] Use struct sctp_sack_info instead [ 122.038417][ T6193] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 123.011669][ T5164] Bluetooth: hci5: command tx timeout [ 123.342164][ T6168] chnl_net:caif_netlink_parms(): no params data found [ 125.100512][ T5164] Bluetooth: hci5: command tx timeout [ 125.650326][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.669103][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.708940][ T6168] bridge_slave_0: entered allmulticast mode [ 125.737232][ T6168] bridge_slave_0: entered promiscuous mode [ 125.796306][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.161859][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.794292][ T6168] bridge_slave_1: entered allmulticast mode [ 126.835004][ T6168] bridge_slave_1: entered promiscuous mode [ 127.029214][ T6219] program syz.2.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.169432][ T5164] Bluetooth: hci5: command tx timeout [ 127.837451][ T6168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.261399][ T6168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.118942][ T6227] /dev/nullb0: Can't open blockdev [ 129.249486][ T5164] Bluetooth: hci5: command tx timeout [ 129.358826][ T6168] team0: Port device team_slave_0 added [ 129.398183][ T6168] team0: Port device team_slave_1 added [ 129.467099][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.474377][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.545096][ T6168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.559206][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.680631][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.711164][ T6168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.984397][ T6235] netlink: 'syz.4.59': attribute type 2 has an invalid length. [ 130.718401][ T6237] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 130.921578][ T6168] hsr_slave_0: entered promiscuous mode [ 131.699344][ T6168] hsr_slave_1: entered promiscuous mode [ 132.182874][ T6168] debugfs: 'hsr0' already exists in 'hsr' [ 132.201845][ T6168] Cannot create hsr debugfs directory [ 132.950470][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.959241][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.174918][ T6256] loop2: detected capacity change from 0 to 131072 [ 134.232291][ T6256] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 134.521079][ T6256] XFS (loop2): Starting recovery (logdev: internal) [ 134.582941][ T6256] XFS (loop2): Ending recovery (logdev: internal) [ 136.582629][ T6168] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.855908][ T6168] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.871770][ T6168] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.130098][ T6168] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.672357][ T5853] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 138.742102][ T6288] loop1: detected capacity change from 0 to 1024 [ 138.749218][ T6288] EXT4-fs: inline encryption not supported [ 138.837584][ T6288] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.119039][ T6288] EXT4-fs error (device loop1): ext4_map_blocks:779: inode #3: block 2: comm syz.1.71: lblock 2 mapped to illegal pblock 2 (length 1) [ 139.133349][ T6288] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 139.139313][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 139.154964][ C0] EXT4-fs (loop1): initial error at time 1773837970: ext4_map_blocks:779: inode 3: block 2 [ 139.165049][ C0] EXT4-fs (loop1): last error at time 1773837970: ext4_map_blocks:779: inode 3: block 2 [ 139.337184][ T6288] EXT4-fs (loop1): Remounting filesystem read-only [ 139.344848][ T6288] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 139.353164][ T6288] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 139.362742][ T6288] EXT4-fs (loop1): 1 orphan inode deleted [ 139.370863][ T6288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.423536][ T6288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.977370][ T6309] kernel profiling enabled (shift: 9) [ 141.023752][ T6309] loop4: detected capacity change from 0 to 512 [ 141.301019][ T6309] EXT4-fs (loop4): orphan cleanup on readonly fs [ 141.329172][ T6309] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 141.350484][ T6309] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 141.366168][ T6309] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.74: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 141.384370][ T6309] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 141.399297][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 141.415063][ C1] EXT4-fs (loop4): last error at time 1773837972: ext4_ext_check_inode:521: inode 13 [ 141.483144][ T6309] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.74: