last executing test programs: 6m24.965728685s ago: executing program 0 (id=182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)="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", 0x1000}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m24.571272472s ago: executing program 0 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 6m24.128390284s ago: executing program 0 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) unshare(0x24020400) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 6m23.162055272s ago: executing program 0 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x22020600) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000033c0)={0x2020}, 0x2020) 6m22.893319011s ago: executing program 0 (id=194): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m22.19813953s ago: executing program 0 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cecb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x44, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0xfff, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x945, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x5000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m21.33701561s ago: executing program 32 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cecb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x44, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0xfff, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x945, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x5000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m59.564623492s ago: executing program 3 (id=360): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e25, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0x8, 0x81, 0x9, 0x40}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x40004) 4m57.063715669s ago: executing program 3 (id=366): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x244200, 0x50) pwrite64(r0, &(0x7f0000000140), 0x0, 0x8000c61) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff16400000000000000000001140000"], 0xa4}}, 0x0) 4m52.058720521s ago: executing program 3 (id=372): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x3, 0x21f, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x113602) 4m50.5177215s ago: executing program 3 (id=373): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x44001) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7d, &(0x7f0000000040)={0x0, 0x96f, 0x1f480, 0x0, 0x399}) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x5f8, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 4m49.10518606s ago: executing program 3 (id=376): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x181000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r4, 0x0, 0x0, 0x240408c5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000540)={0x4, 0xfffffffffffffd9c, 0x6, 0x7, 0x0}) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200), 0x4) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff80700", 0x12) syz_emit_vhci(0x0, 0x1d) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 4m48.786334122s ago: executing program 3 (id=379): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2d, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 4m33.074291659s ago: executing program 33 (id=379): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2d, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 3m26.449608233s ago: executing program 4 (id=498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @value=0x6b4}) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0xd, @vbi={0x6d4a6f9, 0x202, 0x5, 0x41564e57, [0xd4, 0xfffffffc], [0xfffffffa, 0x2], 0x1}}) 3m21.068772791s ago: executing program 4 (id=502): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f0010203010902"], 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 3m17.798436692s ago: executing program 4 (id=505): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0xfffffffa) epoll_create(0x7e) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close(0x3) 3m15.901225356s ago: executing program 4 (id=508): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x10e, 0x3}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000ac0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x35}, @fd, @fda={0x66646185, 0x5, 