last executing test programs: 13.356395409s ago: executing program 3 (id=524): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000b80)=ANY=[], 0x1, 0x2be, &(0x7f0000000ec0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x109) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x13, 0xb4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) 10.537415579s ago: executing program 0 (id=525): syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0x40840) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) 10.53261517s ago: executing program 4 (id=536): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2002, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000b80)=ANY=[], 0x1, 0x2be, &(0x7f0000000ec0)="$eJzs3c2KI1UUAOBT+euMLtKIG0WwQBeummm3bjrKCGKvlAjqQoMzA5KEgW4I2IKZWc0TuPQ9fAQ3bnwDwa3gbmbRUlJVqVSaSdr0j2mwv291+t57bp2qG9KrnPr6jcno/qMknjz7PbrdJBoHcRDPk9iNRlQeRysAgP+P51kWf2WXybzTuP5qAIBtKP//l266FgBgOz79/IuP+4eH9z5J02681ns6HSQRMXk6HZTz/YfxbYzjQdyNXpxGZAtl3M4XtdLcbrw9mU0Heebkq1/n+/f/jCjy96MXuy/mf/jR4b39tLTIf6mqLo3+w3b1Ry9eXZ3/bpGdJOWy4vqzGHTinbeW6t+LXvz2TTyKcdyPPLfO/2E/TT/Ifnz2/ZdVftKIwU6xrpY1t3AcAAAAAAAAAAAAAAAAAAAAAADcEntpmpTte4r+PflQ0T9nOmieFvN7aWW5v8+s6g+UVBuV/YGymLfomWXxU9Vf526aptmiO0+V34rXW14sAAAAAAAAAAAAAAAAAAAAALnj705Gw/H4wVEZtOfD9ciFgqobQPWz/gumL4KDpZE342Q0bK7fcGfza7Ue1zee13ru4mi14lLFXzy4k9dz7Tvv1If7WZRBdTCb75PNnbPmlffLTU9Gw3Q+VT3k0TD5t2t1q4P7eXmqE1d9CFnxkTjNjo479ec5uotSz2Z1runJd15eOfV3lmWb7fPeH+UZzUeSosXGZldvz4OVN5gH3RfP4pf1G679ymhe/VsHAAAAAAAAAAAAAAAAAABYpf7R74rJJ2uSyvHGf1oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxR/f7/KuhGxNmRs0G7Tl67pg46cXR8k/cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7fBPAAAA//+re0m/") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x109) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x13, 0xb4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) 10.372668273s ago: executing program 3 (id=528): socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0x4, &(0x7f0000000800)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14, 0x1}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc, 0x1}], {0x95, 0x0, 0x9}}, &(0x7f0000000880)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.994706343s ago: executing program 0 (id=532): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[]) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0xb40}], 0x1, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) 8.944716799s ago: executing program 4 (id=534): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000200)={'pcmda12\x00', [0x5, 0xe00, 0xffff, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x2, 0x1, 0x0, 0x2, 0x36683148, 0x3800000, 0x5, 0x100, 0x100, 0x401, 0x8, 0x1, 0x1, 0x6, 0xc, 0x9, 0xfffffffa, 0x7, 0x6, 0xa4, 0x7, 0x8, 0xbc]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) unshare(0x26020480) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 8.903637s ago: executing program 0 (id=535): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x9, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x400, 0x3, 0x200, 0x0, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x81, 0xfffffffd, 0x800, 0x32, 0x0, 0xfffffffe, 0x80000, 0x85, 0xfffffffd, 0x0, 0x9, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x7d, 0x0, 0x4, 0x3, 0xffffffff, 0x2, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x0, 0xfffffffc, 0x9fa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xbda6, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfffeffe4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x8, 0x0, 0x0, 0x8], [0x5, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000100)=0x1e) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) socket$inet(0x2, 0x800, 0x10001) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) r5 = accept4$nfc_llcp(r2, &(0x7f0000000180), &(0x7f0000000480)=0x60, 0x800) getsockopt$nfc_llcp(r5, 0x118, 0x4, &(0x7f0000000500)=""/196, 0xc4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000600), 0x500, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) 7.864788435s ago: executing program 3 (id=537): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x2, 0x9}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) 7.812099147s ago: executing program 1 (id=538): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) ptrace(0x10, 0x0) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpgrp(0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x1000000}, 0x0, [0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x40800000000000, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x10, 0xfffffffffffffffe, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x40, 0x0, 0x59ed, 0x1000000000000000, 0x0, 0x4001ff, 0x0, 0x0, 0x0, 0x3, 0xd, 0x100000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x8, 0x2, 0x0, 0x80000000000, 0x0, 0x3f92, 0x0, 0x0, 0xb4b, 0x1, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) 6.844614221s ago: executing program 2 (id=539): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0xe562b48021685062, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 6.800649562s ago: executing program 1 (id=540): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000b80)=ANY=[], 0x1, 0x2be, &(0x7f0000000ec0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x109) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x13, 0xb4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) 5.785405187s ago: executing program 0 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xde) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/profiling', 0x202, 0x18) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xa) r4 = timerfd_create(0x9, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, 0x0, 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(r2, &(0x7f00000002c0)=""/124, 0x7c, 0x7) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{0x0}], 0x1, 0x100, 0x400) 5.767476028s ago: executing program 2 (id=542): r0 = getpid() timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) getpgid(r1) write$cgroup_int(r3, &(0x7f0000000040)=0x700, 0xfdef) socket$inet6_tcp(0xa, 0x1, 0x0) 4.922530489s ago: executing program 2 (id=543): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0xe562b48021685062, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 4.320545193s ago: executing program 1 (id=544): syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0x40840) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) 4.003256431s ago: executing program 0 (id=545): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x1ff) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)=0x5) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000004000)=0x1, 0x5, 0x1, 0x0, &(0x7f0000004000)=0x2, 0xb0024000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) sendfile(r3, r3, 0x0, 0x200000) 3.957776493s ago: executing program 3 (id=546): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2002, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000b80)=ANY=[], 0x1, 0x2be, &(0x7f0000000ec0)="$eJzs3c2KI1UUAOBT+euMLtKIG0WwQBeummm3bjrKCGKvlAjqQoMzA5KEgW4I2IKZWc0TuPQ9fAQ3bnwDwa3gbmbRUlJVqVSaSdr0j2mwv291+t57bp2qG9KrnPr6jcno/qMknjz7PbrdJBoHcRDPk9iNRlQeRysAgP+P51kWf2WXybzTuP5qAIBtKP//l266FgBgOz79/IuP+4eH9z5J02681ns6HSQRMXk6HZTz/YfxbYzjQdyNXpxGZAtl3M4XtdLcbrw9mU0Heebkq1/n+/f/jCjy96MXuy/mf/jR4b39tLTIf6mqLo3+w3b1Ry9eXZ3/bpGdJOWy4vqzGHTinbeW6t+LXvz2TTyKcdyPPLfO/2E/TT/Ifnz2/ZdVftKIwU6xrpY1t3AcAAAAAAAAAAAAAAAAAAAAAADcEntpmpTte4r+PflQ0T9nOmieFvN7aWW5v8+s6g+UVBuV/YGymLfomWXxU9Vf526aptmiO0+V34rXW14sAAAAAAAAAAAAAAAAAAAAALnj705Gw/H4wVEZtOfD9ciFgqobQPWz/gumL4KDpZE342Q0bK7fcGfza7Ue1zee13ru4mi14lLFXzy4k9dz7Tvv1If7WZRBdTCb75PNnbPmlffLTU9Gw3Q+VT3k0TD5t2t1q4P7eXmqE1d9CFnxkTjNjo479ec5uotSz2Z1runJd15eOfV3lmWb7fPeH+UZzUeSosXGZldvz4OVN5gH3RfP4pf1G679ymhe/VsHAAAAAAAAAAAAAAAAAABYpf7R74rJJ2uSyvHGf1oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxR/f7/KuhGxNmRs0G7Tl67pg46cXR8k/cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7fBPAAAA//+re0m/") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x109) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x13, 0xb4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) 3.912593743s ago: executing program 4 (id=547): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000b80)=ANY=[], 0x1, 0x2be, &(0x7f0000000ec0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x109) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x13, 0xb4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) 2.701136124s ago: executing program 4 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='rd_pages=8', 0xa) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') 2.651835914s ago: executing program 1 (id=549): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000001800)=ANY=[@ANYBLOB="e8000000ff03000004000000098ee42621b50c2d4e95a4197b1d2056ed75faebaa86ecdfb92ebb6294a50f54fc8c513af4a0167e3317f4e2f4fc06cdd0a6be076804fce6437048fe87ed07bf22e52ca776cc4d4be3bdb24ad6947fd85072c1d6cb16b253f915296055e9a06a59a4f81566cc1c1d32d493a60d41a98655f4811f0dbebcea0398a4b98a72e516f5e84b9cc471f8297d786188e402910817db84412b578acd08287f8bdfa2551d5529e46cccc2f940b0c5b6f68a507f978762fef76eb672a018d5cc2e0e9ea60111e80ec8a9080a96a60804503c5a4d739ee553796d333859d3a5e1eaaf9f02eafaf0d58ee66e45ce1a1f38b2692a06cfc8fcc6d29abc88104d5e130984ab922b3df5d4351431bd1b9d82e856a7692e1f92622533a1dfd607a69a35a9b5e5da561dbe10c0966f9ed1149312b8117f8ef80273ce838d81b0ef7a77f5b86cd236a9901e9b29d763dd61e5f230074dbd52dd157dce9b792653629a6309a1e99fad82381a9357d5c27968a8f9ab8be716222cfa72571539fb3d61ff04d16a0285e398286f330b2e2d34701059e6123efbdeb4575eaa72299c844669f739dc984b283ffda5f0deab3901d7909adef2cd12853a989cbd7957386865054781d3b7a5641f719d1e8b8c659ba993238b3cb0e628321f10fc0cdacfa8e5c4b0550a69ed28b663ce72678cefcfabdfe971400b2c2d07e9f796c58a308e8eae2ae28a460b83237e012a30318944ce1ecf368f1c3d476846e7954ca9025f2a05c9a474a3fe10a41701938c033576183460b6d439ea5800df41b5d3fa80447eaba92834dfcc849106138c945ba50fa3c854cf796cb1cb"]) r4 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xae642, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r5, 0x0) 2.307361383s ago: executing program 4 (id=550): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) openat$cgroup_type(r0, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002700)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) 2.303214893s ago: executing program 3 (id=551): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2b706964732021a0b593a1"], 0x6) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "804dc5d30a6f1591"}}}, 0x11) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 2.264297944s ago: executing program 2 (id=552): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='.\x02\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(&(0x7f0000000040)='.\x02\x00', r0, r1) mknod(&(0x7f0000000000)='.