couldn't read orphan inode 13 (err -117) [ 141.495357][ T6309] loop4: lost filesystem error report for type 5 error -117 [ 141.526006][ T6309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.810540][ T5858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.036880][ T6168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.874341][ T6168] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.967628][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.974931][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.225631][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.232933][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.029626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.553807][ T6334] loop1: detected capacity change from 0 to 16 [ 146.804968][ T6334] erofs (device loop1): mounted with root inode @ nid 36. [ 146.897171][ T6339] process 'syz.4.80' launched '/dev/fd/7' with NULL argv: empty string added [ 147.573526][ T30] audit: type=1800 audit(1773837978.624:4): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.81" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 147.655702][ T6168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.944921][ T6342] loop3: detected capacity change from 0 to 32768 [ 147.994590][ T6342] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.75 (6342) [ 148.037608][ T6342] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 148.048143][ T6342] BTRFS info (device loop3): using crc32c checksum algorithm [ 148.057678][ T6342] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 148.137875][ T6349] JFS: discard option not supported on device [ 148.148143][ T6349] Mount JFS Failure: -22 [ 148.152548][ T6349] jfs_mount failed w/return code = -22 [ 148.721731][ T6342] BTRFS info (device loop3): rebuilding free space tree [ 148.805776][ T6342] BTRFS info (device loop3): disabling free space tree [ 148.812793][ T6342] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.822825][ T6342] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.840327][ T6342] BTRFS info (device loop3): enabling ssd optimizations [ 148.847443][ T6342] BTRFS info (device loop3): turning on async discard [ 148.854325][ T6342] BTRFS info (device loop3): enabling disk space caching [ 148.861714][ T6342] BTRFS info (device loop3): force clearing of disk cache [ 148.868870][ T6342] BTRFS info (device loop3): use zstd compression, level 3 [ 149.116470][ T6369] loop2: detected capacity change from 0 to 2048 [ 149.156489][ T6369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.962507][ T30] audit: type=1804 audit(1773837981.814:5): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.75" name="/newroot/16/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 151.538841][ T6387] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 151.605770][ T6387] team0: Failed to send options change via netlink (err -105) [ 151.613441][ T6387] team0: Port device dummy0 added [ 153.382754][ T6389] loop4: detected capacity change from 0 to 40427 [ 153.397399][ T6389] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 153.406279][ T6389] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 153.423333][ T6389] F2FS-fs (loop4): invalid crc value [ 153.485900][ T6389] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 153.515685][ T6389] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 153.524053][ T6389] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.725361][ T6168] veth0_vlan: entered promiscuous mode [ 154.547691][ T6168] veth1_vlan: entered promiscuous mode [ 154.869125][ T5848] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 155.072608][ T6168] veth0_macvtap: entered promiscuous mode [ 155.091928][ T5164] Bluetooth: hci4: command 0x0406 tx timeout [ 155.146772][ T6168] veth1_macvtap: entered promiscuous mode [ 155.399927][ T6168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.054340][ T6168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.162255][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.198479][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.322311][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.472831][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.157294][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.183186][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.378424][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.404265][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.585001][ T6425] overlayfs: failed to resolve './file1': -2 [ 161.761646][ T6444] syz.4.98 uses obsolete (PF_INET,SOCK_PACKET) [ 162.482065][ T6447] vivid-003: kernel_thread() failed [ 163.010654][ T6453] random: crng reseeded on system resumption [ 165.203228][ T6466] netlink: 'syz.1.103': attribute type 2 has an