0x2, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) 3m14.581766369s ago: executing program 4 (id=511): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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") syz_open_procfs(0x0, 0x0) creat(0x0, 0x1ed) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3m9.000325982s ago: executing program 4 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x6, 0x3ff, 0x10001}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2m53.27154774s ago: executing program 34 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x6, 0x3ff, 0x10001}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2m29.402769632s ago: executing program 1 (id=574): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0xfffffffa) epoll_create(0x7e) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 2m27.910536507s ago: executing program 1 (id=575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000181100000000000000000000f9ffffff", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018150000", @ANYRES32=0x1, @ANYBLOB="0000000000000000180000000800000000000000020000004801fcff10000000185a0000060000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x60, &(0x7f0000000300)=""/96, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0xe, 0x7, 0xea}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x1, 0x1, 0x1, 0x5}, {0x1, 0x5, 0x10, 0x2}, {0x3, 0x4, 0xa, 0x2}, {0x3, 0x3, 0xd, 0xb}, {0x0, 0x3, 0xd, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc3, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x10000, 0xffffff5a, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r2, &(0x7f0000000080)='\x00\x00', 0x2}]) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x208002, 0x0) 2m18.37079675s ago: executing program 1 (id=587): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 2m15.721889296s ago: executing program 1 (id=580): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x9, 0x2, 0x0, [0xb37, 0x3b2e, 0x7, 0x1, 0x9, 0x7bc3, 0x8f2e, 0x2e]}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x113602) 2m12.83296618s ago: executing program 1 (id=582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m9.245030463s ago: executing program 1 (id=598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 1m53.619140794s ago: executing program 35 (id=598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 34.77317851s ago: executing program 7 (id=703): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000041) unshare(0x6a040000) 28.785000122s ago: executing program 7 (id=712): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000880)) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000500)=""/124) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001b3000/0x4000)=nil, 0x4000, 0x65) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80500, 0x0) r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x4d0, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x2a0, 0x2e0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) syz_clone3(&(0x7f0000000300)={0x100008400, &(0x7f0000000980), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1, {r2}}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 26.874937697s ago: executing program 7 (id=715): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="58e2", 0x2, 0x89a643c95679b487, &(0x7f000005ffe4)={0xa, 0x4e23, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x19}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 19.665357674s ago: executing program 7 (id=720): openat$dlm_control(0xffffff9c, 0x0, 0x200000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)=0x1) userfaultfd(0x80001) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) ptrace(0x10, 0x0) ptrace(0x10, 0x0) r2 