last executing test programs: 20m33.880265609s ago: executing program 32 (id=1259): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xf0}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb773}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054) 20m20.926360335s ago: executing program 33 (id=1291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 18m55.696502448s ago: executing program 34 (id=1445): socket$inet6(0xa, 0x3, 0x100000000000088) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x42850) 16m12.51957328s ago: executing program 35 (id=1753): getpgrp(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x44000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) 12m45.672496455s ago: executing program 36 (id=2111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315", 0x26}], 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 10m1.468735504s ago: executing program 37 (id=2345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x3, 0x3, 0x5, 0x2, 0x8}, {0x8, 0x2, 0x9, 0x8, 0x805, 0xc}, 0x0, 0x8, 0x121c}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3ace9b85e05b5271}, @TCA_TBF_RATE64={0xc, 0x4, 0x688f2aa9cd6a07e}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x24008084) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000240)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m24.920178155s ago: executing program 38 (id=2607): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) dup(r0) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="040e0701"], 0x7) prlimit64(0x0, 0x6, &(0x7f0000000000)={0xffffffffffffd15d, 0xaf2}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, &(0x7f0000000080)=ANY=[], 0x8, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/168) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$eJzslruO00AUhv8ZW3aCuEiUNBREAgoc2wFEE4lIiIoCiUtEgUQkTBSSAEpckEgo4Qno6SjoeQEkaHkIFGigCRVbezUXO87Fu8nuelPs+aSMf4/mcnxm9J+AIIgTy+9fO5Pof/VPAcBplGDr/r/GbAxPjf9Z+Pfu+7279Q9PP/+wJ05x1ZpRtP7+JoBvNQNhMnd+dkk/H4In+hE4rmpdB4Oj9TNwPBZibCMAwxMUZHwvpVa8FuMd50WrEzgMgBCuaDzR+KKpLMY3fc/wPBUfk+qs7hm2G51O0OsPchP75W9a46im4lOHYukeFa2byp8HDk/rChgeaH0LdpwblZLU918wZ+unrgaWw7Vyz4gIZYNZ589khdoXOZrvMTO/a16IvB7R52Cstsz1DilhLMZsQIr4RHO/yscuYG58tTLPYrR0W/IQBzmLr7fVnLgnGql3OeZcxoLRaM0tLKwZRlwNVOYTf4o+MVxO+ZMpK8pHWWrKYfcNx2B4rdVtNINm8Mr3Kzfd6657w78DYURlaUd7+F9R+tOp2fora5J0RGbhbSMMe55qk3dftascl0v/47hyKXbTKHFWgb2wB9M/Lp/Se9tfMqMnCILYHheFo2nMWOhqguS/LnB/izESBEEQBEEQBEEQBHE4dgMAAP//Id89jw==") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8) 6m50.555666161s ago: executing program 7 (id=2663): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) 6m45.301081295s ago: executing program 7 (id=2671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000097cfb5b6808151f6000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) fcntl$dupfd(r0, 0x0, r0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000480)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nodiscard}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x490, &(0x7f0000001300)="$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") r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) 6m38.788461454s ago: executing program 7 (id=2677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 6m37.59281043s ago: executing program 7 (id=2680): socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x59}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4008040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x1, 0xffffdffd, 0x32e}, 0x0, &(0x7f0000001080)) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x400, 0x800) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[], 0x1, 0x1cf, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPX8Jo8sJpfaY+QmuZiHgYEhNPXIouLKquzEnJzUouKFDBW3kpMqTp9gYLluf02lWYLT4Y88h0OSpoMO0xEfj6wZjSWck6Q0xdjYMhXOnvkgv45N4wjDoxXMG+s88xrrClOn5qXlJVVlVWXNmzhx48zGzsbGlRProtL8VjG2pLhsaupkZHLYoiawmdlQfZKN9oR37aseJjmw9nj4NZ8yVnqdynzJeGGR1KkVVTMnfFGazWj4neEOT9kKCQ0NJ4krEhYNjA1H6mwbXEFOTGlgSFMIY0xSYxNr23JmTggzP5vbAoWW5BNMoUc5ls6UsDggVHXyp6XmW4dEtxnbnjqwneE5fJxnTUGfoNFxCQanhYL/ZUDGJDQ0lGmsZVpqu+BLkcZfCa/Vxk4ZDO72TMtgAcrSACJXQnmyYD0JySs8dDQ1jVKSExo2SSQkuRUYKjNs3cO5WqCBASnaVBgYGLYzwuIWAq7BGKNgFIyCUTAKRsEoGAWjYBSMglEwCkYEAAQAAP//Z6iZyA==") 6m35.51555441s ago: executing program 7 (id=2685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) socket(0x1, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$MSR(0x0, 0x1013, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 6m32.47528373s ago: executing program 7 (id=2691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 6m16.911039671s ago: executing program 39 (id=2691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 5m39.029108467s ago: executing program 1 (id=2761): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 5m36.683560287s ago: executing program 1 (id=2773): open(0x0, 0x8060, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) timer_create(0x8, &(0x7f00000026c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002700)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x77359400}}, &(0x7f00000000c0)) 5m29.464604534s ago: executing program 1 (id=2775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da9884", 0x35}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001980)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r6, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}, 0x20040044) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) 5m25.514265703s ago: executing program 1 (id=2779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x2000005c) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) 5m21.935098681s ago: executing program 1 (id=2784): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) lseek(0xffffffffffffffff, 0xfffffffffffff801, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) 5m20.054135129s ago: executing program 1 (id=2785): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000880)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x48, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x2, 0x5}}]}, @routing={0x2c, 0x0, 0x0, 0xb}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044080) 5m4.262618528s ago: executing program 40 (id=2785): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000880)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x48, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x2, 0x5}}]}, @routing={0x2c, 0x0, 0x0, 0xb}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044080) 4m28.272522058s ago: executing program 2 (id=2847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) socket(0x1, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$MSR(0x0, 0x1013, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 4m24.703078599s ago: executing program 6 (id=2851): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @empty, 0xffff}, 0x1c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 4m22.400565587s ago: executing program 2 (id=2854): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04040c00000000000000404b01"], 0xd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x8000007f, 0xd, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x272d, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x5, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6dd3fba8c309eb80}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf250800000008002c0004000000050037000100000700003a000f000000050037000000000008002c00040000000500b700000000000a000900aa"], 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x4050) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfb, 0x1a5, &(0x7f0000000600)="$eJzs0D9rU1EYx/Hvc+7JnwpVo+JQwQYsxhuqyb1VB6fgFCEXHFwEg4Y0NsVETW8GW1roIgWpdvAN6FRHFXQSUXQuDoKDXpdu0gzFQRwkkpsTwdfQ81l+9/nBPefwNMNOmAL+7C7XKRFz2M8nBA1MyrBTapivzfzD5MYwuGjmdZPPTE6Ei0u3aq1WYyF7IUvmvwL4GXf/qvAFRxU9oYR82V2u1+RGQL9EW80GZCrkH+JU6biPmNDjHLmOQz+3ziVFR3IVOFDotu8WwsWl0/Pt2lxjrnHb92fOF88Wi+f8ws35VqP4CnEfiOIJK7gBqYAxd4VElftbeh/TgrhNFTmS75GssrHlnDox3UO5O/QR3uV6pL7pZlZd4STpa4PHlzksPMUJmKowptDEF5WRy+qlePqz/pVQpFcd50z9Tmt27aqS38nNkuykxdsmkfPw8x4zg9WkDvGetYipiHLEZsT2dyblzeCW0V716gfguZmOcRyS3Kt1uwteEj6KDh4fBPwMjDM4TsXvysBb848Jvo4+LMuyLMuyLMuyrD3gbwAAAP//xflkvA==") 4m22.395338846s ago: executing program 6 (id=2855): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x40043d14, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x22) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4m21.351725871s ago: executing program 2 (id=2856): symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x4) r5 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r3) socket(0xa, 0x1, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r5, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e060c"], 0x9) 4m20.112906728s ago: executing program 2 (id=2858): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f6, 0x2, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x10000881}, 0x4000040) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) write(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000800) 4m19.187456955s ago: executing program 6 (id=2859): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 4m18.848819761s ago: executing program 2 (id=2861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xf, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x1003, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r6, &(0x7f00000014c0), 0x0}, 0x20) readv(r5, 0x0, 0x0) 4m16.943482943s ago: executing program 2 (id=2862): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) socket(0x1, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$MSR(0x0, 0x1013, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 4m13.873233678s ago: executing program 6 (id=2865): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) 4m3.764561782s ago: executing program 6 (id=2876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f00001f0000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x3, 0xd02ec6b8da940629) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, 0xfffffffffffffffe, 0x11) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getuid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x402, 0x0) r5 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'lblcr\x00', 0x21, 0x80, 0x5c}, 0x2c) 4m0.900335255s ago: executing program 41 (id=2862): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) socket(0x1, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$MSR(0x0, 0x1013, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 3m57.485467615s ago: executing program 6 (id=2881): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) socket(0x1, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$MSR(0x0, 0x1013, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 3m42.011637353s ago: executing program 42 (id=2881): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) socket(0x1, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$MSR(0x0, 0x1013, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 2m52.340712195s ago: executing program 0 (id=2948): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x10) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{}]}) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2m51.193182786s ago: executing program 0 (id=2950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) socket$kcm(0x10, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r3, 0x10000000005, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000180)='O', 0x1, 0x20000800, &(0x7f0000000280)={0xa, 0x4e03, 0x5, @private2, 0x9}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000140)=0x8) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c920"], 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 2m49.853867857s ago: executing program 0 (id=2951): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_setup(0x17ba, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000640)={0x2, @sliced={0xda, [0x2, 0x1, 0xfffe, 0x5, 0x100, 0x7000, 0x9, 0x4, 0x2, 0x3, 0x40, 0x4, 0x1ff, 0x4, 0x4, 0x9, 0x5, 0x557, 0x46, 0x4, 0x4, 0x6, 0x8000, 0x5, 0x7ff, 0x9, 0x2, 0x433d, 0x8, 0x0, 0x5, 0xffff, 0xa, 0xffff, 0x2, 0x2, 0x2, 0x5, 0x6, 0x8, 0x0, 0x7fff, 0x6, 0x3, 0x2, 0xa5bb, 0x3, 0x2000], 0xfffffff3}}) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1b6, &(0x7f0000000840)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) 2m48.801201209s ago: executing program 0 (id=2952): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x4, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 2m43.257623879s ago: executing program 0 (id=2956): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000080)=0x1, 0xff79) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700"], &(0x7f0000000080)='GPL\x00'}, 0x94) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r5, &(0x7f0000000640)) preadv(r4, &(0x7f0000003900)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x1, 0x2f, 0x7ff) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000380)) 2m42.144398685s ago: executing program 0 (id=2957): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec0000000800000002"], 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(r5, &(0x7f00000012c0)=[{&(0x7f0000000100)="aa0f", 0x2}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000019300), &(0x7f0000000280)=@udp=r5}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r9, 0x0, 0x0, 0x1, 0x0, 0xd, @loopback, @empty, 0x700, 0x0, 0xfffffffc}}) 2m26.989359801s ago: executing program 43 (id=2957): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec0000000800000002"], 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(r5, &(0x7f00000012c0)=[{&(0x7f0000000100)="aa0f", 0x2}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000019300), &(0x7f0000000280)=@udp=r5}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r9, 0x0, 0x0, 0x1, 0x0, 0xd, @loopback, @empty, 0x700, 0x0, 0xfffffffc}}) 36.037587188s ago: executing program 8 (id=3095): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8881) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x20802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffffffff2834) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) fcntl$setown(r1, 0x8, 0x0) recvmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1}, 0x66e}], 0x2, 0x21, 0x0) r3 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0xfffffffc, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xf0f027, 0x0, '\x00', @value=0x4}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) 32.993812377s ago: executing program 5 (id=3099): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4004}}}, 0x24}}, 0x40) 29.988732932s ago: executing program 8 (id=3104): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f0000000140)='net/unix\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000000)=0x8, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="5c0200079078fffd"], 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x3, 0x232, &(0x7f0000000500)="$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") 29.804572401s ago: executing program 5 (id=3105): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x54, r4, 0x1, 0x0, 0x0, {0x53}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x20008d0, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',mode=00000000000000000000007,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp936,gid=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0xc32, &(0x7f0000009100)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b12455, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 27.73977059s ago: executing program 5 (id=3109): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c6e66732c616c6c6f775f7574696d653d30303030303030303000303004000000000000003030302c6e6f646f74732c646f74732c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 25.446298884s ago: executing program 8 (id=3111): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8000080}, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102400, 0x19000) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb770b3f6ef8f772, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000804) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, 0x264, 0x1) 25.445989454s ago: executing program 3 (id=3112): timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open$dir(0x0, 0x800, 0xa0) rmdir(0x0) fcntl$lock(r0, 0x24, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80084) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000140)=0xfff) 25.312513439s ago: executing program 4 (id=3121): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2) write(0xffffffffffffffff, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) mkdirat(r2, 0x0, 0x22) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 23.570174874s ago: executing program 5 (id=3113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 21.220196731s ago: executing program 8 (id=3114): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f00000001c0)={0x6, 0x7c24, 0x7, 0x1, 0x6, 0x6b, "8c2af5354de0720dee32a53dbf5ccb13", 0x9, 0x7, 0xc3, 0x9, 0x5, 0x9, 0x9}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x29, 0x5, 