\x02\x00', 0x1000, 0x42) 1.442905444s ago: executing program 2 (id=553): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x1, 0x10000, 0x0, 0x3dc}, &(0x7f0000000100), &(0x7f0000000140), 0x0) pipe(0x0) socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x225c}, 0x1, 0x0, 0x0, 0x20004855}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10d00, 0xf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x80882) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(r1, 0x0, 0x70bac0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 1.332162027s ago: executing program 1 (id=554): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2002, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000b80)=ANY=[], 0x1, 0x2be, &(0x7f0000000ec0)="$eJzs3c2KI1UUAOBT+euMLtKIG0WwQBeummm3bjrKCGKvlAjqQoMzA5KEgW4I2IKZWc0TuPQ9fAQ3bnwDwa3gbmbRUlJVqVSaSdr0j2mwv291+t57bp2qG9KrnPr6jcno/qMknjz7PbrdJBoHcRDPk9iNRlQeRysAgP+P51kWf2WXybzTuP5qAIBtKP//l266FgBgOz79/IuP+4eH9z5J02681ns6HSQRMXk6HZTz/YfxbYzjQdyNXpxGZAtl3M4XtdLcbrw9mU0Heebkq1/n+/f/jCjy96MXuy/mf/jR4b39tLTIf6mqLo3+w3b1Ry9eXZ3/bpGdJOWy4vqzGHTinbeW6t+LXvz2TTyKcdyPPLfO/2E/TT/Ifnz2/ZdVftKIwU6xrpY1t3AcAAAAAAAAAAAAAAAAAAAAAADcEntpmpTte4r+PflQ0T9nOmieFvN7aWW5v8+s6g+UVBuV/YGymLfomWXxU9Vf526aptmiO0+V34rXW14sAAAAAAAAAAAAAAAAAAAAALnj705Gw/H4wVEZtOfD9ciFgqobQPWz/gumL4KDpZE342Q0bK7fcGfza7Ue1zee13ru4mi14lLFXzy4k9dz7Tvv1If7WZRBdTCb75PNnbPmlffLTU9Gw3Q+VT3k0TD5t2t1q4P7eXmqE1d9CFnxkTjNjo479ec5uotSz2Z1runJd15eOfV3lmWb7fPeH+UZzUeSosXGZldvz4OVN5gH3RfP4pf1G679ymhe/VsHAAAAAAAAAAAAAAAAAABYpf7R74rJJ2uSyvHGf1oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxR/f7/KuhGxNmRs0G7Tl67pg46cXR8k/cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7fBPAAAA//+re0m/") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x109) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x13, 0xb4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) 1.328411827s ago: executing program 4 (id=555): syz_emit_ethernet(0x82, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x8}], 0x1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x20008010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4080) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x408200, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$I2C_SLAVE(r3, 0x703, 0x3dd) 1.23150458s ago: executing program 2 (id=556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xde) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/profiling', 0x202, 0x18) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xa) r4 = timerfd_create(0x9, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, 0x0, 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(r2, &(0x7f00000002c0)=""/124, 0x7c, 0x7) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{0x0}], 0x1, 0x100, 0x400) 561.31µs ago: executing program 1 (id=557): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x2d7, &(0x7f0000000a40)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() io_setup(0x401, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x200, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c05, 0x3) getpid() r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) 331.65µs ago: executing program 3 (id=558): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000540)='12', 0x2) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='1843', 0x4) close(r1) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(0x0, &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x0) symlink(0x0, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(0x0, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') unlink(0x0) 0s ago: executing program 0 (id=559): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000b80)=ANY=[], 0x1, 0x2be, &(0x7f0000000ec0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x109) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x13, 0xb4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 32.498289][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.508467][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. syzkaller login: [ 50.575428][ T4174] cgroup: Unknown subsys name 'net' [ 50.744112][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.964840][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.292106][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 53.302135][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 53.328084][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.401337][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 53.434890][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 53.479048][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.486169][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.495183][ T4196] device bridge_slave_0 entered promiscuous mode [ 53.518932][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.526005][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.534198][ T4200] device bridge_slave_0 entered promiscuous mode [ 53.546366][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.553501][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.561580][ T4200] device bridge_slave_1 entered promiscuous mode [ 53.569533][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.576669][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.584486][ T4196] device bridge_slave_1 entered promiscuous mode [ 53.591897][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.599140][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.606739][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.639251][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.646316][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.654467][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.668511][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.679987][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.721292][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.732261][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.749655][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.768944][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.778213][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.785551][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.793756][ T4188] device bridge_slave_0 entered promiscuous mode [ 53.807297][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.814589][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.822970][ T4188] device bridge_slave_1 entered promiscuous mode [ 53.831910][ T4200] team0: Port device team_slave_0 added [ 53.866582][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.873690][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.882019][ T4194] device bridge_slave_0 entered promiscuous mode [ 53.890771][ T4200] team0: Port device team_slave_1 added [ 53.905322][ T4187] team0: Port device team_slave_0 added [ 53.915970][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.923702][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.931997][ T4194] device bridge_slave_1 entered promiscuous mode [ 53.952201][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.962825][ T4187] team0: Port device team_slave_1 added [ 53.969948][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.981795][ T4196] team0: Port device team_slave_0 added [ 53.995811][ T4196] team0: Port device team_slave_1 added [ 54.033938][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.041142][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.067306][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.080340][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.087299][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.113538][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.126408][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.141800][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.149353][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.175539][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.187064][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.194187][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.220089][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.235627][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.242884][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.268969][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.281412][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.292636][ T4188] team0: Port device team_slave_0 added [ 54.303898][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.311185][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.338543][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.362328][ T4188] team0: Port device team_slave_1 added [ 54.411528][ T4200] device hsr_slave_0 entered promiscuous mode [ 54.419312][ T4200] device hsr_slave_1 entered promiscuous mode [ 54.428044][ T4194] team0: Port device team_slave_0 added [ 54.441336][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.448282][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.474209][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.497377][ T4196] device hsr_slave_0 entered promiscuous mode [ 54.504514][ T4196] device hsr_slave_1 entered promiscuous mode [ 54.511096][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.519120][ T4196] Cannot create hsr debugfs directory [ 54.526574][ T4194] team0: Port device team_slave_1 added [ 54.532754][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.539775][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.566060][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.579412][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.586135][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.592653][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.600256][ T4187] Cannot create hsr debugfs directory [ 54.671383][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.678341][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.704444][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.741532][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.748498][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.774743][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.791674][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.798595][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.805146][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.812941][ T4188] Cannot create hsr debugfs directory [ 54.903947][ T4194] device hsr_slave_0 entered promiscuous mode [ 54.910725][ T4194] device hsr_slave_1 entered promiscuous mode [ 54.917140][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.925041][ T4194] Cannot create hsr debugfs directory [ 54.969757][ T4176] Bluetooth: hci0: command 0x0409 tx timeout [ 54.979995][ T4176] Bluetooth: hci1: command 0x0409 tx timeout [ 55.038872][ T4189] Bluetooth: hci4: command 0x0409 tx timeout [ 55.038982][ T4176] Bluetooth: hci3: command 0x0409 tx timeout [ 55.055934][ T4176] Bluetooth: hci2: command 0x0409 tx timeout [ 55.094472][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.108259][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.127096][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.142490][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.188447][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.197638][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.206439][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.218463][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.288343][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.297882][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.321748][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.344549][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.352380][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.396060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.406004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.426458][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.434012][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.442850][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.463466][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.480144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.489601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.498554][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.505807][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.515011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.526165][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.547213][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.554386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.563087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.573336][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.580425][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.605986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.615582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.631459][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.659204][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.667186][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.675652][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.685294][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.694104][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.703707][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.712900][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.721727][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.730340][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.738578][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.748175][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.769986][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.788267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.797515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.806709][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.813797][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.822353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.831296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.840052][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.847447][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.855886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.865434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.874704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.885106