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x11624bc, &(0x7f0000000ec0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRESOCT, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="42d4b67e03b963b0e38566338a60c6fb09c9b49ed1342135c5924f1139fcd14abced7c5bf0737f5e30e94b539ac052c93dca9f51d686ab1197fc7a4d43daca3400dcfc25b2a2a796c5155a5dbf9eab0305840fa4063d7b362fe6d74514c4d58c6f5e3d54804fd0a1974b6a606097dc476ab4fd0c317f834e1f0bf411aa6ccb10723befc1ed61dd1a076664e154e78f6332ca4b6407b53ba0257c72f5aed0291acb531409a0fbc22553cf5c46127b765d70daba23a6eebbd74a7e952ca8856877ebd06e015ccef59062f755f248d1a010f132f356c871a3cf71776f13", @ANYBLOB="67b492c11f8bc8985216c4cb38d9a93a392abd659f72c8ddd8f58c9d9d05d41f1bb4e21e5dbbe0dedcbed6ef4959285fb758eb158538fc238492f1d7f2845ff901fd53796e415c579db2d5cc4e9316589a2f7cdb164d4cbc166904ede9898e0b4e4966456c91c5e7ccb625b13a132380983fe05c119e74e90a1cb51b8b7b085ec526494bd0a67c4b0245110daea7b6b8968469e4c24b962f94bbaf36f5d0b8b61b22cc392bc11dc7844950a09b9538f30786074bb2c23878fc62a080be83c41c367e2d3ee816c769a99093b7517b617ae2c048b3abdeb7b7fdef17b37a6afe05adf138da4098688af7525db73fc082dd6254afc2bf1a00a6e1c583b0cea95c6f97ef23f2e321c182f24a061f7024ef710b90c3807cf15e2407dfba4233aab1d69c3f13949f7cdf92ac459802ae50d724ea690938f56ce56a25e1f72ef23fdc033eece09a2ec288401d977213a128746c17e5da8dc6aa0c7e26a2df8a11de556e4a60eac1b02d1720e236bb44959a2dfa8777f9945c1acee99c7cd3d10f4d1cf7241069c49d1a67830fa6f09a1457c0caa4981e2b8c2148c808fa71", @ANYRESOCT=r2, @ANYBLOB="4fba0708593257def3f1fa1d3d82c476e2821dc8986538ed094547966c11f47d0aa180008aa4bb04221dffd0298799eb0d2b15dcc1e688dc083db87236ba2b57b8c1ba762bbc6df5942611", @ANYRES8, @ANYRES32], 0x0, 0x0, &(0x7f0000000000)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x18b040, 0x80) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) 17.199616358s ago: executing program 7 (id=724): r0 = syz_open_dev$vim2m(0x0, 0x10003, 0x2) pwritev(r0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0xf00, 0x1000) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x29, 0x15, 0x0, 0x0) connect$llc(r3, 0x0, 0x0) 16.666328076s ago: executing program 5 (id=725): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x2810080, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x5, 0x1c1, &(0x7f0000000640)="$eJzsmDFv2kAUx/9nsClVJbq2SysVCTrU2KatylCpzB1aqVWrDpWKioNITIjAA7BF+RCZ8wkyoyx8j2RIsiRDyJYpg6OzD3yQEAiyWfJ+w7u/j+fH43/wkAyCIB4tpydXx/u5bJrrZ8giJfbPE2GOIuX3M9dvD+vfDnaNy6P+4Gtpuh4D4HmLv38SwKCcgCuuPW/y7qxYf0IZaVV+/TcYdKH/QcEvoW0w/BF6XdJNnq/ra3XH1v83nSoXBg8mDxYPxen+htsMVak/Fmz7tLu9jYrj2K0YxTz/hmUFn6X+5PMaeWOE/sGEAlPoIhh+CP0JqZE3gSWiPj/Tl8mwvvTVWPTzP4nbo7FQsWhy5+8q+um+yMzJUfHAyioiblWJuKCKWF3Voi74JcqfMfPNvEgjXhNWI/j/wpK3h/PJ22PISfMpKc2PgtvYKrS7vXf1RqVm1+xNyyp+NN4bxger4A+iIN4z/9L+fH4q1Vdn5GpMQ6fiui0ziONrq5OC27LumriaP/8V5N8EXTOxF6hwwXP2mi/5BLDDxVlmZs8EQRAEQRAEQRAEQRAEQRDL8QrMfwo6QenWlvXdz74JAAD//0ixasY=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000002ac0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002b00)={0x14, 0x39, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x401, 0x12) 16.002184072s ago: executing program 7 (id=727): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x3, 0x21f, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x9, 0x2, 0x0, [0xb37, 0x3b2e, 0x7, 0x1, 0x9, 0x7bc3, 0x8f2e, 0x2e]}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x113602) 15.163221482s ago: executing program 5 (id=728): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x20}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r1, 0x5406, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000640000/0x2000)=nil, 0x2000, 0x0, 0xfffffffffffffffd, 0x20000) ptrace$setsig(0x4203, 0x0, 0x15ff21b3, &(0x7f00000043c0)={0x8, 0x4000000, 0x6}) syz_io_uring_setup(0x54d, 0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000000)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x400060}, 0x80, 0x0}}], 0x2, 0x4048055) 13.48811275s ago: executing program 6 (id=732): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1d0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0xffffffffffffffc1, 0x1}) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffff2, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x11000201, 0x7, 0x81, 0x3, [], [0x1b8, 0xfffffffd, 0x32c, 0x8fc], [0x0, 0x7, 0x9, 0x1000], [0x0, 0x4, 0xfffffffffefffffc, 0x9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r6, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}, 0x1}}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={0x0, 0x1}, &(0x7f0000000600)=0xc) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf0ff) 12.016620774s ago: executing program 5 (id=734): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x113602) 12.013570264s ago: executing program 2 (id=735): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 11.942273859s ago: executing program 6 (id=736): mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0x1df) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) unshare(0x22020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='clear_refs\x00') exit(0xfffffffffffffffd) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x3, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.023620334s ago: executing program 5 (id=737): r0 = syz_open_dev$vim2m(0x0, 0x10003, 0x2) pwritev(r0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0xf00, 0x1000) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x29, 0x15, 0x0, 0x0) connect$llc(r3, 0x0, 0x0) 9.014439245s ago: executing program 6 (id=738): syz_open_dev$usbfs(0x0, 0x76, 0x101341) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000440)="3580a2e0e73525303015d1e8413edc7f839a98", 0x13) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) bind$packet(r2, 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.002805265s ago: executing program 2 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000c80)='io\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r5, 0x5422) syz_fuse_handle_req(r4, &(0x7f0000000cc0)="f773091228a43a58c864f1e0366b07de21fe64fbd0bf85a894f8d30ff6cc5256c4d3abd726c119dbebd0ddca6ad62fdbc55f46668ec0858ba96bf6733f0be147e9108ebf89278ca74e07fed107889459c0a5e30616db71c6973818d14e3571c410aef47e6e54ba02e48ec733ebc921795a1f431faeecbc65696ffb9e08760f45650f650d24af651d9986b956d8dd66017f17012f2358b5f69dd63f9aa5fad2ab7ee6df7c99f0b5601e1dab2ed5ca6aa237c52a838d7d51293628dde608fc4ec691b6e2023ff6a6813c505fc81bd0a0de800a5bd701a401ed07139dfa917e524c7d8fd47094122e9acb0382682d0b2adc54ab61c2d9aac6b5b0d50623187e31ca089585dab35411759db09bc44178011883cd0d5ab3fc6f8be3d0e71f083fb911a229995801eeab83581aa5bde0db85ff5c77aa311fdc9f9b4b4de0a96d371b6371ace3923e5557c7e911f522e132bae799ec6d11a43ff7420d4833d306f261ab6636b1f7d250829700456e3aa69bdfa28f24acd27b4df16cf417a7bbb852fe7b50e3841708110ab82af1e1145c542afb83cd7b542c6e310a86cdb76d492955312ae6665c95f36a0683bd12a394d6a45a0f38fcde7d665c4afbb329f3486e1b21af321b3f933d585d885485e6d9448b35e0f8d825365ce26af6cb8fb7466b66491e34b5313019beb3b2934b369daaa16b73734d3f787dcbe3115a3da3804aca82335ac9b20823728a6ee0d292dbcebb103ecdec0d27ae3a3ad5e0040cb78abfddfe16f98397c5f1f910372454722a612a0cc91ea8f709544f22c4e3bd70840745638d83b74197c0b22331e3b107af26097a37c8dd2b91e5156af1a33e06846eb15aa2fe95b6df98bfa7fe28693e0ed082aacb3181b657f81790d4556506f8f2a3753bfbd2949429dc3cd1e11291e82dc3db974a13d88d9cb4242165201f3d9b130c128d057bb9167f12859fbef6de8216d70eec7d3706b9013f9b8f61d8059ab50904b66a32376840d8c3e714bd6ae87640f352ca2b4fa2c1cd83f28d5de889f1454605fdd49c7a7cf1af226895ad6ce6612063d88ae60f5b8af22ef1306f55205152f0e72f2edee901bd89136eebed01475edd572f5a4da8b34bc6db8f29944cc720cf2b03cd2f768a34a81fdd58693fe859edfb2799b3f90cae32b6d2c577dfb9e03ab2bb25a41f53a42c11c89a615bf1c44f5c61084c70882a55fb3039792e9fff127b323c0783c506b6e4b7079cf27f67fdb191256b7c908e1e30a8f72072ac4323337062da5132369135408bf74e1b1f6c1bae332f75291d7a4f4aad4b9f70be298868305486c519434652da2535ff7924324472fb23c84558a5b1578ae94c8805becdb99eba47add535fcb7a72ad9b5d631b824a35d58807ea066bbe53859c50b5adb3508ccb3ae974ee187e40dbfc09a326b06a6004aa81c6c91eadf97ccc77cf9ccf4ed92199d95c2c8d5c965594e306d4e8b78d99d2ab0d282890c9d34639d719488b8d5fd3832a01f1a5f75449f460688e63825421aecef8a43a187739d8b1e14e54c658d57e4cf607430ea530720b3308609b57a9148ad5b921d94b6bb775880d492bb515bbd30caeb4ab8fc8b0c392a6c76dc63ca136d6e76e49a0878ea9577831e7bb3b4e3915b09222d3ccbec1b3dc4b1fd1515f302ba48d15adb9fd7aeb26fe553a60dcf82ff70b6c5d7389c54194e46bf7768584acbc18c7fd7fe0fdb11dd32a322f0ae97b481da34b47d0abc16c6d12f8e9d12db2dee5a1d66d5876bc6e100e02f3a921088947fc1d0a4d8e4e878e92cee18ceb78c7d9bf0204cc515eb8185b985e967134a1400b6a5b945b3ff86f62c2da8fe6dc8628ad36910b863a4b7cc519d853e6e3c6aff4d91862dc8c1364a8559f0c58f88a90ca4bc4a9d1aa2026229d46482819df72902a8d77615042340d758bb49153eb695823d43ef50e10e700a7303a4b798499464f39412a7b2cd7c460717364c595f3711d9ccb710075ae301100ce9f0c5d8b6ccf4f673112e2a7c2b29e56ab556d3e9dc0e777da840e1e304a24227bc9d1ba3c31f2bfc39b6ffe06e7dfc08ffbb799f56c5e9b4ce9120d10bc52d4d105167b30be7d4afa0007c59c3324121568fd4f48778d7b17a1ef117036520d25367253d763dd2f1369ef6562afeaa89dcbdd433ef80f92c41143cfeaf46325f2191b1b29b6a457e0a88e7a54dfede8e186ad4fd4d3eab77136d9e403dda03ddfb24708d648840427087481424d21b25a52922a359129ce109fec903fd33f03ea