invalid length. [ 165.211075][ T6466] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 168.164826][ T6475] loop2: detected capacity change from 0 to 1024 [ 168.288232][ T6481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.088368][ T6475] EXT4-fs: inline encryption not supported [ 169.200083][ T6475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.414447][ T5861] Bluetooth: hci5: link tx timeout [ 170.540672][ T5861] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.564892][ T5164] Bluetooth: hci5: link tx timeout [ 170.571624][ T5164] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.019820][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.557905][ T6506] loop2: detected capacity change from 0 to 512 [ 172.583612][ T6506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.657421][ T6509] warning: `syz.1.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 173.126632][ T5164] Bluetooth: hci5: command 0x0406 tx timeout [ 173.427764][ T6513] x_tables: duplicate underflow at hook 1 [ 173.550291][ T6506] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.113: orphan file block 0: bad magic [ 173.562251][ T6506] loop2: lost filesystem error report for type 5 error -117 [ 173.569551][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 173.583483][ C0] EXT4-fs (loop2): initial error at time 1773838004: ext4_init_orphan_info:618 [ 173.592507][ C0] EXT4-fs (loop2): last error at time 1773838004: ext4_init_orphan_info:618 [ 173.604651][ T6506] EXT4-fs (loop2): mount failed [ 174.191018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 176.334177][ T6527] : entered promiscuous mode [ 178.823504][ T6535] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.850089][ T6545] loop1: detected capacity change from 0 to 32768 [ 180.875325][ T6545] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.935679][ T6545] XFS (loop1): Ending clean mount [ 180.955506][ T6545] XFS (loop1): Quotacheck needed: Please wait. [ 181.038369][ T6545] XFS (loop1): Quotacheck: Done. [ 182.439380][ T6563] orangefs_mount: mount request failed with -4 [ 182.695844][ T5844] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.753240][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.765207][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.779191][ T6566] bridge0: entered allmulticast mode [ 183.483704][ T6568] bridge_slave_1: left allmulticast mode [ 183.528069][ T6568] bridge_slave_1: left promiscuous mode [ 183.634543][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.933710][ T6568] bridge_slave_0: left allmulticast mode [ 185.003283][ T6568] bridge_slave_0: left promiscuous mode [ 185.082716][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.677717][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.120'. [ 187.809614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 188.562399][ T6594] Illegal XDP return value 4294967274 on prog (id 11) dev N/A, expect packet loss! [ 191.061202][ T1224] IPVS: starting estimator thread 0... [ 191.189479][ T6611] IPVS: using max 23 ests per chain, 55200 per kthread [ 192.245119][ T6622] Bluetooth: MGMT ver 1.23 [ 194.421358][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.435373][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.485238][ T6649] netlink: 64 bytes leftover after parsing attributes in process `syz.3.130'. [ 195.489336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.511745][ T6648] loop1: detected capacity change from 0 to 8 [ 195.594958][ T6648] SQUASHFS error: Failed to read block 0x1ec: -5 [ 195.601509][ T6648] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 198.195717][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 198.257907][ T6669] ip6gretap1: entered allmulticast mode [ 200.007722][ T6672] 9p: Bad value for 'wfdno' [ 200.307644][ T6676] overlay: ./bus is not a directory [ 201.894420][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 201.900609][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 201.911343][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 201.912797][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 204.139867][ T6704] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 205.565827][ T6713] netlink: 'syz.4.159': attribute type 27 has an invalid length. [ 207.846793][ T6724] loop5: detected capacity change from 0 to 512 [ 208.990661][ T6732] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 209.068562][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 210.439405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 211.211784][ T5864] Bluetooth: hci3: hardware error 0x07 [ 211.757708][ T6747] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 211.765049][ T6747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.135630][ T6747] vhci_hcd