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.893626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.901922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.921751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.931247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.945244][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.962794][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.974603][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.986219][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.010513][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.032999][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.045904][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.054683][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.070545][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.079950][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.088401][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.097711][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.112923][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.133309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.142585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.151557][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.158582][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.166560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.175196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.183916][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.191000][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.198605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.231191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.247847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.257461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.269100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.295539][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.316440][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.333637][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.343466][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.358095][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.367682][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.379600][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.388170][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.397159][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.406491][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.442004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.458941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.470535][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.480134][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.525706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.535835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.547843][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.576325][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.592714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.609891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.637466][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.660514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.669282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.677634][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.684732][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.693133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.701547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.709380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.717912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.726688][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.733795][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.742181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.750941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.758370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.766657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.780285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.800827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.813676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.822643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.831559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.840392][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.847439][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.855265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.864637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.875789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.884823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.893457][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.900538][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.909752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.917607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.929969][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.939235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.963048][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.974972][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.994668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.003588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.013607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.021960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.030504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.039072][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 57.044224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.045151][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 57.053892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.067694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.076288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.085305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.094488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.102517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.110298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.136425][ T4196] device veth0_vlan entered promiscuous mode [ 57.143019][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 57.149552][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 57.156017][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 57.156146][ T4196] device veth1_vlan entered promiscuous mode [ 57.181686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.192667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.205429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.219188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.227963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.237843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.246743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.276169][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.288617][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.302755][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.317867][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.326413][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.335984][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.344530][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.353700][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.376343][ T4200] device veth0_vlan entered promiscuous mode [ 57.389676][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.397811][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.406758][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.416021][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.424701][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.432783][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.441535][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.450078][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.463530][ T4196] device veth0_macvtap entered promiscuous mode [ 57.473520][ T4187] device veth0_vlan entered promiscuous mode [ 57.488157][ T4200] device veth1_vlan entered promiscuous mode [ 57.498291][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.508379][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.518023][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.527166][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.539831][ T4196] device veth1_macvtap entered promiscuous mode [ 57.558058][ T4187] device veth1_vlan entered promiscuous mode [ 57.569301][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.577369][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.595975][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.615096][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.624930][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.637422][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.650768][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.659415][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.668222][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.677443][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.686468][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.705631][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.720888][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.751676][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.760627][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.784753][ T4187] device veth0_macvtap entered promiscuous mode [ 57.793936][ T4200] device veth0_macvtap entered promiscuous mode [ 57.805147][ T4200] device veth1_macvtap entered promiscuous mode [ 57.815969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.824594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.833022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.842550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.852483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.860179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.867635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.878252][ T4187] device veth1_macvtap entered promiscuous mode [ 57.910451][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.917832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.927514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.936635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.949697][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.962365][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.975134][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.004983][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.013957][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.022946][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.031802][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.040850][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.048586][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.070384][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.081006][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.093748][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.103166][ T4194] device veth0_vlan entered promiscuous mode [ 58.114690][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.125333][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.135427][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.145924][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.157279][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.172861][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.183851][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.194893][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.205401][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.216856][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.224597][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.234985][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.244099][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.259092][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.268120][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.279522][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.288661][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.297535][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.307366][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.316111][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.333004][ T4194] device veth1_vlan entered promiscuous mode [ 