6176cb7cb64567d08204902acd1f1d0146c7c8ef5ca24d04209f2b55974ed7e11eb081beed06eb03ddb5ae80e3424d52741a5e7c8c89006a62f6ba37a7e39b75566b8d57cb11fd23ff73f7f251bfcfb74336760296a801488f77a8f0a830eb4ca2987be3ce42e2aad2f4a975d95eaf0834fbab05a7e97837c0d49ba31c93b2cd3ea05319ce1d223df3a08fc35d6d99bbc863602bc84d26926241ff70d7715d27d60b201315264f2ee3ed0ee2d1959228d9b388019151580a4a68449fd37cd2c894d749a0a281c4e458f5bfc76189e7c2ae21e318a99792090e7bb8bc73ead76439a4408b2ca49678ed93ececfdaedde0bea7f8df33910ab08518829435e642bad3aa9e373fdeb80c981e8f6f11602a8cb23b25dd718296c698aa602889638041b286c3234ae10d7d0c8ff1fe301735a467475db85fe88d155f4a8ac86937392129141f2784ff559c7dc79f0fc6a43c940fe735d91c74e3975415969548a9d7e996b5d6a0801e09519ab3852e8c5cc23f380be09fb7fd37e0cbc9f540a613aa289cce31fa3ee913e364a8a8fc1490087863222160b6899e32a391e090d41bfc961943d03f7b2f8e49750a04a20f2e2ca2951498e0fa8cf0d33d022d490704015c0a83ffb9f44114e37a386f2c7f940cce802edca5ff4ddeae0666167c2a466aecd919629185f491a210d407ebd09600406178ecc818a7cc4867ff14234efad41453027f6cbc62b4649fea7b227ede841e9816d98636c2a2c950680983d2375233a7dd64dc71c9733f5502ff4016724506ff026ba71df2623446f083df9e6df6e7fb701da63c640f8599e09cd7ea1b818bc34349a051430fe5791df7724eda9eae0adb53ec1e844565abe44063a465bb2ea15fa53342cd1229f0b6092c7d544dd0ffb9cadda6930115a66a5ae892f3661e32eb3ace734f4386da1ed040dfb0155ee3f079ec72a3bd8da69b943250a3d33fdc8f4666d77c680db12e0aacd2ea7adf4b00f86733ed27d3c7d677f6a7b60c3657a599a7a36c88e5c805eb7bc022613b6ed3489ac3217bc25e862973d9b3f2235049452aeeac96f3e40044df6d2dbde64b819bf1ee67c6a03566e1e5c8d123adc7eb0410be047cfecce48a5eaf41a718f5d1b78c17fbb6fbcf003f6b1dba0a00558ae60e6413c271bb0dbf733aedd68eab4f8d884bb46b5fd833dd718e6c4ea58ff44f4137372494ae1c74d2ce3cd66526518a798f095fa804088d18d2695740e930b8d57eb55ade001c1cc9c734b77da57482e024503a1ea9e2a43943a308b5285d622ab623b860603122b41fcc249f224212cfbdc8dbc15e791ea6f51c44154619c98661664b11a34d20ecec388d69f5b32fc674d0ddf2b1365c8709a529b2eb3ba0a0547bdde3adcd272e0a41de9904999fd890b75fed8e60f1f00bc8aac46d8043ff2451541f644f270d9fc65a0b772078b05a6ce60c0df8b2540d89d052fae472867edf3b03a252bfe8e9ca3d2e31c7950851d2e7e7273c0109f2ac002747d277b6c9e6a9bd51d57c59b178a6e329c81c7bf2f5c5d345b2e990093b2e47f79807a62017fcd34efc671c7c6270a1a80f60fba3fbabb48f294ee3b1425b6e8c0fe7b14c31c2b0100d8c5f50349cff1e4e0d3aaee1f4afe10f5c234c1c4ba670111ba0d29694811f3dc242a73a9b042535f3ae8ec5b94240fd091cdfa157e7d27bf26412cdbe54ef55eb5d7183ca5ef0a9f5e81aa6dbf705e3a0d542a7573ec99ae67293970aceb8ca52c9eb5786196cb61947436581745df8a5ca11706001844f581317d43e29fc6eb1d1b011278eb4d77cc6a2e1defabaf87177a162f6269abd97503cc26aa73a18a5954e88692b63e34ba673a6b302ea2a59679ef60094c3db6f3874dab8affd12a7d12c53e77efa807d3ad845b908438b59461da39c072c6ef2fb1889f9a9e39a9256bdc71179c98399e60df6b8224a30e22ffd9010488cbc101ef020ea78a90977fe35586b4140339bffbcf32d81b04f789a195a44f289f44c714e6163afada072871122aaf6f60da967554de66cc4ecbf50aef5d02af874873ae5a36a576eb5dfd749b6168e395ce5817d6275b25d6c6ecdc6d8c4a39fa98f749d6584ec0312bd781a0a14fca35c8b0ac2cdb5a4b15d03966ce40cae66ded0cf7afbc5f1a580bcc596360f9253a70f05ebf3a58ca30b05b6edf4367d988e6dde2cedf37237ebd56da02edcebd9ba841c210ab52bdd869fbf3a783b44670483a012419a50c0114863a97d9f152e63a3ffffc4c83710ef02a3a9c718450f4e8f918c2c551d477a88e91c67bf1337a52f4d680e9607a295feafe09e1a0c5e3c1a18c5390a6a84fa19dbfa2abe421021b471f1e80811a4ba036a9a457fa323b7fa65e666a08f673ca92a02c03d6eba96604f770444b96297307bc23f6a928f0da3d97f522125592c092bb32f97882a59603b268167e970bda981299524929e111e31b3301285cfd9bbbf0263d7e2e19cd42e56920565eb5f45f99455b0851dcefd6d91575ec4e273afaad0f7e831d46a8d5f95244e06febe9d9c76fe2de20e561b11d39a4884d29e68773aa85327279e667884f8d4f965e8b12815076da686c02d17a32bc97de630508b06b091a7fa705bd705a3b5e85975db69d4198f23547686cbd42dfeb495d2c0c2c4c155dd1c8c0522836b271015c8f23a5c129e49c0def56c0fd2a5d010583b4d2849b97dffa9d28dbf783be484de51b8c1facf821d8f6a295caa97f5245c8b3fbe71b47a3390f2c2ab9f6ee41ab082c6ddaed769ddbd9188c970be2843f4fdfe32d3b9242628e3a1d037746b564b4bf6cbc37824444a78605c010a00f2f8abded984e664c63a10cb24e0c1d2d53873d519475651d73e1e228fba31b3165de6572c3f4ca692b73652bb77c423a191d45e90b122e0a66b956302ff7bacccce85e7428d8c574ef3d78884495c95f1416c3f500f5be2c0a70303ee19d4e81c1360db322a0400f311caffe568d07adaf9d6bd6f136f0886db4fc6c2cb956b79064b61afe3abd2ca638c62bf89ba91cfab89aeb6fb4eee6b8a6a321076ed5efbeb369259390e780454eb1666c4fe8366b00765b5639e20827349f4df49c90bf5dd320b36510fedf5c18f59ee14e1a8e436f02506d6c6c3c8c3328eff00bcb66ea3a99f2e9cb20f0efcfb09876f7860ce4294de8c5ce007604031a8dadaa20955701736218a159845f8cc7a485412bebaf653462459380a2cb0900721d570391f8e62869546a610e8478d9536d473945a46d9a89686d1dba43690a5a4dcad2d4fbacd877e38495d4a1696bbf46ae8fc6a764faf7c67101a785d259ac8a6df1c7fbd006e9327e24d8fa4c569a5e37fc047521cf520e2bf11dff07f6c47442db2fe7a94a7b557454363043ad4fb00d2842a16a2b25fcdd5aa38d585600cf81e9d202822c4571a12668cc202ef3af5704337bd134b99c6df8538316c9e423032e4c3b73b1e26571b9890ee5a5f9885321281c1371614b57464647c8d5387dcc9878ba4f9c4f65cb3d34fcde5b5fa1610c28f50ddf5a1ccd682ddf4590adc3d3f98b8f98fcd1845dadfb142dde12116bf36d7b738d930e10c3317a0222914e059370b463611c7e8d37bab1f834ba690c98af9924540256cb073ce89d05715e50cb79948451c8c4fbb07f497e860ed293803689ba1895af65c8d97c276e2cd0e7bdbe50655293462dbe64499184a7b8a89a454e38219b5e979c98badc75513d7a6862e2db939347d9941d906432ae41b67df54c2c92568d847fbaef8773dd466bdaf52bffde53fdc2514ae006e19a9599e0fde9c5772c3b30ce30d8fd5e0f91fdd8c66a8884575adc7d2970321520722ab1ddeaa64aa21855f9263d0b51d2b2df0ab28cd32d709c0984ed7f0ef4ced427e99230553a0b0453b1f6daa0ff63cd7750cbdb5f3373ea044ead7c91acfcfdac09648c06f4520a6766d530b37ad2aea22b50419b26f3a40df01f4970a104df6893d6e0b6b3cf88eac9c3edd9e724c5357283e933173dce77bbf70c99367b68e55cb0a3e16d1696c571b483640c33b9f229d837fd1d303608ea286643ccf46dfbd26d2484c79827c6cf896e4904a1febc39932c76a17606c0a62010932fe29877c00dcf7d65fb006594d8869bbe7f78138a78a125a475da225920235b47ba8bd631815926f7a5c4ff69d61c39b26b078760dbceefaea9aa5f08c97d2e97bd478d014ee739db93824bfa7d3167f789624e5a98873422a0176c8b2a69eb5a01dfdb22ac1cb7f9294df6ac1245d50ec44fbdfaeb145c9bacad2abc7e160993afbad2abcb9c1019cfe0e358d1c44676cf002cf844d83de959c3c3f074bad5ac0326d0ca4864b2fd724beb5338e81fa81fd178e14e267c06189ac51fc6a248398986d25d6791c98d330b37a59b3d9c46f94e6170ec499fb3f27443c185e261761d9fac5fa44bc4912c41f93a642b89d51afa016c87d086a145255e808082a2036ead976bd2b78079f8410dfd8fbd15048e3264f15491204529f6b0e5dd560caa9113f9491433b9ba54dba2fcd648928717a1499582e6acba3dd28364b368a1e16b13a2cdaf13ef8b0d4046f8c2a5f280d538b0efe3297bcc226c17688be16315383fe043a7c51a8bb02497277bb1dcc9a16db9d04dabfb0bf6eb9f408d18266fa45d2fbbe3b18b89d6dc7c5b947b741925ac93991554216773ac5e0dc903d966e8fab10ae2eb22e002aebdea2d800ba75fe33082561b9222997bcfd8d246dcee7c46ba0a12a361880b6c4bbcf966a2ac0600d69d39c6c43c783859e5212dea9944a658c6fcf33df2be59da18f1385d3425bfcafda04071b83539311884d4cc8db5838dd84c3d8355292fee226e5a69c6c9a31f1b5406cebd486ffd050928f3916d748f159436fe37dbef68656842624063833cd1811151e9f05dc5ca63191587f51274b6ba07ad44e104a20dd2fc6d43e0274c35f926b56591cee7670856d5d5194df8bdbf608f77cd8701f0ef26a0e38e4cca58e4cc699065d27eb74bd6f89755779f3b2a73a3a0d0f655755dc7cb91772bbe0b89d360353335e545d8c3133260b2ade1814e2fb4e9bea7db3e30fb62c936544a91170ec2f86e3ae75319da0d873a05dc9f0e14bc709028e11da854a03d3941a51e6f3e0d363528c9d203fa5166d9aba23a49df941d5c902aaa68a3b99a709e9d9e3adc96b581494fd2c7e4605af5891261533ee403218c6901a37dec5e2d65dcfec9449cefef4eb4c4b793f34c9b0187ac1e9302c880149843a66feddfcfe47c5e33eaf1ab1eb0ed48cab980df0fe3e11c46a27d2be9972af5ecef3081f77ffb8640a8f3694085228f7400dbf177931fed7a9fada79fcb76251e5b64087e3e4d4fe0a5b86d7e6ddf47fcd131f68796de8c9e86bd6b08cf54ffdd5e10389e0d2122d72de173535a09defea837a519f96e1e795e6e767a2ea7ebcb44e96a11a2910bfc1b5221012732bca14534a2a97afb0faca2bee78f96b59930e27b7b410b53889a190ba70fd1b5fa4418f8fe6df52457a9f814eab291bd45471c20fdf973c0f75bb052417b69592e83cf8cb34b7b8189c01ade45736c77cfde6f44448b78e02ef376d75fd2f95fb0dd91f9321837777f5f514f083bab481b66639af323383a4d715a0c3a216536c52d3fb3933895e1709b25a84a8637a125a5fede40a90d84218efed8b65c021bffc279a4b30fd0cb390a95d1225862f37df93bc97f1192e725bc38e81ca4a4d59f18afc9d89793d3834e1781a8d5e4d521aa3c34b4335817f0dd88771a31d3336e14645323ad54c728cf1b0fe515602c064b41885ff14ff394d4deef3c5de136fec1a05e3662cf61f29a74e9da23f116585d85d3806d015fc8783c08916546e18c92c737f31a7d35c72b3bea01fd852e7dc6d68f24bc787ef7b7df2c4acff86981597a7dd2aadbf40e26109a10e856a78929e698c308960d999783134d7f5abf90a9ecf67e496818ee42afe66888b41707047ecf3374be56e6be6d878531057d4b16b7ca749ec672842c057868ca4c0f9e69e6d92432d6331c4c32db2a93d50a690a0659d4c9bc6fd75f7201f943c603bf7caed