vhci_hcd.0: Device attached [ 212.728475][ T6749] vhci_hcd: connection closed [ 212.843736][ T12] vhci_hcd vhci_hcd.5: stop threads [ 212.961748][ T12] vhci_hcd vhci_hcd.5: release socket [ 213.018230][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 215.249777][ T5864] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 215.969556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 219.340659][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 219.897857][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.909676][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.920358][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.929805][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.937365][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.271601][ T6773] Device name cannot be null; rc = [-22] [ 221.970191][ T5861] Bluetooth: hci6: command tx timeout [ 222.251399][ T6775] loop1: detected capacity change from 0 to 131072 [ 222.283341][ T6775] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 222.291627][ T6775] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 222.307714][ T6775] F2FS-fs (loop1): invalid crc value [ 222.392335][ T6775] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 222.533946][ T6775] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 222.541365][ T6775] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 222.791422][ T6791] cgroup: Invalid name [ 223.954804][ T6799] overlay: ./file1 is not a directory [ 224.194590][ T5861] Bluetooth: hci6: command tx timeout [ 224.724430][ T6804] loop5: detected capacity change from 0 to 4096 [ 224.802988][ T6069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.210129][ T5861] Bluetooth: hci6: command tx timeout [ 228.289331][ T5861] Bluetooth: hci6: command tx timeout [ 228.293075][ T6069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.423690][ T6813] netlink: 'syz.4.181': attribute type 2 has an invalid length. [ 232.270616][ T6069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.334884][ T6769] chnl_net:caif_netlink_parms(): no params data found [ 232.430931][ T6069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.648764][ T6845] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 232.671939][ T6844] loop4: detected capacity change from 0 to 16 [ 232.795036][ T6844] erofs (device loop4): mounted with root inode @ nid 36. [ 232.848159][ T6847] loop1: detected capacity change from 0 to 1024 [ 232.882627][ T6847] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 232.914381][ T6847] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 232.949042][ T6847] EXT4-fs (loop1): orphan cleanup on readonly fs [ 232.989495][ T6844] syz.4.186: attempt to access beyond end of device [ 232.989495][ T6844] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 233.008760][ T6847] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.180: Freeing blocks not in datazone - block = 0, count = 4096 [ 233.067172][ T6844] syz.4.186: attempt to access beyond end of device [ 233.067172][ T6844] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 233.096303][ T6847] loop1: lost filesystem error report for type 5 error -117 [ 233.099275][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 233.113136][ C0] EXT4-fs (loop1): initial error at time 1773838064: ext4_free_blocks:6724 [ 233.123319][ C0] EXT4-fs (loop1): last error at time 1773838064: ext4_free_blocks:6724 [ 233.161267][ T6847] EXT4-fs (loop1): 1 orphan inode deleted [ 233.187314][ T6847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.252734][ T6844] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 233.433616][ T6844] erofs (device loop4): read error -117 @ 1 of nid 89 [ 233.469539][ T30] audit: type=1800 audit(1773838064.624:6): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 233.491998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 234.176066][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.441551][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.468086][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.496863][ T6769] bridge_slave_0: entered allmulticast mode [ 235.236212][ T6769] bridge_slave_0: entered promiscuous mode [ 235.270599][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.287759][ T6861] loop1: detected capacity change from 0 to 16 [ 235.296555][ T6861] erofs (device loop1): mounted with root inode @ nid 36. [ 235.312312][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.353978][ T6769] bridge_slave_1: entered allmulticast mode [ 235.373309][ T6861] syz.1.189: attempt to access beyond end of device [ 235.373309][ T6861] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 235.402153][ T6769] bridge_slave_1: entered promiscuous mode [ 235.422884][ T6861] syz.1.189: attempt to access