58.356369][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.370359][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.382583][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.393623][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.404432][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.413243][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.435734][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.445268][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.454331][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.463199][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.492856][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.502510][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.527503][ T4188] device veth0_vlan entered promiscuous mode [ 58.535335][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.543739][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.596006][ T4194] device veth0_macvtap entered promiscuous mode [ 58.605077][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.613792][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.628481][ T4188] device veth1_vlan entered promiscuous mode [ 58.648420][ T4194] device veth1_macvtap entered promiscuous mode [ 58.655591][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.663874][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.673483][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.682030][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.690748][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.699428][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.736429][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.739015][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.756923][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.757528][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.772099][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.784869][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.794871][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.805526][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.817263][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.859053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.867249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.877458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.888443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.907785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.917216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.931564][ T4188] device veth0_macvtap entered promiscuous mode [ 58.947459][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.963369][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.963707][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.969282][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.991405][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.991556][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.999325][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.017555][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.028191][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.055593][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.068003][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.096347][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.119890][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 59.130902][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 59.138226][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.175370][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.201090][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 59.233267][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.233308][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 59.258782][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.304146][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 59.750594][ T4188] device veth1_macvtap entered promiscuous mode [ 59.864683][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.907220][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.938153][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.955564][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.073198][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.108180][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.186615][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.572335][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.592601][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.606251][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.620889][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.634469][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.647632][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.663127][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.676227][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.692146][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.268747][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 61.368745][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 61.438800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 61.448790][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 61.458781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 61.468781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 61.488756][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 61.498758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 61.508758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 61.518761][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.679239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.721127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.830159][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.943255][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.040865][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.086762][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.124350][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.212301][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.332596][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.517330][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.558351][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 63.597133][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 63.606052][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 63.612220][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 63.618293][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 63.634328][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.645605][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.654454][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.664742][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.673667][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.743941][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.765533][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.015490][ T4293] device syzkaller0 entered promiscuous mode [ 64.452564][ T4281] device syzkaller0 entered promiscuous mode [ 64.891305][ T4293] tipc: Started in network mode [ 64.896366][ T4293] tipc: Node identity 2ec525ded446, cluster identity 4711 [ 64.910499][ T4293] tipc: Enabled bearer , priority 0 [ 64.917411][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.925891][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.933891][ T4288] tipc: Resetting bearer [ 64.948099][ T4288] tipc: Disabling bearer [ 64.968450][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.038249][ T4300] loop4: detected capacity change from 0 to 256 [ 65.501760][ T4299] tipc: Started in network mode [ 65.506660][ T4299] tipc: Node identity ac14140f, cluster identity 4711 [ 65.514433][ T4299] tipc: Enabled bearer , priority 10 [ 65.617253][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.617313][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.701953][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.287995][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.341648][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.349555][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.126793][ T4309] loop4: detected capacity change from 0 to 2048 [ 68.178140][ T4309] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.261007][ T4313] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.534904][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.580292][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.512591][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.525802][ T4320] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 69.548536][ T4320] Remounting filesystem read-only [ 69.549955][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.581415][ T4320] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 69.612637][ T4231] tipc: Node number set to 2886997007 [ 69.644346][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.716166][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.725944][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.770057][ T4325] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 69.915639][ T4322] loop3: detected capacity change from 0 to 256 [ 69.966569][ T4322] ======================================================= [ 69.966569][ T4322] WARNING: The mand mount option has been deprecated and [ 69.966569][ T4322] and is ignored by this kernel. Remove the mand [ 69.966569][ T4322] option from the mount to silence this warning. [ 69.966569][ T4322] ======================================================= [ 70.128088][ T4330] kAFS: bad VL server IP address [ 70.675027][ T4334] loop2: detected capacity change from 0 to 256 [ 71.193282][ T4334] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 71.210218][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.216701][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.049086][ T4346] sched: RT throttling activated [ 73.515023][ T4357] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.532731][ T4357] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.555578][ T1107] cfg80211: failed to load regulatory.db [ 73.596054][ T4358] netlink: 6 bytes leftover after parsing attributes in process `syz.1.21'. [ 76.455554][ T4370] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.025724][ T4383] loop2: detected capacity change from 0 to 512 [ 78.128542][ T4385] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.153442][ T4388] loop1: detected capacity change from 0 to 128 [ 78.189961][ T4383] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.248929][ T4388] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 78.260824][ T4383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.763067][ T4177] udevd[4177]: incorrect ext4 checksum on /dev/loop1 [ 79.937321][ T4383] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.009086][ T4383] EXT4-fs (loop2): 1 truncate cleaned up [ 80.123879][ T4409] loop0: detected capacity change from 0 to 256 [ 80.240186][ T4383] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 80.819454][ T4412] netlink: 'syz.4.32': attribute type 2 has an invalid length. [ 82.178037][ T4423] process 'syz.2.29' launched 'wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/' with NULL argv: empty string added [ 82.624000][ T4431] Zero length message leads to an empty skb [ 83.515539][ T4438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 83.901853][ T1345] libceph: connect (1)[c::]:6789 error -101 [ 83.908275][ T1345] libceph: mon0 (1)[c::]:6789 connect error [ 84.452127][ T4446] tc action pedit offset 0 out of bounds [ 84.678268][ T4433] ceph: No mds server is up or the cluster is laggy [ 84.688322][ T2303] libceph: connect (1)[c::]:6789 error -101 [ 84.726118][ T2303] libceph: mon0 (1)[c::]:6789 connect error [ 89.288509][ T4479] loop2: detected capacity change from 0 to 4096 [ 89.599221][ T4479] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 89.608967][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.526019][ T26] audit: type=1800 audit(1787677546.347:2): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.51" name="file0" dev="loop2" ino=0 res=0 errno=0 [ 91.030778][ T4495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.066037][ T4495] team0: Failed to send options change via netlink (err -105) [ 91.088884][ T4495] team0: Port device bond1 added [ 91.104584][ T154] team0: Failed to send port change of device bond1 via netlink (err -105) [ 92.087435][ T4511] device syzkaller0 entered promiscuous mode [ 93.644237][ T4522] tipc: Started in network mode [ 93.649160][ T4522] tipc: Node identity 3a70fc697495, cluster identity 4711 [ 93.664671][ T4522] tipc: Enabled bearer , priority 0 [ 93.678419][ T4518] tipc: Resetting bearer [ 93.690646][ T4531] loop4: detected