0x0) close(0x3) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0xeac0e19b6999623b, 0x0, 0x0, {{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x0, 0x2b}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14, 0xe, @in6=@local}]}, 0x104}}, 0x0) 20.753740429s ago: executing program 4 (id=3116): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @empty, 0xffff}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 19.638969425s ago: executing program 8 (id=3117): socket(0x28, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) gettid() r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 19.541841854s ago: executing program 4 (id=3118): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.361160708s ago: executing program 8 (id=3119): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x3b6}, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100)={r0}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1'}, 0xb) 16.213263772s ago: executing program 4 (id=3120): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000100)=[{0x2, 0x1, 0xa, 0x9}, {0x0, 0xd9, 0xd, 0x9}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@loopback, 0x80ff, 0x3c}, @in=@multicast1, {}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[], 0x0) 15.655632069s ago: executing program 5 (id=3122): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6(0xa, 0x1000080002, 0x100000000000088) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x401, 0x0, &(0x7f0000000180), &(0x7f00000000c0)=[0x3], 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b703000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x8000, 0x0) 11.00362232s ago: executing program 5 (id=3123): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) accept(r5, 0x0, 0x0) 10.874884325s ago: executing program 3 (id=3124): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c6e66732c616c6c6f775f7574696d653d30303030303030303000303004000000000000003030302c6e6f646f74732c646f74732c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 10.678663343s ago: executing program 4 (id=3125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9.564898149s ago: executing program 3 (id=3127): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2) write(0xffffffffffffffff, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) mkdirat(r2, 0x0, 0x22) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 8.334347161s ago: executing program 4 (id=3128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c6e66732c616c6c6f775f7574696d653d30303030303030303000303004000000000000003030302c6e6f646f74732c646f74732c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 6.71760638s ago: executing program 9 (id=3129): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000340)=0x4020, 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB]) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4004}}}, 0x24}}, 0x40) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 4.860365593s ago: executing program 3 (id=3131): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002f80)=ANY=[], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000600)="$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") rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000040)={0x1, 0x800, 0x2}) listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000340)=""/93, 0x5d) getsockopt$inet6_opts(0xffffffffffffffff, 0x88, 0x36, 0xffffffffffffffff, 0x0) 4.859456603s ago: executing program 9 (id=3141): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2) write(0xffffffffffffffff, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) mkdirat(r2, 0x0, 0x22) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 3.651138868s ago: executing program 3 (id=3132): socket(0x28, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) gettid() r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 3.58026627s ago: executing program 9 (id=3133): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xda, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402"], 0x258) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) 1.053520718s ago: executing program 9 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x54, r2, 0x1, 0x0, 0x0, {0x53}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x20008d0, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',mode=00000000000000000000007,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp936,gid=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0xc32, &(0x7f0000009100)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b12455, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 748.173403ms ago: executing program 44 (id=3119): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x3b6}, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100)={r0}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1'}, 0xb) 571.246893ms ago: executing program 3 (id=3136): r0 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r0, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000140)=0xfff) 444.625329ms ago: executing program 9 (id=3137): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 0s ago: executing program 9 (id=3138): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.125505][T15536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.139592][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1313.154315][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1313.213849][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1313.252089][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1313.275161][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.317099][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.357505][T15825] loop9: detected capacity change from 0 to 128 [ 1313.363940][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.423847][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.463605][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.494854][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.698583][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.756855][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.798765][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.838530][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.905566][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.067937][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.210761][ T9198] kworker/u4:23: attempt to access beyond end of device [ 1314.210761][ T9198] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1314.230412][T15536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.261815][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1314.291393][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1314.346817][T15536] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.366400][T15536] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.403209][T15536] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.422682][T15536] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.661318][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.667839][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1316.028603][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.049586][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.214599][T15847] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1316.232532][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1316.392610][ T9198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.412844][ T9198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.899239][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1318.462858][ T2941] kworker/u4:5: attempt to access beyond end of device [ 1318.462858][ T2941] loop9: rw=1048577, sector=145, nr_sectors = 808 limit=128 [ 1319.189237][T15874] loop2: detected capacity change from 0 to 256 [ 1319.335051][T15875] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1319.384646][T15867] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1319.395619][T15867] FAT-fs (loop2): Filesystem has been set read-only [ 1319.402536][T15867] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1319.413173][T15867] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1319.427225][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 1319.427243][ T27] audit: type=1800 audit(2000002226.074:444): pid=15867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2768" name="file1" dev="loop2" ino=1048721 res=0 errno=0 [ 1319.428441][T15867] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 1321.801934][T15897] loop2: detected capacity change from 0 to 128 [ 1323.977917][ T3599] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1324.191853][ T3599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.339324][ T3599] usb 4-1: config 0 has no interfaces? [ 1324.395846][ T3599] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1324.456091][ T3599] usb 4-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1324.501256][ T3599] usb 4-1: Manufacturer: syz [ 1324.558133][ T3599] usb 4-1: config 0 descriptor?? [ 1324.912881][ T4450] kworker/u4:14: attempt to access beyond end of device [ 1324.912881][ T4450] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1325.694211][ T3599] usb 4-1: USB disconnect, device number 12 [ 1326.172961][T15914] loop3: detected capacity change from 0 to 2048 [ 1326.216854][T15914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1326.482820][T15917] loop2: detected capacity change from 0 to 32768 [ 1326.537214][T15920] loop9: detected capacity change from 0 to 512 [ 1326.552339][T15920] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1327.277365][T15917] XFS (loop2): Mounting V5 Filesystem [ 1327.355596][T15540] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1327.507737][T15917] XFS (loop2): Ending clean mount [ 1327.517587][T15917] XFS (loop2): Quotacheck needed: Please wait. [ 1328.016147][T15917] XFS (loop2): Quotacheck: Done. [ 1328.673983][ T27] audit: type=1800 audit(2000002235.318:445): pid=15940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2778" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1329.317557][T14974] XFS (loop2): Unmounting Filesystem [ 1329.782055][ T4440] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.240107][T15957] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1331.419495][ T4440] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.665459][ T4440] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.194459][ T4440] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.758516][T15976] netlink: 'syz.9.2788': attribute type 2 has an invalid length. [ 1335.104291][T15990] loop9: detected capacity change from 0 to 2048 [ 1335.119825][T15990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1337.375641][ T27] audit: type=1326 audit(2000002243.803:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1337.453479][ T27] audit: type=1326 audit(2000002243.803:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1337.496646][ T27] audit: type=1326 audit(2000002243.803:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1337.542661][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1337.554355][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1337.561340][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1337.671475][ T27] audit: type=1326 audit(2000002243.803:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1337.685922][T16006] infiniband syz2: set active [ 1337.698848][T16006] infiniband syz2: added vxcan1 [ 1337.704633][T16006] rdma_rxe: unable to create cq [ 1337.709613][T16006] infiniband syz2: Couldn't create ib_mad CQ [ 1337.716222][T16006] infiniband syz2: Couldn't open port 1 [ 1337.743467][T16006] RDS/IB: syz2: added [ 1337.747610][T16006] smc: adding ib device syz2 with port count 1 [ 1337.753895][T16006] smc: ib device syz2 port 1 has pnetid [ 1337.760648][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1337.925160][ T27] audit: type=1326 audit(2000002243.803:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1338.026244][ T27] audit: type=1326 audit(2000002243.803:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1338.061851][ T27] audit: type=1326 audit(2000002243.803:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1338.160855][ T27] audit: type=1326 audit(2000002243.803:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1338.219704][ T27] audit: type=1326 audit(2000002243.813:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1338.253166][T16012] loop2: detected capacity change from 0 to 512 [ 1338.320773][ T27] audit: type=1326 audit(2000002243.813:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1338.361410][T16012] EXT4-fs (loop2): bad block size 65536 [ 1338.421426][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1338.542052][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1338.662389][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1338.784397][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1338.905117][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1339.021138][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1339.137800][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1339.255684][T16006] vxcan1 speed is unknown, defaulting to 1000 [ 1340.118304][ T4344] vxcan1 speed is unknown, defaulting to 1000 [ 1340.136827][ T14] vxcan1 speed is unknown, defaulting to 1000 [ 1342.510341][T16027] tipc: Started in network mode [ 1342.515632][T16027] tipc: Node identity 4004, cluster identity 4711 [ 1342.522588][T16027] tipc: Node number set to 16388 [ 1342.571001][T16036] No such timeout policy "syz1" [ 1342.591778][T16036] autofs4:pid:16036:autofs_fill_super: called with bogus options [ 1344.685657][T16046] loop9: detected capacity change from 0 to 2048 [ 1346.048468][T16045] tty tty33: ldisc open failed (-12), clearing slot 32 [ 1346.948636][T16046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1347.274326][T16055] loop2: detected capacity change from 0 to 1024 [ 1347.318096][T16055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1349.102619][T16055] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1349.192478][T16065] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1349.213898][T16055] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 1349.450032][T16055] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 1349.715857][T14974] EXT4-fs (loop2): unmounting filesystem. [ 1350.018859][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1350.029797][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1350.065029][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1350.077306][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1350.087313][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1350.095156][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1350.191091][T16078] loop3: detected capacity change from 0 to 512 [ 1350.223399][T16078] EXT4-fs: Ignoring removed orlov option [ 1350.275469][T16078] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1350.423209][T16083] loop2: detected capacity change from 0 to 128 [ 1350.435379][T16083] EXT4-fs: Ignoring removed nobh option [ 1350.852552][T16083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1350.866250][T16083] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1351.246478][T16078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1351.293062][T14974] EXT4-fs (loop2): unmounting filesystem. [ 1351.309039][T16078] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.2809: corrupted in-inode xattr [ 1351.415395][T16078] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2809: couldn't read orphan inode 15 (err -117) [ 1351.484248][T16078] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1352.231036][ T4270] Bluetooth: hci5: command 0x0409 tx timeout [ 1352.285885][T13765] EXT4-fs (loop3): unmounting filesystem. [ 1352.876419][T16095] loop3: detected capacity change from 0 to 256 [ 1354.267578][T16093] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1354.278204][T16093] FAT-fs (loop3): Filesystem has been set read-only [ 1354.283732][ T4270] Bluetooth: hci5: command 0x041b tx timeout [ 1354.285436][T16093] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1354.301220][T16093] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1354.314895][T16093] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 1354.326915][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1354.326932][ T27] audit: type=1800 audit(2000002260.981:458): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2811" name="file1" dev="loop3" ino=1048723 res=0 errno=0 [ 1354.481640][T16075] lo speed is unknown, defaulting to 1000 [ 1354.495397][T16075] vxcan1 speed is unknown, defaulting to 1000 [ 1355.567338][T16103] loop6: detected capacity change from 0 to 512 [ 1355.770637][T16103] EXT4-fs (loop6): DAX unsupported by block device. [ 1356.184695][T16113] fuse: Bad value for 'fd' [ 1356.600078][ T4270] Bluetooth: hci5: command 0x040f tx timeout [ 1357.250750][T16117] loop6: detected capacity change from 0 to 2048 [ 1357.280008][T16117] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1358.680715][ T4270] Bluetooth: hci5: command 0x0419 tx timeout [ 1360.425161][ T4440] device team0 left promiscuous mode [ 1360.430682][ T4440] device team_slave_0 left promiscuous mode [ 1360.455091][ T4440] device team_slave_1 left promiscuous mode [ 1360.597297][ T4440] device hsr_slave_0 left promiscuous mode [ 1360.642490][ T4440] device hsr_slave_1 left promiscuous mode [ 1360.691435][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.733548][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.840748][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.848295][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.943343][T16146] loop9: detected capacity change from 0 to 4096 [ 1360.953082][ T4440] device vlan2 left promiscuous mode [ 1360.958448][ T4440] device bond0 left promiscuous mode [ 1361.030894][ T4440] device bond_slave_0 left promiscuous mode [ 1361.045049][ T4440] device bond_slave_1 left promiscuous mode [ 1361.107418][ T4440] bridge0: port 3(vlan2) entered disabled state [ 1361.328504][T16146] ntfs3: loop9: ino=22, "file1" fallocate(0x10) is not supported [ 1361.340438][ T4440] device bridge_slave_1 left promiscuous mode [ 1361.351718][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.489389][T16114] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1362.014118][T16155] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1362.048919][T16114] usb 4-1: Using ep0 maxpacket: 16 [ 1362.057155][T16114] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.070108][T16114] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1362.079959][ T4440] device bridge_slave_0 left promiscuous mode [ 1362.089072][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.099033][T16114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.129515][T16114] usb 4-1: config 0 descriptor?? [ 1362.151739][T16114] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1362.222573][ T4440] device veth1_macvtap left promiscuous mode [ 1362.250622][ T4440] device veth0_macvtap left promiscuous mode [ 1362.290157][ T4440] device veth1_vlan left promiscuous mode [ 1362.349897][ T4440] device veth0_vlan left promiscuous mode [ 1365.179758][ T128] usb 4-1: USB disconnect, device number 13 [ 1367.524374][T16177] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1369.208458][T16183] loop9: detected capacity change from 0 to 128 [ 1372.332643][T16198] loop3: detected capacity change from 0 to 512 [ 1372.381789][T16198] EXT4-fs (loop3): bad block size 65536 [ 1373.403883][ T4465] kworker/u4:20: attempt to access beyond end of device [ 1373.403883][ T4465] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1373.419176][T14479] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1373.456153][T16198] loop3: detected capacity change from 0 to 64 [ 1374.714616][T16202] loop2: detected capacity change from 0 to 4096 [ 1374.954003][T16209] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1375.441061][ T4440] team0 (unregistering): Port device team_slave_1 removed [ 1375.768390][ T4440] team0 (unregistering): Port device team_slave_0 removed [ 1375.873762][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.080198][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.372556][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1377.378933][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1377.792854][T16222] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1377.862673][T16223] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1378.323167][ T4440] bond0 (unregistering): Released all slaves [ 1378.948159][T16075] chnl_net:caif_netlink_parms(): no params data found [ 1380.167551][T16075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.174899][T16075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.183884][T16075] device bridge_slave_0 entered promiscuous mode [ 1380.197985][T16075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.206022][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.216197][T16075] device bridge_slave_1 entered promiscuous mode [ 1380.255297][T16075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.268643][T16075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.418654][T16075] team0: Port device team_slave_0 added [ 1380.501901][T16075] team0: Port device team_slave_1 added [ 1380.551639][T16248] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1380.627798][T16075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.670701][T16075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.859010][T16075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.441229][T16075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.486097][T16075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.650207][T16075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.704476][T16075] device hsr_slave_0 entered promiscuous mode [ 1381.712129][T16075] device hsr_slave_1 entered promiscuous mode [ 1381.719755][T16075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1381.727549][T16075] Cannot create hsr debugfs directory [ 1381.764866][T16255] loop2: detected capacity change from 0 to 128 [ 1383.530616][T16267] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1383.906769][T16270] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1387.087153][T16284] loop3: detected capacity change from 0 to 2048 [ 1387.099736][T16291] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1387.122822][T16284] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1388.157645][T16304] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1388.381819][T16075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1388.416198][T16075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1388.438993][T16075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1388.462646][T16075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1388.875638][T16075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.955879][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1388.965602][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1388.990329][T16075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.078002][T16318] loop2: detected capacity change from 0 to 8 [ 1389.225354][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 1389.653685][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1389.848383][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1389.879213][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.886434][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.906947][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1389.916172][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1389.926388][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1389.935764][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.942993][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.953912][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1390.024223][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1390.066128][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1390.104536][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1390.147489][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1390.177800][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1390.235433][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1390.371273][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1390.500991][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1390.552043][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1390.603994][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1390.683050][T16075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1391.304899][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 1392.260538][T16347] loop3: detected capacity change from 0 to 128 [ 1392.270201][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1392.288832][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1392.345283][T16075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.363418][T16347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1392.450207][T16347] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1392.528558][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1392.548074][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1394.391097][T16075] device veth0_vlan entered promiscuous mode [ 1394.486038][T16075] device veth1_vlan entered promiscuous mode [ 1394.578721][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1394.594597][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1394.907462][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1394.970443][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1395.035549][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1395.063890][T16358] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1395.155271][T12868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1395.195686][T13765] EXT4-fs (loop3): unmounting filesystem. [ 1395.223185][T12868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1395.295609][T16075] device veth0_macvtap entered promiscuous mode [ 1395.334869][T16075] device veth1_macvtap entered promiscuous mode [ 1395.426880][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.458468][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.480978][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.502379][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.542434][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.761980][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.772844][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.783565][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.793645][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.804387][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.846136][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.871932][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.891930][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.915263][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.930144][T16075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.941714][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1395.951889][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1395.962717][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1395.974151][T16365] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1395.991558][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1396.014616][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.026161][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.036467][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.052473][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.064755][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.125842][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.177588][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.220347][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.311697][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.351678][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.411684][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.461587][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.533558][T16075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.541974][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1396.550970][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1396.617349][T16075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.662388][T16075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.671212][T16075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.720802][T16075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.378626][T12868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.431131][T12868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.534562][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1397.594864][T12868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.623823][T12868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.671722][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1399.717950][T16398] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1399.718405][T16398] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1399.718762][T16398] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1399.718892][T16398] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1399.719020][T16398] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1399.719247][T16398] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 1399.719374][T16398] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1399.719502][T16398] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1399.719637][T16398] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1399.719862][T16398] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1399.720273][T16398] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1399.720402][T16398] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1399.720664][T16398] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1399.720794][T16398] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1399.720932][T16398] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1399.721053][T16398] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1399.721177][T16398] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1399.721316][T16398] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1400.753216][T16403] loop9: detected capacity change from 0 to 128 [ 1402.465353][T16412] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1403.193434][T16421] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1409.871512][ T27] audit: type=1326 audit(2000002316.569:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16446 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60475cfce code=0x7ffc0000 [ 1410.345209][ T27] audit: type=1326 audit(2000002316.569:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16446 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60475cfce code=0x7ffc0000 [ 1410.451915][ T27] audit: type=1326 audit(2000002316.569:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16446 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60475cfce code=0x7ffc0000 [ 1410.605395][ T27] audit: type=1326 audit(2000002316.569:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16446 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1410.715362][ T27] audit: type=1326 audit(2000002316.569:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16446 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60475cfce code=0x7ffc0000 [ 1410.794475][ T27] audit: type=1326 audit(2000002316.569:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16446 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60479c799 code=0x7ffc0000 [ 1413.323926][ T27] audit: type=1326 audit(2000002316.599:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16446 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60475cfce code=0x7ffc0000 [ 1413.419904][ T27] audit: type=1326 audit(2000002316.599:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16446 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60475cfce code=0x7ffc0000 [ 1413.442511][ T27] audit: type=1326 audit(2000002316.599:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16446 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60475cfce code=0x7ffc0000 [ 1413.473920][ T27] audit: type=1326 audit(2000002316.599:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16446 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60475cfce code=0x7ffc0000 [ 1414.164732][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1414.176896][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1414.190554][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1414.198581][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1414.206264][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1414.213634][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1415.831240][T16465] lo speed is unknown, defaulting to 1000 [ 1416.254169][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 1417.035550][T16465] vxcan1 speed is unknown, defaulting to 1000 [ 1417.274488][T16497] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1418.381054][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 1419.033933][ T4444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.106601][T16510] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1420.433824][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 1421.538802][ T4444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.283758][T16521] befs: (nbd0): No write support. Marking filesystem read-only [ 1423.296413][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 1423.303837][ T2806] block nbd0: Attempted send on invalid socket [ 1423.310269][ T2806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1423.350174][T16519] loop9: detected capacity change from 0 to 2048 [ 1423.540420][T16519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1423.628405][ T4444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.254298][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 1424.254315][ T27] audit: type=1800 