8d218ebcf947ea685c0710c26aa11ec886480983e06b9be0168313de87b0e068f98bd14f2066e3fc3a058c32ca0da2a1b449814755e935ab360b15bc91f5d44e54ba2a8db07d1c3854f6b38efa006263300f2113c6d3481868e08d406545a25a8dc75b01e429853e26747023913298e7b5b174c8dfd4e36a81061ba46beeaa200d6003b9f0cf50caf3d5b06632d25fe7ba91d2a97f7562555a67876e334c642e48e753ce6f12a78329c381a1349cf5d89413d04a6b93c566aa2e335f4f0732567388a9df0b3084d57f6393eaf5c20fd7c3c29981500dfd3573a16ee4bc56836b5c3e75ebdce347e46f3d1247a936df69a259fb35ff4372b774f960aa4e8d84e4ae54caaea634d37d2d4f3a276e15176e1f00a906b2fe6ceaec16cba278d0eacdfac9dbbe5af60c5f923ce670315bbc29ac72e9f848d2c168949d7fae8d19fb86ac5511c36035c6c101063cd5b8b9902f8f51b6de2e59da3e5ddb25eb6e9dcd0a64492da36f8a61c9e2b33dd731f0423fd407048346d5a19fbb84c1d23e34f5e43afb32f3c6b85c550dae394285b233ec5ae2ac8646e2804f2c59e870caf6fae5d6df810bf6bd64562b288af75a5d42478475dd72e81651453558e4f7370cea3def6439ccc1ff644e7d0e9c5c286b8aa1881b5bf641ceef24f557b68bb7532af2139b5a890cddf0b1e26328070a43fe509609fdc6de4dfcf8f2f4a79ada37a05b9a2bcac4df7774a79f6aa569b4dd4cfcd944d64982c13349f5a880baa7b5f20aa55af6077299c6d53e0c6ea063d45d8217d72104012b5d82ec46fde056dfc94e6cc9d61bbd1bf08401d1ee163f3d7f88d3481c0f395765e6653d6678dd73a71d411e0ea02608b226357ead909c8d5643527dcd1e0f0b7a785cf691b59812593bcba54624fa2ad1db9547b78bdfe0d6ba2dbc3298dd0c539260235adb385a00989685705cf3631ae545dfd8e2813d5a2ae507f357ef3ed5dd46a868e04cfca7d01edf77c19c6d4477b9a57c7629dff4afef542d19a1b559e55488a3083ad29b98019bc54cc59299e30aa5cdf96e073ae593f644ca0e7f334b1979d16b436e624747e9c86cd985d126bc7495dc27d010347f7a76266894de2ec5d2c9e460e723b0857313e17a17a6a2ad9983867cb78dc5dd3eec56056fcf4a76acf11af6e74fa9c08dc30df7590fccc00e8e972736397ba8680fd56f2fd3758d628c3c93c4222ded9de6b2341cd49325af64d48de4e1c62dea24b19e82f3ae3cf1212671774b510d2e2c18141b5b0ca54376d311443bf5bea59d9f07cb83767904e644a5cb77830f4f7f92de93dd6498ad091384d8899fea4d539ea6dd9178b07bcb47704e37ce6412ab52e24108c890848f9ae08f3c7bd72362cea73dfd0ffc8b77baab1fb43f9b2247f3c20e1a67839ddb28ba7ebef67abe121c3f55d1b63cf32698e068ed11b514f23b8762d55e6394613bb895b5f6bd256ca0732acb067f916bdce9120dffa8a9473815ccd35b3d622ee25ffb98bbdbd17955a0694cac0a64254ae997a9a15137b7f923f611a1adaea3fb6ef547d5a3be44a14be44202b1679968ded791d3a7632cdf4cd3c762d022cc3109e0b10b62b3e779836756ca3bb65a1c8a7fff871113f1975b556831aaaba1850acf0953383e223d3371ae4753a323dda2ea9298cf94c15abb084f8548672b257225544adb2b5eb8fa348a32a20f15d6873bf5dabde8fd89a76903d6f75e0c57c4d6918a3c3120ba5e5cb955cf224a17bd49bb08212d585ce979199247a40757ab81d9e1fbddbb14f015908a9aee690382cb07557beb1b157f5a3b279615d5b7c64a83d229a87cd16a6d401c06dc84ae286075c4d634e6f91dc7a284bbfc1795acedb1fd43c5c2e8ed6fa237e3d06a69b4fb83aa47a12e4ef83a5c5741d85d8342247d4d979601b66867313b1b8f19f769d13c9fbf6c1b2e272d0b0e875743c138ef0c014e1d8985642b029d35aa073d283da1367e869561913a1a0463cf3cc6c41835dcb60d69f6f71aafeede9bc6987c4a68c9e0fb3c1986433e6e45d23a5b03ec664b00cf6a207a8e7dccf7d493bee9a44331e8c1ed92d5cec7afd206d3a3cb78f213b4d2aa8c1c9b0730d818747ddf1027aeb8684944c5b9696ea935f55b5be94f69bdcecc50186cff82a73de8bd231314d9217b6089b8cd8a292793f1fdec1c5af1a2df89c1e300d2fb93516d56060e08f7e4c50b5f227325d0908677653d64dc5cf838f39e271ad79f0033b6b2a5611d5d1f9bb984e6f7d735c5bf0924d873e20e5869bd6d94d9f0994a78614dec3f36325299d189293dc5a4df8cbad29d1fd7f9b51c1c9e48e2238aaff3243cd346deb4ba8545af524776300f648c6728b0f97d17f7ec45daddd62478890a166e7db997047df69ded08cc4d9d8297259dc4100c88359c880dc855ffd5ef3b0922a5b00dae3daeb70441e15dffb415adafaaafb5f5c03b610a3c9903662c236e23baf01337a669f5e174cca1ec79ad7f3cd8635fdcea958cb67400bd01dd03a845fe820f0e7f19776867f247e9c2536ad2776de00480246ace33002c284d7a8929d1e708da9059212ae6d7da49afb9222c97983529158f69bbdbd8f502daae24aef87d0d8a4085dd0740ad1f33178b52447f43192acab0b9aa777262142ec29befefc95de9637f3cb7dff186af2020378870015feadf7b4bf66959cc81543ae33312e4ae3e9c152a65eb76df86b788d11a8534227a8d7e330ef48f5a1069ce4152bc6b311e4636d480272527fcc60c5c3aebbb513d06246ef52e33e7cca789f106ca53df689353c3a518c6dd4719a073f83ea70e1b37c312d216ef26f806f13ddb40e12e3c8b31ccab1440fcd2a2f2f7766997a610a1ad51108163ab4da30219c9a5a2545b19041bdff4e2569f3c281784ac3982de68af9405d634ea1c8d814d0f15b946a1e2130a2995e2d2330be135f21bf5abeb851c65cc3227aff2ce2d88325436409d725a5523253a722af8360a0dee622adc4690ae49f6c3445d2bc4ae75595874849b54798724a0a9f6161caeb83ad17c2d7325524d9acb94e80c7626458167e624f62e9dbf2c49ea52f8c978481f6fdce7222a4c353d8a77034d7a3e3237d253ce3402553ae63a4519298e96b534bab3aadba3dbae70c07fa06e03f89b711e1deb0e9f4dacbad30374777a2710dec408fb8531acb5d89376c07b5673cac6e361935", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r4, 