capacity change from 0 to 1024 [ 93.718316][ T4526] device syzkaller0 entered promiscuous mode [ 93.725150][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 93.742022][ T4515] tipc: Resetting bearer [ 93.758069][ T4531] EXT4-fs (loop4): Ignoring removed bh option [ 93.811052][ T4515] tipc: Disabling bearer [ 93.828510][ T4531] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,bh,nodioread_nolock,,errors=continue. Quota mode: none. [ 93.850402][ T4531] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.778999][ T4546] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.61: bg 0: block 112: padding at end of block bitmap is not set [ 94.801082][ T4546] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 50 with error 28 [ 94.814175][ T4546] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.814175][ T4546] [ 94.824068][ T4546] EXT4-fs (loop4): Total free blocks count 0 [ 94.830304][ T4546] EXT4-fs (loop4): Free/Dirty block details [ 94.836443][ T4546] EXT4-fs (loop4): free_blocks=0 [ 94.841603][ T4546] EXT4-fs (loop4): dirty_blocks=64 [ 94.846967][ T4546] EXT4-fs (loop4): Block reservation details [ 94.853223][ T4546] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 95.147562][ T4551] nvmet: adding nsid 1 to subsystem testsubsys [ 95.203591][ T4556] loop1: detected capacity change from 0 to 128 [ 95.368156][ T4556] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 95.422941][ T4485] udevd[4485]: incorrect ext4 checksum on /dev/loop1 [ 97.752218][ T4574] device syzkaller0 entered promiscuous mode [ 97.792520][ T4574] 0: reclassify loop, rule prio 0, protocol 700 [ 100.804760][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 103.143427][ T4611] loop1: detected capacity change from 0 to 512 [ 104.301621][ T4611] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 104.449296][ T4611] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 104.506883][ T4611] System zones: 0-1, 15-15, 18-18, 34-34 [ 104.602895][ T4620] device syzkaller0 entered promiscuous mode [ 104.730073][ T4611] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.875079][ T4611] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 104.884638][ T4611] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.976446][ T4620] tipc: Enabled bearer , priority 0 [ 104.988806][ T4611] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 105.009385][ T4620] tipc: Resetting bearer [ 105.016547][ T4611] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.80: bad orphan inode 16 [ 105.046175][ T4611] ext4_test_bit(bit=15, block=18) = 1 [ 105.052008][ T4619] tipc: Resetting bearer [ 105.074923][ T4619] tipc: Disabling bearer [ 105.138969][ T4611] is_bad_inode(inode)=0 [ 105.143166][ T4611] NEXT_ORPHAN(inode)=0 [ 105.147228][ T4611] max_ino=32 [ 105.179089][ T4611] i_nlink=2 [ 105.182424][ T4611] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 105.355734][ T4632] loop0: detected capacity change from 0 to 256 [ 105.923951][ T4635] loop4: detected capacity change from 0 to 8 [ 106.164213][ T4637] loop3: detected capacity change from 0 to 4096 [ 107.713361][ T4637] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 108.521434][ T4637] overlayfs: upper fs does not support tmpfile. [ 108.530638][ T26] audit: type=1800 audit(1787677564.357:3): pid=4666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.98" name="idProduct" dev="configfs" ino=34443 res=0 errno=0 [ 108.583816][ T4637] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 108.734523][ T26] audit: type=1800 audit(1787677564.387:4): pid=4666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.98" name="serialnumber" dev="configfs" ino=33600 res=0 errno=0 [ 108.847925][ T4678] device syzkaller0 entered promiscuous mode [ 108.908596][ T26] audit: type=1800 audit(1787677564.387:5): pid=4666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.98" name="manufacturer" dev="configfs" ino=33601 res=0 errno=0 [ 108.952229][ T4681] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 114.400948][ T4721] loop2: detected capacity change from 0 to 4096 [ 114.429501][ T4721] ntfs3: Unknown parameter 'ntfs3' [ 115.451109][ T4730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 116.547026][ T4744] loop2: detected capacity change from 0 to 8192 [ 118.155059][ T4757] loop3: detected capacity change from 0 to 2048 [ 118.278026][ T4757] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.541384][ T4782] bonding: unable to delete non-existent b [ 122.352026][ T4788] device ip6gre1 entered promiscuous mode [ 123.540337][ T4809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.135'. [ 125.659872][ T4829] loop1: detected capacity change from 0 to 32768 [ 125.775519][ T4829] XFS (loop1): Mounting V5 Filesystem [ 125.880559][ T4825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.935393][ T4829] XFS (loop1): Ending clean mount [ 128.659755][ T4869] loop2: detected capacity change from 0 to 32768 [ 128.714053][ T4194] XFS (loop1): Unmounting Filesystem [ 128.722789][ T4871] device syzkaller0 entered promiscuous mode [ 128.907023][ T4869] XFS (loop2): Mounting V5 Filesystem [ 129.318602][ T4869] XFS (loop2): Ending clean mount [ 130.483393][ T4188] XFS (loop2): Unmounting Filesystem [ 132.811319][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.817726][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.423841][ T4903] using random self ethernet address [ 133.523938][ T4915] loop0: detected capacity change from 0 to 256 [ 134.546422][ T4915] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 134.758264][ T26] audit: type=1800 audit(1787677590.577:6): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.159" name="file1" dev="loop0" ino=1048591 res=0 errno=0 [ 134.804171][ T4914] attempt to access beyond end of device [ 134.804171][ T4914] loop0: rw=0, want=304, limit=256 [ 134.833213][ T4903] using random host ethernet address [ 135.294434][ T4922] using random self ethernet address [ 135.302993][ T4922] using random host ethernet address [ 140.457906][ T4949] loop1: detected capacity change from 0 to 8192 [ 142.808574][ T4967] device syzkaller0 entered promiscuous mode [ 142.880263][ T4230] libceph: connect (1)[c::]:6789 error -101 [ 142.886944][ T4230] libceph: mon0 (1)[c::]:6789 connect error [ 142.926402][ T4968] ceph: No mds server is up or the cluster is laggy [ 142.955015][ T4230] libceph: connect (1)[c::]:6789 error -101 [ 142.963075][ T4230] libceph: mon0 (1)[c::]:6789 connect error [ 143.144487][ T4975] loop2: detected capacity change from 0 to 256 [ 143.191968][ T4975] exfat: Deprecated parameter 'utf8' [ 143.197507][ T4975] exfat: Deprecated parameter 'namecase' [ 143.203488][ T4975] exfat: Deprecated parameter 'namecase' [ 143.209402][ T4975] exfat: Deprecated parameter 'utf8' [ 143.237793][ T4975] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 143.381459][ T4230] libceph: connect (1)[c::]:6789 error -101 [ 144.092890][ T4230] libceph: mon0 (1)[c::]:6789 connect error [ 145.365876][ T4986] syz.3.174 (4986): attempted to duplicate a private mapping with mremap. This is not supported. [ 145.878967][ T4993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.172'. [ 146.242037][ T4997] loop2: detected capacity change from 0 to 256 [ 146.325938][ T4997] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 147.133072][ T5001] loop1: detected capacity change from 0 to 2048 [ 147.166828][ T4997] attempt to access beyond end of device [ 147.166828][ T4997] loop2: rw=524288, want=34359738496, limit=256 [ 147.193672][ T4997] attempt to access beyond end of device [ 147.193672][ T4997] loop2: rw=0, want=34359738496, limit=256 [ 147.215423][ T26] audit: type=1800 audit(1787677603.037:7): pid=4997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.182" name="file1" dev="loop2" ino=1048593 res=0 errno=0 [ 147.399821][ T5013] loop3: detected capacity change from 0 to 4096 [ 147.434105][ T5001] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 147.471405][ T5013] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 147.503312][ T5013] ntfs: (device loop3): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 147.512942][ T5013] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 147.561751][ T5013] ntfs: volume version 3.1. [ 147.573094][ T5013] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is resident. [ 147.583252][ T5013] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 147.596770][ T5013] ntfs: (device loop3): load_system_files(): Failed to load root directory. [ 147.608142][ T5013] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 148.223743][ T5018] loop3: detected capacity change from 0 to 128 [ 149.610283][ T5028] batman_adv: batadv0: Adding interface: veth0 [ 149.723798][ T5028] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.055415][ T5028] batman_adv: batadv0: Interface activated: veth0 [ 150.105239][ T5030] batman_adv: batadv0: Interface deactivated: veth0 [ 150.196379][ T5030] batman_adv: batadv0: Removing interface: veth0 [ 150.481272][ T4230] Bluetooth: hci4: command 0x0405 tx timeout [ 151.309710][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.317142][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.356365][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.364835][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.480836][ T5033] device syzkaller0 entered promiscuous mode [ 151.985442][ T21] libceph: connect (1)[c::]:6789 error -101 [ 152.279610][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 152.288156][ T5036] ceph: No mds server is up or the cluster is laggy [ 152.377910][ T5043] loop4: detected capacity change from 0 to 256 [ 152.421223][ T5043] exfat: Deprecated parameter 'utf8' [ 152.426769][ T5043] exfat: Deprecated parameter 'namecase' [ 152.432830][ T5043] exfat: Deprecated parameter 'namecase' [ 152.438559][ T5043] exfat: Deprecated parameter 'utf8' [ 152.515714][ T5043] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 153.297190][ T5052] loop1: detected capacity change from 0 to 256 [ 153.452800][ T146] Bluetooth: hci4: link tx timeout [ 153.458924][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 153.468132][ T146] Bluetooth: hci4: link tx timeout [ 153.473922][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.482754][ T146] Bluetooth: hci4: link tx timeout [ 153.488093][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 153.496478][ T146] Bluetooth: hci4: link tx timeout [ 153.501798][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.509865][ T146] Bluetooth: hci4: link tx timeout [ 153.515570][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 153.523318][ T146] Bluetooth: hci4: link tx timeout [ 153.528454][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.637017][ T146] Bluetooth: hci4: link tx timeout [ 153.642251][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 153.650095][ T146] Bluetooth: hci4: link tx timeout [ 153.655194][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.663166][ T146] Bluetooth: hci4: link tx timeout [ 153.668364][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 153.676370][ T146] Bluetooth: hci4: link tx timeout [ 153.681770][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.689747][ T146] Bluetooth: hci4: link tx timeout [ 153.695049][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 153.703005][ T146] Bluetooth: hci4: link tx timeout [ 153.708099][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.019728][ T5063] loop0: detected capacity change from 0 to 4096 [ 154.032128][ T5063] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 154.734196][ T5063] ntfs: (device loop0): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 154.743757][ T5063] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 154.775646][ T5063] ntfs: volume version 3.1. [ 154.781489][ T5063] ntfs: (device loop0): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is resident. [ 154.791569][ T5063] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 154.804590][ T5063] ntfs: (device loop0): load_system_files(): Failed to load root directory. [ 154.813666][ T5063] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 155.630057][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 155.747691][ T5070] UBIFS error (pid: 5070): cannot open "./file0", error -22 [ 155.751410][ T5070] loop1: detected capacity change from 0 to 256 [ 155.775949][ T5073] loop3: detected capacity change from 0 to 512 [ 157.091264][ T5087] UBIFS error (pid: 5087): cannot open "./file0", error -22 [ 157.094244][ T5087] loop4: detected capacity change from 0 to 256 [ 157.110605][ T5073] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 