audit(2000002330.956:527): pid=16527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2889" name="file1" dev="loop9" ino=1415 res=0 errno=0 [ 1424.797060][T16531] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1424.955032][ T4444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.554972][T16533] loop9: detected capacity change from 0 to 256 [ 1425.670218][T16535] loop3: detected capacity change from 0 to 128 [ 1425.701522][T16533] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 1428.162219][ T4444] tipc: Left network mode [ 1429.116261][T16465] chnl_net:caif_netlink_parms(): no params data found [ 1430.479407][T16570] loop9: detected capacity change from 0 to 4096 [ 1431.846851][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1431.861624][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1431.890220][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1431.902385][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1431.910863][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1431.918357][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1432.281299][T16590] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1432.576539][T16465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.590807][T16465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.669041][T16465] device bridge_slave_0 entered promiscuous mode [ 1432.954105][T16465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.973579][T16465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.013409][T16465] device bridge_slave_1 entered promiscuous mode [ 1433.098943][T16594] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1433.644160][T16465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.672872][T16583] lo speed is unknown, defaulting to 1000 [ 1433.702517][T16465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.735712][T16583] vxcan1 speed is unknown, defaulting to 1000 [ 1434.003094][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 1436.082037][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 1436.152108][T16465] team0: Port device team_slave_0 added [ 1436.811744][T16465] team0: Port device team_slave_1 added [ 1438.160814][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 1438.434783][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1438.441857][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1439.946469][T16465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.004522][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.269870][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 1440.530744][T16465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.564201][T16465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.599597][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.206464][T16465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.300202][ T4270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1442.310686][ T4270] CPU: 0 PID: 4270 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1442.318292][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1442.328491][ T4270] Workqueue: hci1 hci_rx_work [ 1442.333248][ T4270] Call Trace: [ 1442.336939][ T4270] [ 1442.339911][ T4270] dump_stack_lvl+0x188/0x24e [ 1442.344656][ T4270] ? show_regs_print_info+0x12/0x12 [ 1442.349923][ T4270] ? load_image+0x400/0x400 [ 1442.354492][ T4270] sysfs_create_dir_ns+0x26a/0x290 [ 1442.359661][ T4270] ? sysfs_warn_dup+0xa0/0xa0 [ 1442.364396][ T4270] ? do_raw_spin_unlock+0x11d/0x230 [ 1442.369656][ T4270] kobject_add_internal+0x61c/0xcc0 [ 1442.374916][ T4270] kobject_add+0x160/0x230 [ 1442.379391][ T4270] ? kobject_init+0x1d0/0x1d0 [ 1442.384122][ T4270] ? klist_children_get+0x50/0x50 [ 1442.389193][ T4270] ? get_device_parent+0x121/0x3f0 [ 1442.394374][ T4270] device_add+0x483/0xfb0 [ 1442.398785][ T4270] ? kmem_cache_free+0xf7/0x290 [ 1442.403710][ T4270] hci_conn_add_sysfs+0xd1/0x1e0 [ 1442.408709][ T4270] le_conn_complete_evt+0x105f/0x1670 [ 1442.414145][ T4270] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1442.420460][ T4270] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1442.426209][ T4270] ? skb_pull_data+0xf7/0x200 [ 1442.430965][ T4270] hci_le_conn_complete_evt+0x183/0x440 [ 1442.436572][ T4270] ? hci_remote_host_features_evt+0x270/0x270 [ 1442.442696][ T4270] hci_event_packet+0x7b6/0x1280 [ 1442.447704][ T4270] ? bis_list+0x280/0x280 [ 1442.452089][ T4270] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1442.458045][ T4270] ? kcov_remote_start+0x4c7/0x7e0 [ 1442.463218][ T4270] ? spurious_interrupt+0x80/0xd0 [ 1442.468303][ T4270] ? hci_send_to_monitor+0x9c/0x4a0 [ 1442.473579][ T4270] hci_rx_work+0x3eb/0xd40 [ 1442.478084][ T4270] ? _raw_spin_unlock+0x40/0x40 [ 1442.483026][ T4270] ? process_one_work+0x7b0/0x1160 [ 1442.488206][ T4270] process_one_work+0x8a2/0x1160 [ 1442.493227][ T4270] ? worker_detach_from_pool+0x240/0x240 [ 1442.498918][ T4270] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1442.504055][ T4270] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1442.509652][ T4270] ? kthread_data+0x4b/0xc0 [ 1442.514224][ T4270] worker_thread+0xaa2/0x1270 [ 1442.519006][ T4270] kthread+0x29d/0x330 [ 1442.523128][ T4270] ? worker_clr_flags+0x1a0/0x1a0 [ 1442.528207][ T4270] ? kthread_blkcg+0xd0/0xd0 [ 1442.532843][ T4270] ret_from_fork+0x1f/0x30 [ 1442.537357][ T4270] [ 1442.545444][ T4270] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1442.559200][ T4270] Bluetooth: hci1: failed to register connection device [ 1442.842581][T16646] loop9: detected capacity change from 0 to 256 [ 1442.981411][T16646] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1443.018462][T16646] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1443.135463][T16646] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1443.956675][ T27] audit: type=1800 audit(2000002350.596:528): pid=16653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2912" name="file1" dev="loop9" ino=1048730 res=0 errno=0 [ 1444.800306][T16661] Bluetooth: MGMT ver 1.22 [ 1444.821876][T16465] device hsr_slave_0 entered promiscuous mode [ 1445.139503][T16465] device hsr_slave_1 entered promiscuous mode [ 1445.181936][T16465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.192701][T16465] Cannot create hsr debugfs directory [ 1445.730422][T16661] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.777124][T13740] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1445.827290][ T4444] device hsr_slave_0 left promiscuous mode [ 1445.857537][ T4444] device hsr_slave_1 left promiscuous mode [ 1445.882898][ T4444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1445.901027][ T4444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.943004][ T4444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1445.965339][ T4444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1446.006931][T13740] usb 4-1: device descriptor read/64, error -71 [ 1446.031302][ T4444] device bridge_slave_1 left promiscuous mode [ 1446.040113][ T4444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.077889][ T4444] device bridge_slave_0 left promiscuous mode [ 1446.086450][ T4444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.249240][ T4444] device veth1_macvtap left promiscuous mode [ 1446.257744][ T4444] device veth0_macvtap left promiscuous mode [ 1446.278513][ T4444] device veth1_vlan left promiscuous mode [ 1446.286301][ T4444] device veth0_vlan left promiscuous mode [ 1446.296803][T13740] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1446.466763][T13740] usb 4-1: device descriptor read/64, error -71 [ 1446.586756][T13740] usb usb4-port1: attempt power cycle [ 1447.011336][T13740] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1447.067321][T13740] usb 4-1: device descriptor read/8, error -71 [ 1447.356973][T13740] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1447.406964][T13740] usb 4-1: device descriptor read/8, error -71 [ 1447.536318][T13740] usb usb4-port1: unable to enumerate USB device [ 1448.195877][ T4444] team0 (unregistering): Port device team_slave_1 removed [ 1448.291996][ T4444] team0 (unregistering): Port device team_slave_0 removed [ 1448.372303][ T4444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1448.453517][ T4444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.155584][ T4444] bond0 (unregistering): Released all slaves [ 1449.439898][T16661] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.734592][T16661] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.795321][T16583] chnl_net:caif_netlink_parms(): no params data found [ 1449.968578][T16661] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.690072][T16583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.704577][T16583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.713138][T16583] device bridge_slave_0 entered promiscuous mode [ 1450.872246][T16661] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.883508][T16583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.893050][T16583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.905812][T16583] device bridge_slave_1 entered promiscuous mode [ 1450.961159][T16661] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.081993][T16583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.110917][T16661] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.157330][T16583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.201458][T16661] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.325205][T16583] team0: Port device team_slave_0 added [ 1451.355769][T16583] team0: Port device team_slave_1 added [ 1452.012597][T16583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.042802][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.254171][T16583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.666837][T16583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.785377][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1453.138883][T16583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.495015][T16750] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1455.219404][T16768] loop9: detected capacity change from 0 to 128 [ 1455.254695][T16768] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1455.271097][T16768] hpfs: filesystem error: improperly stopped [ 1455.277406][T16768] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1455.285469][T16768] hpfs: You really don't want any checks? You are crazy... [ 1455.294820][T16768] hpfs: hpfs_map_sector(): read error [ 1455.300332][T16768] hpfs: code page support is disabled [ 1455.309888][T16768] hpfs: hpfs_map_4sectors(): unaligned read [ 1455.317137][T16768] hpfs: hpfs_map_4sectors(): unaligned read [ 1455.323279][T16768] hpfs: filesystem error: unable to find root dir [ 1455.356170][ T4446] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.560864][ T4446] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.003979][T16583] device hsr_slave_0 entered promiscuous mode [ 1461.054008][T16583] device hsr_slave_1 entered promiscuous mode [ 1461.116132][T16583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1461.132491][T16583] Cannot create hsr debugfs directory [ 1461.244483][ T4446] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.760172][ T4446] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.859434][T16465] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1463.952135][T16465] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1464.001823][T16465] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1464.052517][T16465] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1464.711851][T16804] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1464.864237][T16583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.926648][T16583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.405240][T16583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1465.423723][T16583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.971501][T16815] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1466.881291][T16583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1466.916236][T16583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.991123][T16465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.448261][T16583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.479608][T16583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.785740][T16840] Bluetooth: MGMT ver 1.22 [ 1469.462422][T16126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1469.474706][T16126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1469.498164][T16465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.069492][T16850] loop9: detected capacity change from 0 to 512 [ 1470.269649][T16851] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1470.269649][T16851] program syz.0.2940 not setting count and/or reply_len properly [ 1472.697816][T16856] loop3: detected capacity change from 0 to 32768 [ 1472.706201][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1472.769530][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1472.791494][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.798787][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.935963][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1473.642603][T16583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1473.937450][T16583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1475.797577][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1475.812387][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1475.821667][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1475.848309][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1475.858619][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1475.868331][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1476.096432][T16583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1476.135043][T16583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1477.821665][ T4270] Bluetooth: hci5: command 0x0406 tx timeout [ 1477.941206][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 1479.379640][T16901] kAFS: No cell specified [ 1479.980232][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 1480.099782][ T125] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1480.180096][T16881] lo speed is unknown, defaulting to 1000 [ 1480.358460][ T125] usb 4-1: config 0 has an invalid interface number: 134 but max is 0 [ 1480.383897][ T125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.452150][ T4270] Bluetooth: Frame is too long (len 18, expected len 4) [ 1480.531512][ T125] usb 4-1: config 0 has no interface number 0 [ 1480.605307][ T125] usb 4-1: config 0 interface 134 has no altsetting 0 [ 1480.695709][ T125] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1480.807397][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.212707][ T125] usb 4-1: config 0 descriptor?? [ 1481.223741][ T125] smsusb:smsusb_probe: board id=8, interface number 134 [ 1481.464231][T16899] loop3: detected capacity change from 0 to 128 [ 1482.287872][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 1482.524513][T16881] vxcan1 speed is unknown, defaulting to 1000 [ 1484.315419][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 1484.540247][ T14] usb 4-1: USB disconnect, device number 18 [ 1484.614596][T16583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.960980][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1485.057426][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1485.530234][T16583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.269647][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1487.300602][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1487.357071][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.364286][ T9198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.467160][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1487.503623][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1487.547336][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1487.596573][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.603807][ T9198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.666779][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1487.751916][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1487.779863][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1487.846394][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1487.906054][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1487.946663][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1488.017033][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1488.054542][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1488.078593][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1489.110042][ T4446] device hsr_slave_0 left promiscuous mode [ 1489.373282][ T4446] device hsr_slave_1 left promiscuous mode [ 1490.355046][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1490.399862][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1490.446400][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1490.495085][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.535317][ T4446] device bridge_slave_1 left promiscuous mode [ 1490.552745][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.695083][ T4446] device bridge_slave_0 left promiscuous mode [ 1490.702888][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.908254][ T4446] device veth1_macvtap left promiscuous mode [ 1490.943844][ T4446] device veth0_macvtap left promiscuous mode [ 1490.954695][ T4446] device veth1_vlan left promiscuous mode [ 1490.991291][ T4446] device veth0_vlan left promiscuous mode [ 1491.713537][T16959] 9pnet_virtio: no channels available for device [ 1492.521176][T16961] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2955'. [ 1492.554525][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'. [ 1492.579347][ T4446] infiniband syz2: set down [ 1492.825352][ T4270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1492.840212][ T4270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1492.851179][ T4270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1492.862211][ T4270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1492.871846][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1492.881440][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1494.387854][T16975] loop3: detected capacity change from 0 to 256 [ 1494.462420][T16975] FAT-fs (loop3): Directory bread(block 64) failed [ 1494.469518][T16975] FAT-fs (loop3): Directory bread(block 65) failed [ 1494.476615][T16975] FAT-fs (loop3): Directory bread(block 66) failed [ 1494.483522][T16975] FAT-fs (loop3): Directory bread(block 67) failed [ 1494.490602][T16975] FAT-fs (loop3): Directory bread(block 68) failed [ 1494.497529][T16975] FAT-fs (loop3): Directory bread(block 69) failed [ 1494.504655][T16975] FAT-fs (loop3): Directory bread(block 70) failed [ 1494.511386][T16975] FAT-fs (loop3): Directory bread(block 71) failed [ 1494.518507][T16975] FAT-fs (loop3): Directory bread(block 72) failed [ 1494.525332][T16975] FAT-fs (loop3): Directory bread(block 73) failed [ 1494.932431][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 1497.011417][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 1498.565767][T16993] loop3: detected capacity change from 0 to 64 [ 1499.007997][T16998] hfs: keylen 1794 too large [ 1499.023371][ T27] audit: type=1800 audit(2000002405.713:529): pid=16998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2963" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 1499.100359][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 1499.733278][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1499.739708][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1500.586063][T17001] Bluetooth: MGMT ver 1.22 [ 1501.181861][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 1501.401334][ T4446] team0 (unregistering): Port device team_slave_1 removed [ 1501.506705][ T4446] team0 (unregistering): Port device team_slave_0 removed [ 1501.687945][ T4446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.874617][ T4446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1502.116507][T17014] loop3: detected capacity change from 0 to 128 [ 1502.135628][T17014] befs: Unrecognized mount option "$" or missing value [ 1502.142691][T17014] befs: (loop3): cannot parse mount options [ 1502.763664][T16954] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1503.121341][ T4448] smc: removing ib device syz2 [ 1503.321353][T17018] syz.3.2967 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1504.137752][ T27] audit: type=1800 audit(2000002410.856:530): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2967" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1505.377602][ T4446] bond0 (unregistering): Released all slaves [ 1505.757649][T17029] loop3: detected capacity change from 0 to 32768 [ 1505.816177][ T4276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1505.832017][ T4276] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1505.924125][ T4276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1505.972882][ T4276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1505.983965][ T4276] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1506.006032][ T4276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1506.742313][T16114] vxcan1 speed is unknown, defaulting to 1000 [ 1506.976342][T17028] lo speed is unknown, defaulting to 1000 [ 1506.988262][T16965] lo speed is unknown, defaulting to 1000 [ 1507.989482][T17045] loop9: detected capacity change from 0 to 8 [ 1508.052606][T17044] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1508.059440][T17044] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1508.128715][ T4276] Bluetooth: hci6: command 0x0409 tx timeout [ 1508.542708][T17043] binfmt_misc: register: failed to install interpreter file ./file2 [ 1510.204723][ T4276] Bluetooth: hci6: command 0x041b tx timeout [ 1510.238378][T17064] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2976'. [ 1510.975058][T16965] chnl_net:caif_netlink_parms(): no params data found [ 1511.214380][ T4276] Bluetooth: Unexpected continuation frame (len 10) [ 1512.120435][T17028] chnl_net:caif_netlink_parms(): no params data found [ 1512.283746][ T4276] Bluetooth: hci6: command 0x040f tx timeout [ 1512.730252][T17089] loop3: detected capacity change from 0 to 512 [ 1513.858710][T16881] chnl_net:caif_netlink_parms(): no params data found [ 1513.996621][T16965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.087956][T17099] loop3: detected capacity change from 0 to 256 [ 1514.120524][T16965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.166272][T16965] device bridge_slave_0 entered promiscuous mode [ 1514.200677][T17099] FAT-fs (loop3): Directory bread(block 64) failed [ 1514.219407][T17099] FAT-fs (loop3): Directory bread(block 65) failed [ 1514.227124][T17099] FAT-fs (loop3): Directory bread(block 66) failed [ 1514.233994][T17099] FAT-fs (loop3): Directory bread(block 67) failed [ 1514.240717][T17099] FAT-fs (loop3): Directory bread(block 68) failed [ 1514.247403][T17099] FAT-fs (loop3): Directory bread(block 69) failed [ 1514.254201][T17099] FAT-fs (loop3): Directory bread(block 70) failed [ 1514.260824][T17099] FAT-fs (loop3): Directory bread(block 71) failed [ 1514.267613][T17099] FAT-fs (loop3): Directory bread(block 72) failed [ 1514.274560][T17099] FAT-fs (loop3): Directory bread(block 73) failed [ 1514.405067][ T4276] Bluetooth: hci6: command 0x0419 tx timeout [ 1514.872705][T16965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.879927][T16965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.809347][T16965] device bridge_slave_1 entered promiscuous mode [ 1516.018472][T17114] loop9: detected capacity change from 0 to 2048 [ 1516.086081][T16965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.112802][T16965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.151014][T17028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.208962][T17028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.230341][T17028] device bridge_slave_0 entered promiscuous mode [ 1516.270171][T17114] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1516.315110][T17114] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.345407][T16965] team0: Port device team_slave_0 added [ 1516.366892][T17028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.414265][T17028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.433420][T17028] device bridge_slave_1 entered promiscuous mode [ 1516.503632][T17028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.573536][T16965] team0: Port device team_slave_1 added [ 1516.579768][T16881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.591569][T16881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.691784][T16881] device bridge_slave_0 entered promiscuous mode [ 1516.715445][T17028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.841012][ T27] audit: type=1326 audit(2000002423.552:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17113 comm="syz.9.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1517.281231][ T27] audit: type=1326 audit(2000002423.552:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17113 comm="syz.9.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1517.318891][T16881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.332272][T16881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.359841][T16881] device bridge_slave_1 entered promiscuous mode [ 1517.397310][ T27] audit: type=1326 audit(2000002423.552:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17113 comm="syz.9.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1517.485118][T16965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.496115][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.545734][ T27] audit: type=1326 audit(2000002423.552:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17113 comm="syz.9.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1517.603486][T13868] EXT4-fs (loop9): unmounting filesystem. [ 1519.389980][T16965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.405075][ T27] audit: type=1326 audit(2000002423.552:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17113 comm="syz.9.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1519.440118][ T27] audit: type=1326 audit(2000002423.552:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17113 comm="syz.9.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1519.494646][T17028] team0: Port device team_slave_0 added [ 1519.520646][ T27] audit: type=1326 audit(2000002423.562:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17113 comm="syz.9.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1519.578010][ T27] audit: type=1326 audit(2000002423.562:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17113 comm="syz.9.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1519.820332][ T27] audit: type=1326 audit(2000002423.562:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17113 comm="syz.9.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1519.910471][ T27] audit: type=1326 audit(2000002423.562:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17113 comm="syz.9.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1520.375162][T16965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1520.409553][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.560171][T16965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.642812][T17028] team0: Port device team_slave_1 added [ 1520.753589][T16881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.783409][T16881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1520.959750][T17028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1520.966795][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.029357][T17028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.123252][T16965] device hsr_slave_0 entered promiscuous mode [ 1521.133098][T16965] device hsr_slave_1 entered promiscuous mode [ 1521.155006][T16965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1521.163154][T16965] Cannot create hsr debugfs directory [ 1521.173627][T17028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.181278][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.208798][T17028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.241084][T16881] team0: Port device team_slave_0 added [ 1521.272112][T16881] team0: Port device team_slave_1 added [ 1521.410544][T17028] device hsr_slave_0 entered promiscuous mode [ 1521.435565][T17028] device hsr_slave_1 entered promiscuous mode [ 1521.450359][T17028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1521.488009][T17028] Cannot create hsr debugfs directory [ 1521.610627][T16881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.617697][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.703465][T16881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.723830][T16881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.731011][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.757456][T16881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.754068][T16881] device hsr_slave_0 entered promiscuous mode [ 1522.953896][T16881] device hsr_slave_1 entered promiscuous mode [ 1523.073350][T16881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1523.127254][T16881] Cannot create hsr debugfs directory [ 1523.469995][T17160] loop9: detected capacity change from 0 to 2048 [ 1523.508888][T17160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1524.410924][T17167] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1525.035168][ T4446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.315875][T17173] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1525.790122][ T4446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.388636][ T4446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.721000][ T4446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.069215][T16965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1532.192271][T17208] loop3: detected capacity change from 0 to 512 [ 1532.215201][T16965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1532.298120][T16965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1532.376692][T16965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1532.845712][T17208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1532.855170][T17208] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.130925][T17028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1533.185243][T13765] EXT4-fs (loop3): unmounting filesystem. [ 1533.218538][T17028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1533.277798][T17028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1533.412841][T17028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1535.045377][T17225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.052703][T17225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.127583][T17028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1535.181800][T17226] bridge0: port 3(syz_tun) entered blocking state [ 1535.222382][T17226] bridge0: port 3(syz_tun) entered disabled state [ 1535.286971][T17226] device syz_tun entered promiscuous mode [ 1535.338677][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1535.548000][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1535.632182][T17235] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1535.632182][T17235] program syz.9.2998 not setting count and/or reply_len properly [ 1535.851731][T17028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.906317][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1535.939071][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1535.951340][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1535.959654][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1536.015965][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1536.026314][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1536.034281][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1536.043347][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1536.126834][ T4465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.134127][ T4465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.486975][T17243] loop3: detected capacity change from 0 to 8 [ 1537.705628][T16965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.721896][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1537.733042][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1537.758881][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1537.781523][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.788722][ T4465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1537.834308][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1538.126853][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 1538.158033][T17236] lo speed is unknown, defaulting to 1000 [ 1538.167747][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1538.248042][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1538.272723][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1538.281808][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1538.323905][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1538.485893][T16965] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.521850][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1538.530299][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1538.542297][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1538.705919][T17028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1538.718351][T17028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1538.736695][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1538.747387][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1538.759861][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1538.782658][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1538.801251][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.808458][ T8033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.830140][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1538.841264][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1538.851459][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.858624][ T8033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.867344][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1538.876810][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1538.885934][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1539.075153][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1539.083811][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1539.102393][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1539.122155][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1539.145602][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1539.155808][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1539.179823][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1539.242127][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1539.671363][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1539.690693][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1540.000221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1540.009007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1540.029207][T16965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1540.190048][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 1540.471229][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1540.478944][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1540.678647][T17028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1541.204954][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1541.230116][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1541.244818][T17236] chnl_net:caif_netlink_parms(): no params data found [ 1541.320447][T16965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1541.737851][ T4446] device hsr_slave_0 left promiscuous mode [ 1541.769829][ T4446] device hsr_slave_1 left promiscuous mode [ 1541.776674][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.809860][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.839588][ T4446] device bridge_slave_1 left promiscuous mode [ 1541.845940][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.881154][ T4446] device bridge_slave_0 left promiscuous mode [ 1541.887506][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.926216][ T4446] device hsr_slave_0 left promiscuous mode [ 1541.945241][ T4446] device hsr_slave_1 left promiscuous mode [ 1541.953541][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.961349][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.970101][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.977619][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.986427][ T4446] device bridge_slave_1 left promiscuous mode [ 1541.992843][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.005012][ T4446] device bridge_slave_0 left promiscuous mode [ 1542.011805][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.027548][ T4446] device hsr_slave_0 left promiscuous mode [ 1542.034748][ T4446] device hsr_slave_1 left promiscuous mode [ 1542.041596][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1542.049732][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.057930][ T4446] device bridge_slave_1 left promiscuous mode [ 1542.064390][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.073338][ T4446] device bridge_slave_0 left promiscuous mode [ 1542.079959][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.142354][ T4446] device veth1_macvtap left promiscuous mode [ 1542.148478][ T4446] device veth0_macvtap left promiscuous mode [ 1542.155043][ T4446] device veth1_vlan left promiscuous mode [ 1542.161040][ T4446] device veth0_vlan left promiscuous mode [ 1542.268981][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 1542.626483][ T4446] team0 (unregistering): Port device team_slave_1 removed [ 1542.717596][ T4446] team0 (unregistering): Port device team_slave_0 removed [ 1542.809030][ T4446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1542.898947][ T4446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.299692][ T4446] bond0 (unregistering): Released all slaves [ 1544.347681][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 1544.403639][ T4446] team0 (unregistering): Port device team_slave_1 removed [ 1544.496487][ T4446] team0 (unregistering): Port device team_slave_0 removed [ 1544.587787][ T4446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1544.672712][ T4446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.404341][ T4446] bond0 (unregistering): Released all slaves [ 1545.770728][ T4446] team0 (unregistering): Port device team_slave_1 removed [ 1545.824440][ T4446] team0 (unregistering): Port device team_slave_0 removed [ 1545.873873][ T4446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.934472][ T4446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1546.305217][ T4446] bond0 (unregistering): Released all slaves [ 1546.509625][T17236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.537202][T17236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.545800][T17236] device bridge_slave_0 entered promiscuous mode [ 1546.579781][T17236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.606548][T17236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.625582][T17236] device bridge_slave_1 entered promiscuous mode [ 1546.688239][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1546.698160][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1546.807578][T17236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1546.838744][T17236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.913741][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1546.944476][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1546.960861][T17028] device veth0_vlan entered promiscuous mode [ 1547.008211][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1547.017140][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1547.048461][T17028] device veth1_vlan entered promiscuous mode [ 1547.063019][T17236] team0: Port device team_slave_0 added [ 1547.087358][T17236] team0: Port device team_slave_1 added [ 1547.209535][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1547.219879][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1547.249184][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1547.259888][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1547.339882][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1547.357209][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1547.373233][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1547.382190][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1547.407769][T17236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.414991][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.516373][T17236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.535622][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1547.557226][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1547.576891][T16965] device veth0_vlan entered promiscuous mode [ 1547.590054][T17236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.603416][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.642860][T17236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.663641][T17028] device veth0_macvtap entered promiscuous mode [ 1547.692136][T16965] device veth1_vlan entered promiscuous mode [ 1547.769618][T17236] device hsr_slave_0 entered promiscuous mode [ 1547.797926][T17236] device hsr_slave_1 entered promiscuous mode [ 1547.804952][T17236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1547.825926][T17236] Cannot create hsr debugfs directory [ 1547.889670][T17028] device veth1_macvtap entered promiscuous mode [ 1547.977102][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.035835][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.056311][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.080775][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.091282][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.102116][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.113875][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.124740][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.135014][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.146065][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.161306][T17028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1548.177604][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1548.193132][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1548.202471][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1548.237195][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.249306][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.265225][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.290073][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.311929][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.336634][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.355612][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.379061][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.391141][T17028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.433331][T16965] device veth0_macvtap entered promiscuous mode [ 1548.449366][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1548.461617][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1548.473898][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1548.483475][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1548.493835][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1548.525102][T17028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.545309][T17028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.557207][T17028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.581499][T17028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.601121][T16965] device veth1_macvtap entered promiscuous mode [ 1548.619961][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1548.747251][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.758659][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.768981][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.781231][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.804689][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.825855][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.845359][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.869978][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.893396][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.907383][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.917620][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.928547][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.943945][T16965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1549.023473][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1549.038999][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1549.068177][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.099685][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.110118][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.120965][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.133595][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.144237][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.154362][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.165281][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.175543][T16965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.186959][T16965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.200890][T16965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1549.228548][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1549.272559][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1549.288525][T16965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.308417][T16965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.324851][T16965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.335439][T16965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.562093][ T8033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.599980][ T8033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.661305][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1549.779530][ T9198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.807484][ T9198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.840127][T17236] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1549.857279][T17236] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1549.864435][ T8033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.891640][T17236] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1549.891640][ T8033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.957447][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1549.970485][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1549.991109][T17236] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1550.076426][ T9198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.084516][ T9198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.215896][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1550.460262][T17236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.883907][ T27] kauditd_printk_skb: 55 callbacks suppressed [ 1550.883929][ T27] audit: type=1326 audit(2000002457.609:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17349 comm="syz.9.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1551.005098][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.016106][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.022882][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.122964][T17354] infiniband syz2: set active [ 1551.130719][T17354] infiniband syz2: added vxcan1 [ 1551.139793][T17354] rdma_rxe: unable to create cq [ 1551.146116][T17354] infiniband syz2: Couldn't create ib_mad CQ [ 1551.156980][T17354] infiniband syz2: Couldn't open port 1 [ 1551.200501][T17354] RDS/IB: syz2: added [ 1551.207468][T17354] smc: adding ib device syz2 with port count 1 [ 1551.214155][T17354] smc: ib device syz2 port 1 has pnetid [ 1551.220982][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.307581][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.389405][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.472431][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.554434][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.636177][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.715093][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.798253][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1551.879764][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1552.008364][T17354] vxcan1 speed is unknown, defaulting to 1000 [ 1552.305560][T17357] loop5: detected capacity change from 0 to 128 [ 1552.717457][ T125] vxcan1 speed is unknown, defaulting to 1000 [ 1552.728965][T16977] vxcan1 speed is unknown, defaulting to 1000 [ 1552.734308][ T27] audit: type=1326 audit(2000002457.609:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17349 comm="syz.9.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1552.849460][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1553.051353][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1553.138763][T17367] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1553.146063][T17367] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1553.152976][T17367] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1553.160351][T17367] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1553.167232][T17367] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1553.174337][T17367] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 1553.181248][T17367] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1553.208903][T17367] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1553.215780][T17367] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1553.222634][T17367] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1553.229409][T17367] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1553.236188][T17367] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1553.243026][T17367] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1553.251103][T17367] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1553.259148][T17367] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1553.266180][T17367] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1553.274650][T17367] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1553.281320][T17367] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1553.372501][ T27] audit: type=1326 audit(2000002457.609:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17349 comm="syz.9.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1553.703207][T17236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.874253][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1553.942876][ T27] audit: type=1326 audit(2000002457.609:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17349 comm="syz.9.