beyond end of device [ 235.422884][ T6861] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 235.500643][ T6861] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 235.566837][ T6769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.598011][ T6861] erofs (device loop1): read error -117 @ 1 of nid 89 [ 235.756196][ T30] audit: type=1800 audit(1773838066.784:7): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.189" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 236.877045][ T6769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.989409][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 238.099522][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 239.168574][ T6769] team0: Port device team_slave_0 added [ 239.203482][ T6769] team0: Port device team_slave_1 added [ 242.837245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 244.067231][ T6069] bridge_slave_1: left allmulticast mode [ 244.090548][ T6069] bridge_slave_1: left promiscuous mode [ 244.106920][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.171598][ T6069] bridge_slave_0: left allmulticast mode [ 244.333032][ T6069] bridge_slave_0: left promiscuous mode [ 244.352195][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.498958][ T6910] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 246.299723][ T6913] loop2: detected capacity change from 0 to 2048 [ 246.734111][ T6914] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.295625][ T6913] nilfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 247.473599][ T6915] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 248.070577][ T6915] Remounting filesystem read-only [ 248.415599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 248.766827][ T6069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.839873][ T6069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.856029][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.874772][ T6069] bond0 (unregistering): Released all slaves [ 248.881158][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.890184][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.903455][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.918913][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.039354][ T6769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.099071][ T6918] loop5: detected capacity change from 0 to 1024 [ 249.106896][ T6769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.153405][ T6918] EXT4-fs: Ignoring removed bh option [ 249.347412][ T6769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.382400][ T6769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.404882][ T6769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.506233][ T6769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.549147][ T6918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.593223][ T5864] Bluetooth: hci2: command tx timeout [ 251.769111][ T6938] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 251.783323][ T6938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.205'. [ 251.796646][ T6940] loop2: detected capacity change from 0 to 16 [ 251.914731][ T6940] erofs (device loop2): mounted with root inode @ nid 36. [ 251.936976][ T6939] syz.2.204: attempt to access beyond end of device [ 251.936976][ T6939] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 251.980760][ T6939] syz.2.204: attempt to access beyond end of device [ 251.980760][ T6939] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 251.995116][ T6939] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 252.006739][ T6939] erofs (device loop2): read error -117 @ 1 of nid 89 [ 252.016420][ T30] audit: type=1800 audit(1773838082.538:8): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 252.152010][ T6943] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.201: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 253.210198][ T6769] hsr_slave_0: entered promiscuous mode [ 253.220770][ T6769] hsr_slave_1: entered promiscuous mode [ 253.228366][ T6769] debugfs: 'hsr0' already exists in 'hsr' [ 253.359603][ T6769] Cannot create hsr debugfs directory [ 253.376344][ T6943] EXT4-fs (loop5): Remounting filesystem read-only [ 253.557375][ T6952] loop2: detected capacity change from 0 to 32768 [ 253.767668][ T5864] Bluetooth: hci2: command tx timeout [ 253.783698][ T6919] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null. [ 254.557996][ T6919] overlayfs: failed to verify upper root origin [ 255.675581][ T6168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.975042][ T5864] Bluetooth: hci2: command tx timeout [ 256.753061][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.931094][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.202759][ T5864] Bluetooth: hci2: command tx timeout [ 258.258378][ T6983] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 259.475515][ T31] INFO: task syz.0.23:6072 blocked for more than 143 seconds. [ 259.483121][ T31] Not tainted syzkaller #0 [ 259.518346][ T31] Blocked by coredump. [ 259.555581][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.602085][ T31] task:syz.0.23 state:D stack:27496 pid:6072 tgid:6070 ppid:5846 task_flags:0x40044c flags:0x00080002 [ 259.660772][ T31] Call Trace: [ 259.665774][ T31] [ 259.669896][ T31] __schedule+0x1665/0x5590 [ 259.689096][ T31] ? __pfx___schedule+0x10/0x10 [ 259.792003][ T31] ? schedule+0x90/0x360 [ 259.804941][ T31] schedule+0x164/0x360 [ 259.816127][ T31] schedule_preempt_disabled+0x13/0x30 [ 259.828904][ T31] rwsem_down_read_slowpath+0x6d9/0x940 [ 259.841500][ T31] ? rwsem_down_read_slowpath+0x596/0x940 [ 259.856846][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 259.902473][ T31] ? do_futex+0x395/0x420 [ 259.915241][ T31] down_read+0x99/0x2e0 [ 259.920519][ T31] ? exit_mm+0x64/0x250 [ 259.925497][ T31] exit_mm+0x73/0x250 [ 259.929705][ T31] ? unwind_deferred_task_exit+0x67/0xa0 [ 260.105553][ T31] do_exit+0x8b9/0x2490 [ 260.110487][ T31] ? __pfx_do_exit+0x10/0x10 [ 260.115534][ T31] do_group_exit+0x21b/0x2d0 [ 260.132414][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.139977][ T31] get_signal+0x1284/0x1330 [ 260.145300][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 260.153930][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 260.186610][ T31] exit_to_user_mode_loop+0x86/0x480 [ 260.220869][ T31] ? rcu_is_watching+0x15/0xb0 [ 260.227723][ T31] do_syscall_64+0x32d/0xf80 [ 260.243537][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.252116][ T31] ? clear_bhb_loop+0x40/0x90 [ 260.258521][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.265019][ T31] RIP: 0033:0x7f5089d9c799 [ 260.272793][ T31] RSP: 002b:00007f508abd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 260.283224][ T31] RAX: 000000000000000b RBX: 00007f508a016090 RCX: 00007f5089d9c799 [ 260.293661][ T31] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 260.303090][ T31] RBP: 00007f5089e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 260.316457][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.337191][ T31] R13: 00007f508a016128 R14: 00007f508a016090 R15: 00007ffe0d43cd68 [ 260.358293][ T31] [ 260.362226][ T31] [ 260.362226][ T31] Showing all locks held in the system: [ 260.370937][ T31] 1 lock held by khungtaskd/31: [ 260.379370][ T31] #0: ffffffff8e75d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 260.390151][ T31] 3 locks held by kworker/u8:4/58: [ 260.412875][ T31] #0: ffff8880337ad940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 260.430616][ T31] #1: ffffc900015f7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 260.459441][ T31] #2: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 260.479565][ T31] 2 locks held by dhcpcd/5509: [ 260.490281][ T31] #0: ffff88805a5f46e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe4/0xe80 [ 260.507176][ T31] #1: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 260.516828][ T31] 2 locks held by getty/5601: [ 260.521539][ T31] #0: ffff8880387b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 260.545112][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 260.575674][ T31] 6 locks held by kworker/u8:11/6069: [ 260.581132][ T31] #0: ffff88801c2b6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 260.592017][ T31] #1: ffffc900050f7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 260.602232][ T31] #2: ffffffff8fbc6d68 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 260.611917][ T31] #3: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 260.639944][ T31] #4: ffff888059660780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1a8/0x1470 [ 260.653014][ T31] #5: ffffffff8e7638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 260.677485][ T31] 1 lock held by syz.0.23/6072: [ 260.686594][ T31] #0: ffff88807d2ce738 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 260.702569][ T31] 3 locks held by udevd/6661: [ 260.707888][ T31] 2 locks held by syz-executor/6769: [ 260.713785][ T31] #0: ffffffff901280e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 260.723471][ T31] #1: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 260.732717][ T31] 2 locks held by syz-executor/6920: [ 260.738130][ T31] #0: ffffffff90128218 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 260.747812][ T31] #1: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 260.757003][ T31] 1 lock held by syz.2.213/6988: [ 260.762168][ T31] #0: ffffffff8e7637b8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 260.772555][ T31] 1 lock held by dhcpcd/6994: [ 260.777254][ T31] #0: ffff88804a058260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 260.788232][ T31] 2 locks held by dhcpcd/6996: [ 260.793169][ T31] #0: ffff88804f20a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 260.804807][ T31] #1: ffffffff8e7638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 260.815775][ T31] 1 lock held by dhcpcd/6997: [ 260.820461][ T31] #0: ffff88804f208260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 260.830241][ T31] 1 lock held by dhcpcd/6998: [ 260.834977][ T31] #0: ffff88804f20e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 260.845099][ T31] 1 lock held by dhcpcd/6999: [ 260.849841][ T31] #0: ffff88804f20c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 260.859714][ T31] 1 lock held by dhcpcd/7000: [ 260.864599][ T31] #0: ffff88804f07a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 260.884077][ T31] [ 260.886690][ T31] ============================================= [ 260.886690][ T31] [ 260.921604][ T31] NMI backtrace for cpu 0 [ 260.921622][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 260.921635][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.921641][ T31] Call Trace: [ 260.921646][ T31] [ 260.921651][ T31] dump_stack_lvl+0xe8/0x150 [ 260.921673][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 260.921690][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 260.921707][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 260.921724][ T31] sys_info+0x135/0x170 [ 260.921738][ T31] watchdog+0x1002/0x1060 [ 260.921756][ T31] ? watchdog+0x1da/0x1060 [ 260.921772][ T31] kthread+0x388/0x470 [ 260.921785][ T31] ? __pfx_watchdog+0x10/0x10 [ 260.921797][ T31] ? __pfx_kthread+0x10/0x10 [ 260.921810][ T31] ret_from_fork+0x51e/0xb90 [ 260.921827][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 260.921842][ T31] ? __switch_to+0xc7d/0x1450 [ 260.921858][ T31] ? __pfx_kthread+0x10/0x10 [ 260.921871][ T31] ret_from_fork_asm+0x1a/0x30 [ 260.921889][ T31] [ 260.921894][ T31] Sending NMI from CPU 0 to CPUs 1: [ 261.038932][ C1] NMI backtrace for cpu 1 [ 261.038949][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 261.038966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.038975][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 261.038999][ C1] Code: ed 6a 02 e9 d3 f1 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 e1 14 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 261.039011][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 261.039026][ C1] RAX: 00000000007abddf RBX: ffffffff819b946a RCX: 0000000080000001 [ 261.039037][ C1] RDX: 0000000000000001 RSI: ffffffff8df3af0d RDI: ffffffff8c284e00 [ 261.039048][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 261.039059][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 261.039069][ C1] R13: 1ffff11003c54000 R14: 0000000000000001 R15: 1ffff11003c54000 [ 261.039087][ C1] FS: 0000000000000000(0000) GS:ffff888125535000(0000) knlGS:0000000000000000 [ 261.039100][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.039110][ C1] CR2: 00007fb4873e92f8 CR3: 000000001bbca000 CR4: 00000000003526f0 [ 261.039126][ C1] Call Trace: [ 261.039132][ C1] [ 261.039138][ C1] default_idle+0x9/0x20 [ 261.039157][ C1] default_idle_call+0x72/0xb0 [ 261.039177][ C1] do_idle+0x36a/0x5f0 [ 261.039191][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 261.039210][ C1] ? __pfx_do_idle+0x10/0x10 [ 261.039229][ C1] cpu_startup_entry+0x43/0x60 [ 261.039244][ C1] start_secondary+0x101/0x110 [ 261.039263][ C1] common_startup_64+0x13e/0x147 [ 261.039287][ C1] [ 261.209941][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 261.216843][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 261.225983][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.236076][ T31] Call Trace: [ 261.239382][ T31] [ 261.242327][ T31] vpanic+0x56c/0xa60 [ 261.246601][ T31] ? __pfx___schedule+0x10/0x10 [ 261.251566][ T31] ? __pfx_vpanic+0x10/0x10 [ 261.256109][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 261.262473][ T31] panic+0xc5/0xd0 [ 261.266292][ T31] ? __pfx_panic+0x10/0x10 [ 261.270719][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 261.276101][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 261.282459][ T31] watchdog+0x105b/0x1060 [ 261.286805][ T31] ? watchdog+0x1da/0x1060 [ 261.291357][ T31] kthread+0x388/0x470 [ 261.295590][ T31] ? __pfx_watchdog+0x10/0x10 [ 261.300298][ T31] ? __pfx_kthread+0x10/0x10 [ 261.304952][ T31] ret_from_fork+0x51e/0xb90 [ 261.309570][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 261.314703][ T31] ? __switch_to+0xc7d/0x1450 [ 261.319492][ T31] ? __pfx_kthread+0x10/0x10 [ 261.324117][ T31] ret_from_fork_asm+0x1a/0x30 [ 261.328896][ T31] [ 261.332569][ T31] Kernel Offset: disabled [ 261.337063][ T31] Rebooting in 86400 seconds..