157.133681][ T5086] UBIFS error (pid: 5086): cannot open "./file0", error -22 [ 157.148106][ T5073] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 157.187418][ T5086] loop0: detected capacity change from 0 to 256 [ 157.258908][ T5073] System zones: 0-1, 15-15, 18-18, 34-34 [ 157.265776][ T5073] EXT4-fs (loop3): orphan cleanup on readonly fs [ 157.310296][ T5073] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 157.357998][ T5073] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.403063][ T5073] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 157.428417][ T5073] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.200: bad orphan inode 16 [ 157.492386][ T5073] ext4_test_bit(bit=15, block=18) = 1 [ 157.497814][ T5073] is_bad_inode(inode)=0 [ 157.515078][ T5073] NEXT_ORPHAN(inode)=0 [ 157.524061][ T5073] max_ino=32 [ 157.524326][ T5099] UBIFS error (pid: 5099): cannot open "./file0", error -22 [ 157.533704][ T5073] i_nlink=2 [ 157.547038][ T5073] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 157.610441][ T5099] loop2: detected capacity change from 0 to 256 [ 157.766865][ T24] Bluetooth: hci4: command 0x0406 tx timeout [ 157.928757][ T5107] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 158.418744][ T5109] loop0: detected capacity change from 0 to 256 [ 159.389257][ T5109] exfat: Deprecated parameter 'utf8' [ 159.394603][ T5109] exfat: Deprecated parameter 'namecase' [ 159.400306][ T5109] exfat: Deprecated parameter 'namecase' [ 159.405921][ T5109] exfat: Deprecated parameter 'utf8' [ 159.463368][ T5109] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 159.564185][ T5123] UBIFS error (pid: 5123): cannot open "./file0", error -22 [ 159.567083][ T5123] loop1: detected capacity change from 0 to 256 [ 159.618991][ T5120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.209'. [ 160.916589][ T5141] loop1: detected capacity change from 0 to 4096 [ 160.974149][ T5144] batman_adv: batadv0: Adding interface: veth0 [ 160.979816][ T5141] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 160.994835][ T5141] ntfs: (device loop1): ntfs_read_inode_mount(): Incorrect mft record size 65600 in superblock, should be 2048. [ 161.006943][ T5141] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 161.015931][ T5141] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 161.083955][ T5144] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.122743][ T5144] batman_adv: batadv0: Interface activated: veth0 [ 161.148515][ T5145] batman_adv: batadv0: Interface deactivated: veth0 [ 161.180767][ T5145] batman_adv: batadv0: Removing interface: veth0 [ 161.190865][ T5145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.198484][ T5145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.206512][ T5145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.214594][ T5145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.425849][ T5156] UBIFS error (pid: 5156): cannot open "./file0", error -22 [ 162.617780][ T5156] loop3: detected capacity change from 0 to 256 [ 162.664900][ T5160] loop2: detected capacity change from 0 to 512 [ 162.862400][ T5160] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 163.502020][ T5160] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 163.606789][ T5160] System zones: 0-1, 15-15, 18-18, 34-34 [ 163.615876][ T5160] EXT4-fs (loop2): orphan cleanup on readonly fs [ 163.623697][ T5160] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 163.633305][ T5160] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 163.648011][ T5160] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 163.666794][ T5160] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.221: bad orphan inode 16 [ 165.291288][ T5160] ext4_test_bit(bit=15, block=18) = 1 [ 165.296792][ T5160] is_bad_inode(inode)=0 [ 165.301797][ T5160] NEXT_ORPHAN(inode)=0 [ 165.305882][ T5160] max_ino=32 [ 165.309721][ T5160] i_nlink=2 [ 165.312987][ T5160] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 168.189841][ T5194] loop1: detected capacity change from 0 to 256 [ 168.231220][ T5194] exfat: Deprecated parameter 'utf8' [ 168.236751][ T5194] exfat: Deprecated parameter 'namecase' [ 168.242779][ T5194] exfat: Deprecated parameter 'namecase' [ 168.248495][ T5194] exfat: Deprecated parameter 'utf8' [ 168.274528][ T5194] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 168.822553][ T5197] UBIFS error (pid: 5197): cannot open "./file0", error -22 [ 168.928111][ T5197] loop2: detected capacity change from 0 to 256 [ 169.464878][ T5202] UBIFS error (pid: 5202): cannot open "./file0", error -22 [ 169.475021][ T5202] loop0: detected capacity change from 0 to 256 [ 169.823556][ T5215] UBIFS error (pid: 5215): cannot open "./file0", error -22 [ 169.833623][ T5215] loop3: detected capacity change from 0 to 256 [ 170.273820][ T5224] loop4: detected capacity change from 0 to 4096 [ 170.350094][ T5224] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 170.364672][ T5224] ntfs: (device loop4): ntfs_read_inode_mount(): Incorrect mft record size 16777472 in superblock, should be 2048. [ 170.376861][ T5224] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 170.385892][ T5224] ntfs: (device loop4): ntfs_fill_super(): Failed to load essential metadata. [ 170.448466][ T5228] UBIFS error (pid: 5228): cannot open "./file0", error -22 [ 170.483152][ T5228] loop0: detected capacity change from 0 to 256 [ 170.559433][ T4228] libceph: connect (1)[c::]:6789 error -101 [ 170.593163][ T4228] libceph: mon0 (1)[c::]:6789 connect error [ 170.600398][ T5232] ceph: No mds server is up or the cluster is laggy [ 171.137804][ T4265] libceph: connect (1)[c::]:6789 error -101 [ 171.192164][ T4265] libceph: mon0 (1)[c::]:6789 connect error [ 171.647587][ T5243] UBIFS error (pid: 5243): cannot open "./file0", error -22 [ 171.654696][ T5243] loop4: detected capacity change from 0 to 256 [ 171.702314][ T4849] libceph: connect (1)[c::]:6789 error -101 [ 171.708339][ T4849] libceph: mon0 (1)[c::]:6789 connect error [ 171.742229][ T5244] ceph: No mds server is up or the cluster is laggy [ 171.812682][ T5251] UBIFS error (pid: 5251): cannot open "./file0", error -22 [ 171.865189][ T5251] loop3: detected capacity change from 0 to 256 [ 172.038759][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 173.915195][ T5260] device syzkaller0 entered promiscuous mode [ 173.956353][ T5270] UBIFS error (pid: 5270): cannot open "./file0", error -22 [ 174.534752][ T5270] loop3: detected capacity change from 0 to 256 [ 175.698371][ T1345] Bluetooth: hci1: command 0x0406 tx timeout [ 175.704516][ T1345] Bluetooth: hci0: command 0x0406 tx timeout [ 175.710933][ T1345] Bluetooth: hci2: command 0x0406 tx timeout [ 175.716959][ T1345] Bluetooth: hci3: command 0x0406 tx timeout [ 176.593237][ T5283] netlink: 104 bytes leftover after parsing attributes in process `syz.0.254'. [ 176.883958][ T5294] UBIFS error (pid: 5294): cannot open "./file0", error -22 [ 177.421861][ T5294] loop3: detected capacity change from 0 to 256 [ 178.023439][ T5307] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 178.248372][ T5309] loop0: detected capacity change from 0 to 128 [ 178.301823][ T5309] EXT4-fs (loop0): Test dummy encryption mode enabled [ 178.484399][ T5309] EXT4-fs (loop0): Test dummy encryption mode enabled [ 178.641716][ T5309] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 178.815995][ T5309] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.892211][ T4265] libceph: connect (1)[c::]:6789 error -101 [ 179.931049][ T4265] libceph: mon0 (1)[c::]:6789 connect error [ 179.998889][ T5329] UBIFS error (pid: 5329): cannot open "./file0", error -22 [ 180.013040][ T5316] ceph: No mds server is up or the cluster is laggy [ 180.079115][ T5329] loop4: detected capacity change from 0 to 256 [ 180.271522][ T4265] libceph: connect (1)[c::]:6789 error -101 [ 180.301027][ T4265] libceph: mon0 (1)[c::]:6789 connect error [ 180.479316][ T5333] loop3: detected capacity change from 0 to 128 [ 180.592785][ T5333] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 180.601203][ T5337] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 181.848151][ T4485] udevd[4485]: incorrect ext4 checksum on /dev/loop3 [ 184.260440][ T5366] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.972208][ T5367] netlink: 256 bytes leftover after parsing attributes in process `syz.2.275'. [ 186.981872][ T5367] unsupported nlmsg_type 40 [ 187.321487][ T5379] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 188.452851][ T5391] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.887437][ T5402] UBIFS error (pid: 5402): cannot open "./file0", error -22 [ 190.983277][ T5402] loop1: detected capacity change from 0 to 256 [ 192.918932][ T5418] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 192.973611][ T5419] UBIFS error (pid: 5419): cannot open "./file0", error -22 [ 193.092841][ T5419] loop2: detected capacity change from 0 to 256 [ 193.895654][ T5424] UBIFS error (pid: 5424): cannot open "./file0", error -22 [ 193.998972][ T5424] loop1: detected capacity change from 0 to 256 [ 194.493548][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.500891][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.671112][ T5447] netlink: 256 bytes leftover after parsing attributes in process `syz.1.291'. [ 197.695765][ T5466] tipc: Enabling of bearer rejected, failed to enable media [ 197.741131][ T5459] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 198.756182][ T5473] UBIFS error (pid: 5473): cannot open "./file0", error -22 [ 198.762281][ T5473] loop2: detected capacity change from 0 to 256 [ 199.196719][ T5484] loop4: detected capacity change from 0 to 128 [ 199.429853][ T5484] FAT-fs (loop4): Directory bread(block 414) failed [ 199.436885][ T5484] FAT-fs (loop4): Directory bread(block 415) failed [ 199.443670][ T5484] FAT-fs (loop4): Directory bread(block 416) failed [ 199.450416][ T5484] FAT-fs (loop4): Directory bread(block 417) failed [ 199.457092][ T5484] FAT-fs (loop4): Directory bread(block 418) failed [ 199.463810][ T5484] FAT-fs (loop4): Directory bread(block 419) failed [ 199.470541][ T5484] FAT-fs (loop4): Directory bread(block 420) failed [ 199.477337][ T5484] FAT-fs (loop4): Directory bread(block 421) failed [ 199.731809][ T5486] UBIFS error (pid: 5486): cannot open "./file0", error -22 [ 199.735005][ T5486] loop2: detected capacity change from 0 to 256 [ 201.330116][ T5507] fuse: Unknown parameter 'group_i00000000000000000000' [ 201.776752][ T5513] netlink: 256 bytes leftover after parsing attributes in process `syz.4.309'. [ 203.261464][ T5523] UBIFS error (pid: 5523): cannot open "./file0", error -22 [ 203.264579][ T5523] loop4: detected capacity change from 0 to 256 [ 203.354750][ T5518] loop1: detected capacity change from 0 to 32768 [ 204.338467][ T5501] loop3: detected capacity change from 0 to 8 [ 204.380729][ T5501] SQUASHFS error: lzo decompression failed, data probably corrupt [ 204.388971][ T5501] SQUASHFS error: Failed to read block 0x91: -5 [ 204.395221][ T5501] SQUASHFS error: Unable to read metadata cache entry [8f] [ 204.402438][ T5501] SQUASHFS error: Unable to read inode 0x11f [ 204.597748][ T5518] XFS (loop1): Mounting V5 Filesystem [ 204.853162][ T5536] UBIFS error (pid: 5536): cannot open "./file0", error -22 [ 204.885510][ T5536] loop2: detected capacity change from 0 to 256 [ 205.052944][ T5541] UBIFS error (pid: 5541): cannot open "./file0", error -22 [ 205.103317][ T5518] XFS (loop1): Ending clean mount [ 205.132472][ T5518] XFS (loop1): Quotacheck needed: Please wait. [ 205.291982][ T5541] loop0: detected capacity change from 0 to 256 [ 205.424542][ T5518] XFS (loop1): Quotacheck: Done. [ 206.594755][ T4194] XFS (loop1): Unmounting Filesystem [ 208.377299][ T5570] netlink: 256 bytes leftover after parsing attributes in process `syz.0.325'. [ 210.606966][ T5582] loop0: detected capacity change from 0 to 2048 [ 210.708378][ T5584] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.754996][ T5582] attempt to access beyond end of device [ 210.754996][ T5582] loop0: rw=0, want=2198922592330, limit=2048 [ 210.767049][ T5582] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 211.461177][ T5590] netlink: 'syz.4.332': attribute type 29 has an invalid length. [ 211.498804][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 211.861499][ T5590] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 212.572229][ T5600] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 212.581269][ T5600] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 212.726842][ T5599] UBIFS error (pid: 5599): cannot open "./file0", error -22 [ 212.945196][ T5599] loop0: detected capacity change from 0 to 256 [ 213.981435][ T5609] loop1: detected capacity change from 0 to 1764 [ 215.793799][ T5620] loop4: detected capacity change from 0 to 256 [ 218.641301][ T5639] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 218.798734][ T4277] Bluetooth: hci4: command 0x0405 tx timeout [ 219.815195][ T5649] UBIFS error (pid: 5649): cannot open "./file0", error -22 [ 219.818259][ T5649] loop0: detected capacity change from 0 to 256 [ 220.179975][ T5656] netlink: 256 bytes leftover after parsing attributes in process `syz.3.339'. [ 220.678306][ T5660] device syzkaller0 entered promiscuous mode [ 220.724894][ T5660] tipc: Enabled bearer , priority 0 [ 220.732351][ T5663] loop0: detected capacity change from 0 to 512 [ 220.785565][ T5660] tipc: Resetting bearer [ 220.813892][ T5658] tipc: Resetting bearer [ 220.833368][ T5665] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.855817][ T5665] hpfs: hpfs_map_sector(): read error [ 220.869443][ T5658] tipc: Disabling bearer [ 223.352454][ T5663] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 223.413025][ T5663] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.032071][ T5700] UBIFS error (pid: 5700): cannot open "./file0", error -22 [ 225.042574][ T5700] loop3: detected capacity change from 0 to 256 [ 228.560734][ T5734] CIFS: Attempting to mount \\127.0.0.1\share [ 229.527719][ T5734] CIFS: VFS: Error connecting to socket. Aborting operation. [ 229.551213][ T5734] CIFS: VFS: cifs_mount failed w/return code = -4 [ 231.940371][ T5766] UBIFS error (pid: 5766): cannot open "./file0", error -22 [ 232.044380][ T5766] loop2: detected capacity change from 0 to 256 [ 232.990747][ T5776] bridge0: port 3(netdevsim0) entered blocking state [ 233.019570][ T5776] bridge0: port 3(netdevsim0) entered disabled state [ 233.053275][ T5776] device netdevsim0 entered promiscuous mode [ 233.128168][ T5776] bridge0: port 3(netdevsim0) entered blocking state [ 233.135233][ T5776] bridge0: port 3(netdevsim0) entered forwarding state [ 233.332084][ T5792] UBIFS error (pid: 5792): cannot open "./file0", error -22 [ 233.434585][ T5781] netlink: 'syz.4.378': attribute type 10 has an invalid length. [ 233.553898][ T5781] bridge0: port 3(netdevsim0) entered disabled state [ 233.561118][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.569833][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.100281][ T5781] bridge0: port 3(netdevsim0) entered blocking state [ 234.107195][ T5781] bridge0: port 3(netdevsim0) entered forwarding state [ 234.114750][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.121974][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.129703][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.136962][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.268354][ T5781] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 234.374648][ T5781] syz.4.378 (5781) used greatest stack depth: 20688 bytes left [ 234.923338][ T5808] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 237.549185][ T5825] loop3: detected capacity change from 0 to 128 [ 237.560259][ T5826] UBIFS error (pid: 5826): cannot open "./file0", error -22 [ 237.563332][ T5826] loop2: detected capacity change from 0 to 256 [ 237.940954][ T5832] UBIFS error (pid: 5832): cannot open "./file0", error -22 [ 238.976321][ T5832] loop0: detected capacity change from 0 to 256 [ 239.142032][ T5842] UBIFS error (pid: 5842): cannot open "./file0", error -22 [ 239.147562][ T5839] UBIFS error (pid: 5839): cannot open "./file0", error -22 [ 240.379127][ T5853] netlink: 256 bytes leftover after parsing attributes in process `syz.3.400'. [ 240.850573][ T5861] overlayfs: missing 'workdir' [ 241.672028][ T5850] loop0: detected capacity change from 0 to 4096 [ 241.741651][ T5867] loop3: detected capacity change from 0 to 16 [ 241.867597][ T5867] erofs: (device loop3): mounted with root inode @ nid 36. [ 241.976269][ T5859] loop4: detected capacity change from 0 to 1024 [ 241.980442][ T5850] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 242.175973][ T5860] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 242.489949][ T5876] xt_hashlimit: max too large, truncated to 1048576 [ 243.120484][ T4187] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 245.541102][ T5890] UBIFS error (pid: 5890): cannot open "./file0", error -22 [ 247.141330][ T5888] loop3: detected capacity change from 0 to 256 [ 248.550872][ T5900] configfs-gadget gadget: uvc: uvc_function_bind() [ 248.558124][ T5900] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 248.647745][ T5905] ubi0: attaching mtd0 [ 248.661251][ T5905] ubi0: scanning is finished [ 248.665942][ T5905] ubi0: empty MTD device detected [ 249.171459][ T5900] udc dummy_udc.0: failed to start g1: -22 [ 249.192268][ T5905] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 249.200011][ T5905] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 249.209344][ T5905] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 249.251919][ T5905] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 249.260125][ T5905] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 249.266911][ T5905] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 249.274918][ T5905] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1483365272 [ 249.284948][ T5905] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 249.308824][ T5908] ubi0: background thread "ubi_bgt0d" started, PID 5908 [ 250.740116][ T5910] Bluetooth: hci0: unsupported parameter 255 [ 250.760532][ T5910] Bluetooth: hci0: unsupported parameter 255 [ 251.092084][ T5929] UBIFS error (pid: 5929): cannot open "./file0", error -22 [ 251.095119][ T5929] loop1: detected capacity change from 0 to 256 [ 252.376181][ T5937] UBIFS error (pid: 5937): cannot open "./file0", error -22 [ 252.391533][ T5937] loop4: detected capacity change from 0 to 256 [ 253.737905][ T5942] loop3: detected capacity change from 0 to 32768 [ 254.487313][ T5952] loop1: detected capacity change from 0 to 128 [ 255.087583][ T5954] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5954] [ 255.117802][ T4199] Bluetooth: Wrong link type (-22) [ 256.608363][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.614759][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.836025][ T5995] UBIFS error (pid: 5995): cannot open "./file0", error -22 [ 262.978714][ T5995] loop2: detected capacity change from 0 to 256 [ 264.399990][ T5999] syz.3.429 uses obsolete (PF_INET,SOCK_PACKET) [ 266.243089][ T6013] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 266.524594][ T6014] configfs-gadget gadget: uvc: uvc_function_bind() [ 266.545848][ T6014] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 266.562699][ T6014] udc dummy_udc.0: failed to start g1: -22 [ 271.149446][ T6037] Need at least one configuration in g_uac2. [ 271.849841][ T6037] udc usbip-vudc.0: failed to start g_uac2: -22 [ 274.045312][ T6064] loop2: detected capacity change from 0 to 512 [ 274.507608][ T6064] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 274.508096][ T6064] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.312194][ T6080] UBIFS error (pid: 6080): cannot open "./file0", error -22 [ 276.561411][ T6096] loop0: detected capacity change from 0 to 8 [ 278.353339][ T6096] SQUASHFS error: Unable to read inode 0x11f [ 282.955396][ T6129] loop3: detected capacity change from 0 to 128 [ 283.247596][ T6128] CIFS: Attempting to mount \\127.0.0.1\share [ 283.293657][ T6128] CIFS: VFS: Error connecting to socket. Aborting operation. [ 283.361087][ T6128] CIFS: VFS: cifs_mount failed w/return code = -4 [ 283.439037][ T6132] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4196] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6132] [ 283.465778][ T146] Bluetooth: Wrong link type (-22) [ 283.995498][ T6137] loop2: detected capacity change from 0 to 256 [ 284.101800][ T6140] using random self ethernet address [ 284.107241][ T6140] using random host ethernet address [ 284.148149][ T6138] loop4: detected capacity change from 0 to 512 [ 285.468966][ T6141] netlink: 'syz.1.469': attribute type 3 has an invalid length. [ 285.775308][ T26] audit: type=1800 audit(1787677741.597:8): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.474" name="cluster_name" dev="configfs" ino=38829 res=0 errno=0 [ 285.800718][ T6138] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 285.887074][ T6138] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.938806][ T26] audit: type=1800 audit(1787677741.597:9): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.474" name="toss_secs" dev="configfs" ino=38832 res=0 errno=0 [ 287.057139][ T26] audit: type=1800 audit(1787677741.597:10): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.474" name="scan_secs" dev="configfs" ino=38833 res=0 errno=0 [ 287.537056][ T6169] "syz.4.477" (6169) uses obsolete ecb(arc4) skcipher [ 287.566804][ T6169] syz.4.477 sent an empty control message without MSG_MORE. [ 289.023218][ T6178] loop3: detected capacity change from 0 to 256 [ 289.326150][ T6183] mmap: syz.1.473 (6183) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 289.640143][ T6187] attempt to access beyond end of device [ 289.640143][ T6187] loop3: rw=524288, want=276, limit=256 [ 289.651974][ T6187] attempt to access beyond end of device [ 289.651974][ T6187] loop3: rw=0, want=264, limit=256 [ 289.671996][ T6187] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 289.990266][ T26] audit: type=1800 audit(1787677745.497:11): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.482" name="file2" dev="loop3" ino=1048635 res=0 errno=0 [ 291.201801][ T6181] CIFS: Attempting to mount \\127.0.0.1\share [ 291.400739][ T6199] ipt_ECN: cannot use operation on non-tcp rule [ 291.434280][ T6199] loop1: detected capacity change from 0 to 512 [ 293.497543][ T6201] loop3: detected capacity change from 0 to 65536 [ 293.599513][ T6199] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 293.613732][ T6199] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 293.641037][ T6199] EXT4-fs (loop1): 1 truncate cleaned up [ 293.646857][ T6199] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 293.764460][ T6201] XFS (loop3): Mounting V5 Filesystem [ 293.782402][ T6181] CIFS: VFS: Could not allocate crypto cmac(aes) [ 293.841502][ T6181] CIFS: VFS: cifs_mount failed w/return code = -512 [ 294.051802][ T6201] XFS (loop3): Ending clean mount [ 294.061564][ T6217] UBIFS error (pid: 6217): cannot open "./file0", error -22 [ 294.312147][ T4196] XFS (loop3): Unmounting Filesystem [ 297.092324][ T6239] loop4: detected capacity change from 0 to 64 [ 297.137350][ T6239] MINIX-fs: bad superblock [ 297.809716][ T6244] loop4: detected capacity change from 0 to 256 [ 300.805696][ T6257] block device autoloading is deprecated and will be removed. [ 300.814133][ T6257] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 301.211013][ T6261] UBIFS error (pid: 6261): cannot open "./file0", error -22 [ 301.215901][ T6261] loop1: detected capacity change from 0 to 256 [ 303.267011][ T6277] UBIFS error (pid: 6277): cannot open "./file0", error -22 [ 303.334814][ T6275] loop1: detected capacity change from 0 to 256 [ 303.945058][ T6284] loop3: detected capacity change from 0 to 512 [ 304.013840][ T6290] configfs-gadget gadget: Error: no playback and capture channels [ 304.022305][ T6290] udc usbip-vudc.0: failed to start g_uac2: -22 [ 304.071046][ T6284] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 304.871014][ T6284] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.176314][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 306.186598][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 306.194082][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.204150][ T146] Workqueue: hci2 hci_rx_work [ 306.208835][ T146] Call Trace: [ 306.212123][ T146] [ 306.215057][ T146] dump_stack_lvl+0x188/0x250 [ 306.219719][ T146] ? show_regs_print_info+0x20/0x20 [ 306.224916][ T146] ? load_image+0x410/0x410 [ 306.229430][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 306.234543][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 306.239217][ T146] ? kthread+0x42e/0x520 [ 306.243499][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 306.248790][ T146] kobject_add_internal+0x5ba/0xcd0 [ 306.253977][ T146] kobject_add+0x160/0x230 [ 306.258377][ T146] ? kobject_init+0x1c0/0x1c0 [ 306.263033][ T146] ? __raw_spin_lock_init+0x41/0x100 [ 306.268296][ T146] ? klist_children_get+0x50/0x50 [ 306.273298][ T146] ? get_device_parent+0x121/0x3e0 [ 306.278390][ T146] device_add+0x470/0x1050 [ 