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1553.970320][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1554.022972][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.030238][ T9198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.928549][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1554.937133][ T27] audit: type=1326 audit(2000002457.609:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17349 comm="syz.9.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1554.959768][ T27] audit: type=1326 audit(2000002457.609:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17349 comm="syz.9.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1554.983544][ T27] audit: type=1326 audit(2000002457.609:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17349 comm="syz.9.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1555.009788][ T27] audit: type=1326 audit(2000002457.619:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17349 comm="syz.9.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1555.079882][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1555.092277][ T27] audit: type=1326 audit(2000002457.619:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17349 comm="syz.9.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1555.111891][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1555.191684][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.198967][ T9198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.219193][ T27] audit: type=1326 audit(2000002457.619:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17349 comm="syz.9.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d7d9c799 code=0x7ffc0000 [ 1555.263569][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1555.293566][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1555.622732][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1555.638656][T17385] loop5: detected capacity change from 0 to 128 [ 1555.669143][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1555.705084][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1555.861424][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1555.870534][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1556.892425][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1556.952499][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1557.022229][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1557.092558][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1557.102360][T17391] loop9: detected capacity change from 0 to 2048 [ 1557.133040][T17236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1558.392335][T17391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1558.558923][T17405] loop5: detected capacity change from 0 to 8 [ 1559.961850][T17415] loop5: detected capacity change from 0 to 128 [ 1559.976852][T17415] befs: Unrecognized mount option "$" or missing value [ 1559.984215][T17415] befs: (loop5): cannot parse mount options [ 1560.856699][ T4446] device hsr_slave_0 left promiscuous mode [ 1561.052290][ T4446] device hsr_slave_1 left promiscuous mode [ 1561.154508][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1561.182581][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1561.259446][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.430623][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.529697][ T4446] device bridge_slave_1 left promiscuous mode [ 1561.536037][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.573603][ T4446] device bridge_slave_0 left promiscuous mode [ 1561.599362][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.386992][ T4446] team0 (unregistering): Port device team_slave_1 removed [ 1563.401809][T17436] loop3: detected capacity change from 0 to 128 [ 1563.618525][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1563.827941][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 1563.835652][ T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.947098][ T4446] team0 (unregistering): Port device team_slave_0 removed [ 1564.043598][ T26] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1564.140483][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.159056][ T4446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.227403][ T26] usb 6-1: config 0 descriptor?? [ 1564.236858][T17439] loop4: detected capacity change from 0 to 4096 [ 1564.318956][ T26] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1566.297334][ T4446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1566.325815][T17439] ntfs3: loop4: ino=22, "file1" fallocate(0x10) is not supported [ 1566.974318][T17364] usb 6-1: USB disconnect, device number 2 [ 1568.861779][ T4446] bond0 (unregistering): Released all slaves [ 1568.966812][T17464] loop4: detected capacity change from 0 to 512 [ 1569.024809][T17464] EXT4-fs: Ignoring removed orlov option [ 1569.106915][T17464] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1569.167169][T17464] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1569.256542][T17464] EXT4-fs error (device loop4): ext4_iget_extra_inode:4756: inode #15: comm syz.4.3019: corrupted in-inode xattr [ 1569.444074][T17464] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3019: couldn't read orphan inode 15 (err -117) [ 1569.556305][T17464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1570.396070][T17482] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1570.405024][T17482] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1570.413883][T17482] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1570.421780][T17482] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1570.428882][T17482] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1570.438052][T17482] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 1570.465314][T17482] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1570.473106][T17482] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1570.480927][T17482] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1570.488906][T17482] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1570.496727][T17482] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1570.504554][T17482] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1570.512298][T17482] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1570.520640][T17482] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1570.529305][T17482] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1570.536809][T17482] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1570.545889][T17482] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1570.552968][T17482] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1571.048932][T16965] EXT4-fs (loop4): unmounting filesystem. [ 1571.422889][T17491] loop3: detected capacity change from 0 to 512 [ 1572.174775][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1572.182362][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1572.239061][T17236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.856303][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1574.902612][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1574.977671][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1574.991046][T17523] process '/newroot/14/file0' started with executable stack [ 1575.011305][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1575.087081][T17236] device veth0_vlan entered promiscuous mode [ 1575.132621][T11603] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1575.142816][T17236] device veth1_vlan entered promiscuous mode [ 1575.293880][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1575.302237][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1575.310491][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1575.319243][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1575.352152][T11603] usb 5-1: Using ep0 maxpacket: 16 [ 1575.368496][T11603] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.634020][T11603] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1575.749993][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1575.876077][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1575.967232][T11603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.989356][T17533] loop9: detected capacity change from 0 to 2048 [ 1576.020752][T17236] device veth0_macvtap entered promiscuous mode [ 1576.036042][T11603] usb 5-1: config 0 descriptor?? [ 1576.063376][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1576.119856][T17533] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1576.132844][T17236] device veth1_macvtap entered promiscuous mode [ 1576.145367][T11603] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1576.227078][T17541] loop5: detected capacity change from 0 to 4096 [ 1576.280512][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1576.349690][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.380286][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1576.415977][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.500132][T17537] ntfs3: loop5: ino=22, "file1" fallocate(0x10) is not supported [ 1576.516029][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1576.561513][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.660634][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1576.671930][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.691499][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1576.761540][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.496026][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.793489][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.074944][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1578.134764][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.208165][T17236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1578.271579][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1578.291470][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1578.373366][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.405958][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.471142][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.561627][ T4312] usb 5-1: USB disconnect, device number 3 [ 1578.652674][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.699188][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.744586][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.837089][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.034012][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.054316][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.078046][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.119206][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.144432][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.200032][T17236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.217625][T17551] tipc: Started in network mode [ 1579.357619][T17551] tipc: Node identity 4004, cluster identity 4711 [ 1579.491057][T17551] tipc: Node number set to 16388 [ 1579.524897][T12728] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1579.551742][T12728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1579.575283][T17236] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.601506][T17236] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.638706][T17557] loop5: detected capacity change from 0 to 512 [ 1579.659224][T17236] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.684888][T17557] EXT4-fs: Ignoring removed orlov option [ 1579.701379][T17236] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.735314][T17557] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1579.767344][T17557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1579.776117][T17559] loop3: detected capacity change from 0 to 128 [ 1579.881558][T17557] EXT4-fs error (device loop5): ext4_iget_extra_inode:4756: inode #15: comm syz.5.3035: corrupted in-inode xattr [ 1580.034304][T17557] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3035: couldn't read orphan inode 15 (err -117) [ 1580.109979][T12728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.118001][T12728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.161686][T17557] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1580.230957][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1580.550351][T12728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.526938][T17028] EXT4-fs (loop5): unmounting filesystem. [ 1581.550540][T12728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.590557][T12728] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1582.425596][T17586] Bluetooth: MGMT ver 1.22 [ 1582.532092][T17587] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1583.821347][T17595] loop4: detected capacity change from 0 to 2048 [ 1583.833115][T17595] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1584.122274][T17579] loop9: detected capacity change from 0 to 2048 [ 1584.251991][T17579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1588.237367][T17636] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1588.243986][T17636] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1588.250771][T17636] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1588.257977][T17636] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1588.264513][T17636] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1588.271285][T17636] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 1588.278010][T17636] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1588.284663][T17636] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1588.291217][T17636] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1588.297794][T17636] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1588.304397][T17636] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1588.310985][T17636] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1588.317585][T17636] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1588.325406][T17636] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1588.333262][T17636] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1588.349150][T17636] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1588.357070][T17636] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1588.363708][T17636] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1589.524543][T17651] tipc: Started in network mode [ 1589.530051][T17651] tipc: Node identity 4004, cluster identity 4711 [ 1589.536623][T17651] tipc: Node number set to 16388 [ 1589.936049][T17655] loop8: detected capacity change from 0 to 512 [ 1589.987366][T17655] EXT4-fs: Ignoring removed orlov option [ 1590.012716][T17660] loop5: detected capacity change from 0 to 128 [ 1590.201242][T17655] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1590.264073][T17655] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1590.769091][T17665] loop3: detected capacity change from 0 to 512 [ 1593.769412][T17655] EXT4-fs: error -4 creating inode table initialization thread [ 1594.214113][T17655] EXT4-fs (loop8): mount failed [ 1594.694531][T17673] loop4: detected capacity change from 0 to 2048 [ 1594.737770][T17673] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1595.703217][T17675] loop9: detected capacity change from 0 to 2048 [ 1595.738386][T17675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1596.839585][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1596.839601][ T27] audit: type=1326 audit(2000002503.622:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1597.081569][ T27] audit: type=1326 audit(2000002503.622:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1598.730955][ T27] audit: type=1326 audit(2000002503.622:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1598.893600][ T27] audit: type=1326 audit(2000002503.622:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1599.175331][T17710] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1599.220816][ T27] audit: type=1326 audit(2000002503.622:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1600.805325][T17717] befs: (nbd8): No write support. Marking filesystem read-only [ 1600.818803][ T2806] block nbd8: Attempted send on invalid socket [ 1600.825267][ T2806] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1601.467003][T17723] loop9: detected capacity change from 0 to 512 [ 1602.462251][ T27] audit: type=1326 audit(2000002503.622:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1602.538633][ T27] audit: type=1326 audit(2000002503.622:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1602.635413][ T27] audit: type=1326 audit(2000002503.622:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1602.768776][ T27] audit: type=1326 audit(2000002503.622:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1602.898613][ T27] audit: type=1326 audit(2000002503.622:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1602.988495][ T27] audit: type=1326 audit(2000002503.622:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1603.095029][ T27] audit: type=1326 audit(2000002503.622:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1603.138321][ T27] audit: type=1326 audit(2000002503.622:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1603.248489][ T27] audit: type=1326 audit(2000002503.622:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1603.317665][ T27] audit: type=1326 audit(2000002503.622:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fed9c799 code=0x7ffc0000 [ 1603.390802][T17732] loop9: detected capacity change from 0 to 128 [ 1604.580020][ T4465] kworker/u4:20: attempt to access beyond end of device [ 1604.580020][ T4465] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1605.686554][T17745] loop8: detected capacity change from 0 to 2048 [ 1605.701158][T17745] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1606.668610][T17758] loop9: detected capacity change from 0 to 2048 [ 1606.695645][T17758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1608.571746][T17770] loop5: detected capacity change from 0 to 2048 [ 1608.607081][T17770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1609.227041][T17777] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1609.483494][T17780] loop9: detected capacity change from 0 to 2048 [ 1610.485106][T17780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1612.320990][T17804] loop4: detected capacity change from 0 to 8 [ 1614.419361][T17809] loop3: detected capacity change from 0 to 2048 [ 1614.488941][T17809] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1616.961803][T17833] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1619.620022][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 1622.629244][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1622.635718][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1623.111853][T17870] loop5: detected capacity change from 0 to 2048 [ 1623.169945][T17870] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1623.656399][T17875] loop8: detected capacity change from 0 to 8 [ 1623.923683][T17873] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1625.526353][T17877] befs: (nbd3): No write support. Marking filesystem read-only [ 1625.536754][ T2806] block nbd3: Attempted send on invalid socket [ 1625.544107][ T2806] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1639.137742][T17943] befs: (nbd5): No write support. Marking filesystem read-only [ 1640.040416][ T7345] block nbd5: Attempted send on invalid socket [ 1640.046709][ T7345] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1640.187752][T17246] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1640.563713][T17948] loop3: detected capacity change from 0 to 128 [ 1641.716470][ T4450] kworker/u4:14: attempt to access beyond end of device [ 1641.716470][ T4450] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1645.335625][T17969] tipc: Started in network mode [ 1645.340823][T17969] tipc: Node identity 4004, cluster identity 4711 [ 1645.347426][T17969] tipc: Node number set to 16388 [ 1645.913352][T17971] loop4: detected capacity change from 0 to 512 [ 1646.894961][T17981] loop3: detected capacity change from 0 to 8 [ 1647.264491][T17981] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1647.271326][T17981] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1650.645603][T17993] loop9: detected capacity change from 0 to 2048 [ 1650.666651][T17993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1651.833705][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1651.845987][ T4281] CPU: 0 PID: 4281 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1651.853627][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1651.863745][ T4281] Workqueue: hci6 hci_rx_work [ 1651.868578][ T4281] Call Trace: [ 1651.871907][ T4281] [ 1651.874888][ T4281] dump_stack_lvl+0x188/0x24e [ 1651.879636][ T4281] ? show_regs_print_info+0x12/0x12 [ 1651.884897][ T4281] ? load_image+0x400/0x400 [ 1651.889481][ T4281] sysfs_create_dir_ns+0x26a/0x290 [ 1651.894678][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 1651.899418][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 1651.904675][ T4281] kobject_add_internal+0x61c/0xcc0 [ 1651.909943][ T4281] kobject_add+0x160/0x230 [ 1651.914462][ T4281] ? kobject_init+0x1d0/0x1d0 [ 1651.919206][ T4281] ? klist_children_get+0x50/0x50 [ 1651.924303][ T4281] ? get_device_parent+0x121/0x3f0 [ 1651.929502][ T4281] device_add+0x483/0xfb0 [ 1651.933931][ T4281] ? kmem_cache_free+0xf7/0x290 [ 1651.938872][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 1651.943879][ T4281] le_conn_complete_evt+0x105f/0x1670 [ 1651.949307][ T4281] ? lock_chain_count+0x20/0x20 [ 1651.954233][ T4281] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1651.960543][ T4281] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1651.966269][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 1651.971973][ T4281] ? hci_remote_host_features_evt+0x270/0x270 [ 1651.978191][ T4281] hci_event_packet+0x7b6/0x1280 [ 1651.983208][ T4281] ? bis_list+0x280/0x280 [ 1651.987616][ T4281] ? kcov_remote_start+0x27/0x7e0 [ 1651.992700][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 1651.997961][ T4281] hci_rx_work+0x3eb/0xd40 [ 1652.002451][ T4281] ? process_one_work+0x7b0/0x1160 [ 1652.007623][ T4281] process_one_work+0x8a2/0x1160 [ 1652.012642][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 1652.018345][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1652.023428][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1652.029116][ T4281] ? kthread_data+0x4b/0xc0 [ 1652.033677][ T4281] worker_thread+0xaa2/0x1270 [ 1652.038441][ T4281] ? __kthread_parkme+0x162/0x1c0 [ 1652.043527][ T4281] kthread+0x29d/0x330 [ 1652.047640][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 1652.052803][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 1652.057449][ T4281] ret_from_fork+0x1f/0x30 [ 1652.061936][ T4281] [ 1652.130379][ T4281] kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1652.146744][ T4281] Bluetooth: hci6: failed to register connection device [ 1652.217556][ T4281] ================================================================== [ 1652.225773][ T4281] BUG: KASAN: use-after-free in l2cap_sock_new_connection_cb+0x1f5/0x2a0 [ 1652.234288][ T4281] Read of size 8 at addr ffff888075f4b548 by task kworker/u5:5/4281 [ 1652.242384][ T4281] [ 1652.244762][ T4281] CPU: 0 PID: 4281 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1652.252423][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1652.262563][ T4281] Workqueue: hci6 hci_rx_work [ 1652.267445][ T4281] Call Trace: [ 1652.270811][ T4281] [ 1652.273854][ T4281] dump_stack_lvl+0x188/0x24e [ 1652.278676][ T4281] ? __lock_acquire+0x7d10/0x7d10 [ 1652.283943][ T4281] ? show_regs_print_info+0x12/0x12 [ 1652.289246][ T4281] ? load_image+0x400/0x400 [ 1652.293889][ T4281] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1652.299474][ T4281] ? __virt_addr_valid+0x188/0x540 [ 1652.304724][ T4281] ? __virt_addr_valid+0x465/0x540 [ 1652.309978][ T4281] ? l2cap_sock_new_connection_cb+0x1f5/0x2a0 [ 1652.316252][ T4281] print_report+0xa8/0x210 [ 1652.320805][ T4281] kasan_report+0x10b/0x140 [ 1652.325429][ T4281] ? l2cap_sock_new_connection_cb+0x1f5/0x2a0 [ 1652.331639][ T4281] l2cap_sock_new_connection_cb+0x1f5/0x2a0 [ 1652.337634][ T4281] l2cap_connect_cfm+0x35f/0x1120 [ 1652.342798][ T4281] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 1652.348227][ T4281] ? hci_connect_cfm+0x86/0x130 [ 1652.353172][ T4281] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 1652.358660][ T4281] hci_connect_cfm+0x8f/0x130 [ 1652.363429][ T4281] le_conn_complete_evt+0x10ec/0x1670 [ 1652.368901][ T4281] ? lock_chain_count+0x20/0x20 [ 1652.373859][ T4281] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1652.380189][ T4281] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1652.385952][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 1652.391591][ T4281] ? hci_remote_host_features_evt+0x270/0x270 [ 1652.397742][ T4281] hci_event_packet+0x7b6/0x1280 [ 1652.402826][ T4281] ? bis_list+0x280/0x280 [ 1652.407242][ T4281] ? kcov_remote_start+0x27/0x7e0 [ 1652.412343][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 1652.417654][ T4281] hci_rx_work+0x3eb/0xd40 [ 1652.422145][ T4281] ? process_one_work+0x7b0/0x1160 [ 1652.427336][ T4281] process_one_work+0x8a2/0x1160 [ 1652.432397][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 1652.438117][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1652.443212][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1652.448818][ T4281] ? kthread_data+0x4b/0xc0 [ 1652.453441][ T4281] worker_thread+0xaa2/0x1270 [ 1652.458231][ T4281] ? __kthread_parkme+0x162/0x1c0 [ 1652.463374][ T4281] kthread+0x29d/0x330 [ 1652.467570][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 1652.472727][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 1652.477391][ T4281] ret_from_fork+0x1f/0x30 [ 1652.481919][ T4281] [ 1652.485014][ T4281] [ 1652.487380][ T4281] Allocated by task 4281: [ 1652.491818][ T4281] kasan_set_track+0x4b/0x70 [ 1652.496496][ T4281] __kasan_kmalloc+0x8e/0xa0 [ 1652.501240][ T4281] __kmalloc+0xb0/0x240 [ 1652.505486][ T4281] sk_prot_alloc+0xe7/0x210 [ 1652.510090][ T4281] sk_alloc+0x36/0x340 [ 1652.514256][ T4281] bt_sock_alloc+0x36/0x130 [ 1652.518855][ T4281] l2cap_sock_new_connection_cb+0xde/0x2a0 [ 1652.524730][ T4281] l2cap_connect_cfm+0x35f/0x1120 [ 1652.529911][ T4281] hci_connect_cfm+0x8f/0x130 [ 1652.534777][ T4281] le_conn_complete_evt+0x10ec/0x1670 [ 1652.540229][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 1652.545839][ T4281] hci_event_packet+0x7b6/0x1280 [ 1652.550890][ T4281] hci_rx_work+0x3eb/0xd40 [ 1652.555367][ T4281] process_one_work+0x8a2/0x1160 [ 1652.560391][ T4281] worker_thread+0xaa2/0x1270 [ 1652.565161][ T4281] kthread+0x29d/0x330 [ 1652.569311][ T4281] ret_from_fork+0x1f/0x30 [ 1652.573824][ T4281] [ 1652.576198][ T4281] Freed by task 18006: [ 1652.580324][ T4281] kasan_set_track+0x4b/0x70 [ 1652.585009][ T4281] kasan_save_free_info+0x2d/0x50 [ 1652.590090][ T4281] ____kasan_slab_free+0x126/0x1e0 [ 1652.595417][ T4281] slab_free_freelist_hook+0x131/0x1a0 [ 1652.600977][ T4281] __kmem_cache_free+0xb6/0x1f0 [ 1652.605916][ T4281] __sk_destruct+0x4ba/0x650 [ 1652.610597][ T4281] l2cap_sock_cleanup_listen+0xda/0x270 [ 1652.616216][ T4281] l2cap_sock_release+0x66/0x1e0 [ 1652.621270][ T4281] sock_close+0xd5/0x240 [ 1652.625578][ T4281] __fput+0x22c/0x920 [ 1652.629643][ T4281] task_work_run+0x1d0/0x260 [ 1652.634337][ T4281] get_signal+0x11a6/0x1350 [ 1652.638939][ T4281] arch_do_signal_or_restart+0xc4/0x1350 [ 1652.644672][ T4281] exit_to_user_mode_loop+0x70/0x110 [ 1652.650050][ T4281] exit_to_user_mode_prepare+0xee/0x180 [ 1652.655796][ T4281] syscall_exit_to_user_mode+0x16/0x40 [ 1652.661319][ T4281] do_syscall_64+0x58/0xa0 [ 1652.665826][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1652.671778][ T4281] [ 1652.674166][ T4281] The buggy address belongs to the object at ffff888075f4b000 [ 1652.674166][ T4281] which belongs to the cache kmalloc-2k of size 2048 [ 1652.688439][ T4281] The buggy address is located 1352 bytes inside of [ 1652.688439][ T4281] 2048-byte region [ffff888075f4b000, ffff888075f4b800) [ 1652.701960][ T4281] [ 1652.704339][ T4281] The buggy address belongs to the physical page: [ 1652.710858][ T4281] page:ffffea0001d7d200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75f48 [ 1652.721189][ T4281] head:ffffea0001d7d200 order:3 compound_mapcount:0 compound_pincount:0 [ 1652.729588][ T4281] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1652.737664][ T4281] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017442000 [ 1652.746359][ T4281] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 1652.755020][ T4281] page dumped because: kasan: bad access detected [ 1652.761503][ T4281] page_owner tracks the page as allocated [ 1652.767286][ T4281] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 16881, tgid 16881 (syz-executor), ts 1520752901354, free_ts 1520701284223 [ 1652.791549][ T4281] post_alloc_hook+0x173/0x1a0 [ 1652.796381][ T4281] get_page_from_freelist+0x1a1e/0x1ab0 [ 1652.801964][ T4281] __alloc_pages+0x1ec/0x4f0 [ 1652.806599][ T4281] alloc_slab_page+0x5d/0x160 [ 1652.811312][ T4281] new_slab+0x87/0x2c0 [ 1652.815418][ T4281] ___slab_alloc+0xbc6/0x1240 [ 1652.820132][ T4281] __kmem_cache_alloc_node+0x1a0/0x260 [ 1652.825663][ T4281] __kmalloc_node_track_caller+0x9e/0x230 [ 1652.831423][ T4281] pskb_expand_head+0x1a6/0x12a0 [ 1652.836397][ T4281] netlink_trim+0x180/0x220 [ 1652.840992][ T4281] netlink_broadcast+0x75/0x10d0 [ 1652.846076][ T4281] nlmsg_notify+0xe7/0x1a0 [ 1652.850532][ T4281] rtnetlink_event+0x13a/0x1a0 [ 1652.855339][ T4281] raw_notifier_call_chain+0xcb/0x160 [ 1652.860742][ T4281] __netdev_upper_dev_link+0x41e/0x590 [ 1652.866239][ T4281] netdev_master_upper_dev_link+0xb9/0x100 [ 1652.872080][ T4281] page last free stack trace: [ 1652.876779][ T4281] free_unref_page_prepare+0x8b4/0x9a0 [ 1652.882286][ T4281] free_unref_page+0x2e/0x3f0 [ 1652.887002][ T4281] __unfreeze_partials+0x1a5/0x200 [ 1652.892139][ T4281] put_cpu_partial+0x17c/0x250 [ 1652.896927][ T4281] qlist_free_all+0x76/0xe0 [ 1652.901451][ T4281] kasan_quarantine_reduce+0x144/0x160 [ 1652.906936][ T4281] __kasan_slab_alloc+0x1e/0x80 [ 1652.911824][ T4281] slab_post_alloc_hook+0x4b/0x480 [ 1652.916970][ T4281] kmem_cache_alloc+0x123/0x2f0 [ 1652.921852][ T4281] prepare_creds+0x3c/0x610 [ 1652.926389][ T4281] do_faccessat+0xeb/0xa10 [ 1652.930852][ T4281] do_syscall_64+0x4c/0xa0 [ 1652.935307][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1652.941239][ T4281] [ 1652.943587][ T4281] Memory state around the buggy address: [ 1652.949242][ T4281] ffff888075f4b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1652.957325][ T4281] ffff888075f4b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1652.965405][ T4281] >ffff888075f4b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1652.973488][ T4281] ^ [ 1652.979923][ T4281] ffff888075f4b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1652.988016][ T4281] ffff888075f4b600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1652.996097][ T4281] ================================================================== [ 1653.119794][ T4281] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1653.127073][ T4281] CPU: 0 PID: 4281 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1653.134667][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1653.144785][ T4281] Workqueue: hci6 hci_rx_work [ 1653.149519][ T4281] Call Trace: [ 1653.152835][ T4281] [ 1653.155813][ T4281] dump_stack_lvl+0x188/0x24e [ 1653.160547][ T4281] ? memcpy+0x3c/0x60 [ 1653.164580][ T4281] ? show_regs_print_info+0x12/0x12 [ 1653.169843][ T4281] ? load_image+0x400/0x400 [ 1653.174401][ T4281] panic+0x2e5/0x730 [ 1653.178361][ T4281] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1653.184587][ T4281] ? bpf_jit_dump+0xd0/0xd0 [ 1653.189141][ T4281] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1653.195166][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 1653.200094][ T4281] check_panic_on_warn+0x80/0xa0 [ 1653.205182][ T4281] ? l2cap_sock_new_connection_cb+0x1f5/0x2a0 [ 1653.211320][ T4281] end_report+0x66/0x110 [ 1653.215619][ T4281] kasan_report+0x118/0x140 [ 1653.220272][ T4281] ? l2cap_sock_new_connection_cb+0x1f5/0x2a0 [ 1653.226411][ T4281] l2cap_sock_new_connection_cb+0x1f5/0x2a0 [ 1653.232363][ T4281] l2cap_connect_cfm+0x35f/0x1120 [ 1653.237463][ T4281] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 1653.242904][ T4281] ? hci_connect_cfm+0x86/0x130 [ 1653.247816][ T4281] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 1653.253164][ T4281] hci_connect_cfm+0x8f/0x130 [ 1653.257899][ T4281] le_conn_complete_evt+0x10ec/0x1670 [ 1653.263346][ T4281] ? lock_chain_count+0x20/0x20 [ 1653.268264][ T4281] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1653.274660][ T4281] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1653.280368][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 1653.285994][ T4281] ? hci_remote_host_features_evt+0x270/0x270 [ 1653.292123][ T4281] hci_event_packet+0x7b6/0x1280 [ 1653.297169][ T4281] ? bis_list+0x280/0x280 [ 1653.301553][ T4281] ? kcov_remote_start+0x27/0x7e0 [ 1653.306627][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 1653.311881][ T4281] hci_rx_work+0x3eb/0xd40 [ 1653.316351][ T4281] ? process_one_work+0x7b0/0x1160 [ 1653.321509][ T4281] process_one_work+0x8a2/0x1160 [ 1653.326591][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 1653.332279][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1653.337347][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1653.342940][ T4281] ? kthread_data+0x4b/0xc0 [ 1653.347503][ T4281] worker_thread+0xaa2/0x1270 [ 1653.352234][ T4281] ? __kthread_parkme+0x162/0x1c0 [ 1653.357320][ T4281] kthread+0x29d/0x330 [ 1653.361440][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 1653.366510][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 1653.371142][ T4281] ret_from_fork+0x1f/0x30 [ 1653.375624][ T4281] [ 1653.379253][ T4281] Kernel Offset: disabled [ 1653.383626][ T4281] Rebooting in 86400 seconds..