306.282809][ T146] ? device_initialize+0x2a5/0x4d0 [ 306.287910][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 306.292919][ T146] le_conn_complete_evt+0xc2e/0x14d0 [ 306.298280][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 306.303400][ T146] ? __mutex_trylock_common+0x15c/0x260 [ 306.308930][ T146] hci_le_meta_evt+0x285/0x3ca0 [ 306.313785][ T146] ? hci_event_packet+0x363/0x1310 [ 306.318894][ T146] ? __lock_acquire+0x7b50/0x7b50 [ 306.323903][ T146] ? hci_remote_host_features_evt+0x240/0x240 [ 306.329950][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 306.335595][ T146] ? mark_lock+0x94/0x320 [ 306.339911][ T146] ? mutex_unlock+0x10/0x10 [ 306.344428][ T146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 306.350410][ T146] ? lock_chain_count+0x20/0x20 [ 306.355252][ T146] ? __rwlock_init+0x140/0x140 [ 306.360014][ T146] hci_event_packet+0xe0b/0x1310 [ 306.364937][ T146] ? _raw_spin_unlock+0x40/0x40 [ 306.369765][ T146] ? rcu_lock_release+0x20/0x20 [ 306.374596][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 306.379772][ T146] hci_rx_work+0x255/0xa10 [ 306.384175][ T146] process_one_work+0x867/0xff0 [ 306.389025][ T146] ? worker_detach_from_pool+0x240/0x240 [ 306.394656][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 306.399925][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 306.405023][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 306.410549][ T146] ? wq_worker_running+0x97/0x170 [ 306.415559][ T146] worker_thread+0xad7/0x12a0 [ 306.420246][ T146] kthread+0x42e/0x520 [ 306.424301][ T146] ? rcu_lock_release+0x20/0x20 [ 306.429138][ T146] ? kthread_blkcg+0xd0/0xd0 [ 306.433719][ T146] ret_from_fork+0x1f/0x30 [ 306.438153][ T146] [ 306.450063][ T146] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 306.463383][ T146] Bluetooth: hci2: failed to register connection device [ 306.596286][ T6308] netlink: 'syz.1.511': attribute type 2 has an invalid length. [ 306.727364][ T6311] loop1: detected capacity change from 0 to 256 [ 307.973715][ T6326] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 307.998867][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 308.007972][ T146] Bluetooth: hci5: sending frame failed (-49) [ 310.267342][ T6335] tipc: Started in network mode [ 310.272413][ T6335] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 310.288094][ T6335] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 310.298271][ T6335] tipc: Enabled bearer , priority 10 [ 310.324679][ T6335] loop1: detected capacity change from 0 to 256 [ 310.362380][ T6339] tmpfs: Unknown parameter 'gid0x000000000000ee01' [ 311.053716][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 311.066904][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 311.139287][ T6335] exfat: Deprecated parameter 'utf8' [ 311.144625][ T6335] exfat: Unexpected value for 'utf8' [ 311.771255][ T21] tipc: Node number set to 1 [ 312.734382][ T6351] loop3: detected capacity change from 0 to 256 [ 315.470187][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 315.683682][ T6375] loop4: detected capacity change from 0 to 256 [ 315.830432][ T4265] Bluetooth: hci5: command 0x1009 tx timeout [ 316.964676][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.971156][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.234250][ T6398] loop3: detected capacity change from 0 to 128 [ 318.300584][ T6393] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 318.309462][ T6398] EXT4-fs (loop3): Test dummy encryption mode enabled [ 318.316269][ T6398] EXT4-fs (loop3): Test dummy encryption mode enabled [ 319.322349][ T6410] loop1: detected capacity change from 0 to 256 [ 319.421367][ T6412] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 319.459820][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 320.306477][ T6398] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 320.450812][ T6422] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 321.129506][ T6412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.534701][ T6398] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 322.202446][ T6431] loop4: detected capacity change from 0 to 256 [ 322.774912][ T6438] futex_wake_op: syz.0.545 tries to shift op by 36; fix this program [ 323.391324][ T6442] loop3: detected capacity change from 0 to 256 [ 323.602364][ T6445] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 323.654839][ T6449] se_device not configured yet, cannot port link [ 324.822967][ T6467] UBIFS error (pid: 6467): cannot open "./file0", error -22 [ 324.825918][ T6467] loop1: detected capacity change from 0 to 256 [ 326.090700][ T6475] [ 326.093069][ T6475] ====================================================== [ 326.100254][ T6475] WARNING: possible circular locking dependency detected [ 326.107283][ T6475] syzkaller #0 Not tainted [ 326.111701][ T6475] ------------------------------------------------------ [ 326.118718][ T6475] syz.3.558/6475 is trying to acquire lock: [ 326.124602][ T6475] ffffffff8cece4d0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_frame_w_width_store+0x110/0x370 [ 326.135221][ T6475] [ 326.135221][ T6475] but task is already holding lock: [ 326.142583][ T6475] ffff888023a41278 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x20e/0x400 [ 326.151904][ T6475] [ 326.151904][ T6475] which lock already depends on the new lock. [ 326.151904][ T6475] [ 326.162476][ T6475] [ 326.162476][ T6475] the existing dependency chain (in reverse order) is: [ 326.171573][ T6475] [ 326.171573][ T6475] -> #3 (&p->frag_sem){++++}-{3:3}: [ 326.178967][ T6475] down_write_killable+0x46/0x90 [ 326.184525][ T6475] configfs_rmdir+0x3e0/0x980 [ 326.189739][ T6475] vfs_rmdir+0x19d/0x410 [ 326.194522][ T6475] do_rmdir+0x27f/0x710 [ 326.199199][ T6475] __x64_sys_unlinkat+0xc0/0xe0 [ 326.204571][ T6475] do_syscall_64+0x4c/0xa0 [ 326.209594][ T6475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.216014][ T6475] [ 326.216014][ T6475] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 326.224722][ T6475] down_write+0x38/0x60 [ 326.229403][ T6475] configfs_depend_item_unlocked+0x14f/0x430 [ 326.235909][ T6475] usbg_make_tpg+0x1f3/0x580 [ 326.241025][ T6475] target_fabric_make_tpg+0xa0/0x6d0 [ 326.246843][ T6475] configfs_mkdir+0x511/0x9e0 [ 326.252049][ T6475] vfs_mkdir+0x386/0x570 [ 326.256800][ T6475] do_mkdirat+0x1dd/0x5c0 [ 326.261636][ T6475] __x64_sys_mkdir+0x6a/0x80 [ 326.266730][ T6475] do_syscall_64+0x4c/0xa0 [ 326.271646][ T6475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.278038][ T6475] [ 326.278038][ T6475] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 326.285678][ T6475] __mutex_lock_common+0x1e5/0x2400 [ 326.291405][ T6475] mutex_lock_nested+0x17/0x20 [ 326.296673][ T6475] tcm_set_name+0x26/0x90 [ 326.301527][ T6475] function_make+0x195/0x350 [ 326.306619][ T6475] configfs_mkdir+0x511/0x9e0 [ 326.311812][ T6475] vfs_mkdir+0x386/0x570 [ 326.316565][ T6475] do_mkdirat+0x1dd/0x5c0 [ 326.321395][ T6475] __x64_sys_mkdir+0x6a/0x80 [ 326.326484][ T6475] do_syscall_64+0x4c/0xa0 [ 326.331397][ T6475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.337793][ T6475] [ 326.337793][ T6475] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 326.346022][ T6475] __lock_acquire+0x2c66/0x7b50 [ 326.351377][ T6475] lock_acquire+0x19e/0x400 [ 326.356399][ T6475] __mutex_lock_common+0x1e5/0x2400 [ 326.362186][ T6475] mutex_lock_nested+0x17/0x20 [ 326.367450][ T6475] uvcg_frame_w_width_store+0x110/0x370 [ 326.373497][ T6475] configfs_write_iter+0x30b/0x400 [ 326.379111][ T6475] vfs_write+0x748/0xd70 [ 326.383870][ T6475] ksys_write+0x153/0x260 [ 326.388709][ T6475] do_syscall_64+0x4c/0xa0 [ 326.393645][ T6475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.400040][ T6475] [ 326.400040][ T6475] other info that might help us debug this: [ 326.400040][ T6475] [ 326.410257][ T6475] Chain exists of: [ 326.410257][ T6475] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#26 --> &p->frag_sem [ 326.410257][ T6475] [ 326.424651][ T6475] Possible unsafe locking scenario: [ 326.424651][ T6475] [ 326.432082][ T6475] CPU0 CPU1 [ 326.437424][ T6475] ---- ---- [ 326.442774][ T6475] lock(&p->frag_sem); [ 326.446911][ T6475] lock(&sb->s_type->i_mutex_key#26); [ 326.454885][ T6475] lock(&p->frag_sem); [ 326.461664][ T6475] lock(gadget_subsys.su_mutex); [ 326.466671][ T6475] [ 326.466671][ T6475] *** DEADLOCK *** [ 326.466671][ T6475] [ 326.474804][ T6475] 4 locks held by syz.3.558/6475: [ 326.479805][ T6475] #0: ffff888078296ff0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 326.488997][ T6475] #1: ffff88801dc06460 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 326.497934][ T6475] #2: ffff888024fda488 (&buffer->mutex){+.+.}-{3:3}, at: configfs_write_iter+0x7d/0x400 [ 326.507747][ T6475] #3: ffff888023a41278 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x20e/0x400 [ 326.517464][ T6475] [ 326.517464][ T6475] stack backtrace: [ 326.523417][ T6475] CPU: 1 PID: 6475 Comm: syz.3.558 Not tainted syzkaller #0 [ 326.530700][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.540736][ T6475] Call Trace: [ 326.543993][ T6475] [ 326.546906][ T6475] dump_stack_lvl+0x188/0x250 [ 326.551651][ T6475] ? load_image+0x410/0x410 [ 326.556145][ T6475] ? show_regs_print_info+0x20/0x20 [ 326.561324][ T6475] ? print_circular_bug+0x12b/0x1a0 [ 326.566499][ T6475] check_noncircular+0x296/0x330 [ 326.571410][ T6475] ? add_chain_block+0x9b0/0x9b0 [ 326.576323][ T6475] ? lockdep_lock+0xf1/0x1f0 [ 326.580890][ T6475] ? __kernel_text_address+0x9a/0x100 [ 326.586246][ T6475] ? mark_lock+0x94/0x320 [ 326.590556][ T6475] ? _find_first_zero_bit+0xd1/0xf0 [ 326.595733][ T6475] __lock_acquire+0x2c66/0x7b50 [ 326.600570][ T6475] ? __lock_acquire+0x13dc/0x7b50 [ 326.605674][ T6475] ? verify_lock_unused+0x140/0x140 [ 326.610958][ T6475] ? __reset_page_owner+0x180/0x180 [ 326.616142][ T6475] lock_acquire+0x19e/0x400 [ 326.620632][ T6475] ? uvcg_frame_w_width_store+0x110/0x370 [ 326.626349][ T6475] ? __might_sleep+0xf0/0xf0 [ 326.630938][ T6475] ? read_lock_is_recursive+0x10/0x10 [ 326.636810][ T6475] __mutex_lock_common+0x1e5/0x2400 [ 326.641985][ T6475] ? uvcg_frame_w_width_store+0x110/0x370 [ 326.647700][ T6475] ? __might_fault+0xb7/0x110 [ 326.652354][ T6475] ? __lock_acquire+0x7b50/0x7b50 [ 326.657556][ T6475] ? uvcg_frame_w_width_store+0x110/0x370 [ 326.663273][ T6475] ? mutex_lock_io_nested+0x60/0x60 [ 326.668450][ T6475] ? _kstrtoull+0x3cb/0x4e0 [ 326.672948][ T6475] mutex_lock_nested+0x17/0x20 [ 326.677697][ T6475] uvcg_frame_w_width_store+0x110/0x370 [ 326.683237][ T6475] ? uvcg_frame_w_width_show+0x180/0x180 [ 326.688853][ T6475] ? down_read+0x1aa/0x2e0 [ 326.693253][ T6475] configfs_write_iter+0x30b/0x400 [ 326.698352][ T6475] ? uvcg_frame_w_width_show+0x180/0x180 [ 326.703970][ T6475] vfs_write+0x748/0xd70 [ 326.708214][ T6475] ? file_end_write+0x250/0x250 [ 326.713047][ T6475] ? mutex_lock_nested+0x17/0x20 [ 326.717967][ T6475] ? __fdget_pos+0x2bf/0x370 [ 326.722531][ T6475] ? ksys_write+0x70/0x260 [ 326.726927][ T6475] ksys_write+0x153/0x260 [ 326.731235][ T6475] ? __ia32_sys_read+0x80/0x80 [ 326.735977][ T6475] ? lockdep_hardirqs_on+0x94/0x140 [ 326.741183][ T6475] do_syscall_64+0x4c/0xa0 [ 326.745574][ T6475] ? clear_bhb_loop+0x30/0x80 [ 326.750232][ T6475] ? clear_bhb_loop+0x30/0x80 [ 326.754888][ T6475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.760766][ T6475] RIP: 0033:0x7fd005d680d9 [ 326.765161][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.784750][ T6475] RSP: 002b:00007fd003fc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.793229][ T6475] RAX: ffffffffffffffda RBX: 00007fd005feffa0 RCX: 00007fd005d680d9 [ 326.801180][ T6475] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000004 [ 326.809136][ T6475] RBP: 00007fd005dff024 R08: 0000000000000000 R09: 0000000000000000 [ 326.817084][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.825031][ T6475] R13: 00007fd005ff0038 R14: 00007fd005feffa0 R15: 00007ffc2780dfa8 [ 326.832985][ T6475] [ 326.842914][ T6479] loop1: detected capacity change from 0 to 256 [ 327.368136][ T6483] attempt to access beyond end of device [ 327.368136][ T6483] loop1: rw=524288, want=276, limit=256 [ 327.379579][ T6483] attempt to access beyond end of device [ 327.379579][ T6483] loop1: rw=0, want=264, limit=256 [ 327.391488][ T6483] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 327.438744][ T26] audit: type=1800 audit(1787677783.227:12): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.557" name="file2" dev="loop1" ino=1048642 res=0 errno=0 [ 327.732681][ T6485] loop0: detected capacity change from 0 to 256