0xffffffffffffffff, 0x1) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000840)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r6, r3, 0x0, 0x3a) move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) 8.015056476s ago: executing program 2 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x330, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) dup(0xffffffffffffffff) listen(0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x7ab8}], 0x1}}], 0x1, 0x0) 7.564214117s ago: executing program 5 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) wait4(0x0, 0x0, 0x8, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mkdir(0x0, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) 5.911524913s ago: executing program 5 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) fsopen(0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x84400, 0x0) 5.158201097s ago: executing program 2 (id=742): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2108c8a, &(0x7f0000000240)={[{@data_ordered}, {@journal_async_commit}, {@barrier_val={'barrier', 0x3d, 0x401}}, {@jqfmt_vfsold}, {@delalloc}, {@grpquota}]}, 0x1, 0x489, &(0x7f0000001980)="$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") syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000036c0)=ANY=[@ANYBLOB='map=off,mode=0x00000000000000ec,session=0x000000000000003c,nocompress,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c72736574211b703935302c6f76657272696465726f636b7065726d2c00617ec5ca6c0cf8ebbe94739d4b1cb0e8946c72769d9c51017ae0a8fee63683e50bb615f098113a266e65d1d357d0ef714202e6f5db23f4d4d53ab4ff01ff7f000000007734e9ba5e8c0898aef4b7575784be11e694eea090c8f11a5941e4f1ca18db6d882dbb0e0c6e5d03a9fabe4249d08f0f75f05550566b4f733785683d8c25af94b63a0cded9ff2fdcdd833d0120579e996a174c16124ef563da6e2df5104a03577cb15d75a9fce9d3a20e2ba5c4450b379c00"/221], 0x1, 0x552, &(0x7f0000002b80)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lstat(0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c804, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0xa01f, 0x100000000) getdents(r0, 0x0, 0x0) getdents(r2, 0xfffffffffffffffd, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000600)={0x2, @pix_mp={0x3, 0xfffff549, 0x59455247, 0x0, 0x5, [{0x6, 0xfffffff7}, {0x3, 0x1}, {0x7, 0x2}, {0x2, 0xe8}, {0x0, 0x4}, {0x8, 0xb}, {0x8}, {0x1a3b, 0x18f674ba}], 0x1, 0xb, 0x6, 0x2, 0x7}}) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x8) 3.960984541s ago: executing program 2 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x7005, 0x0) pipe2(&(0x7f0000000200), 0x80800) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x12101497}]}, 0x2c}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4]) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) 3.960681601s ago: executing program 6 (id=744): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_io_uring_setup(0x23c, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x0) io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r7, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) 2.444402468s ago: executing program 6 (id=745): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x200, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) shutdown(r3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) 169.233548ms ago: executing program 36 (id=727): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x3, 0x21f, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x9, 0x2, 0x0, [0xb37, 0x3b2e, 0x7, 0x1, 0x9, 0x7bc3, 0x8f2e, 0x2e]}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x113602) 190.35µs ago: executing program 2 (id=748): mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0x1df) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) unshare(0x22020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='clear_refs\x00') exit(0xfffffffffffffffd) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x3, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="58e2", 0x2, 0x89a643c95679b487, &(0x7f000005ffe4)={0xa, 0x4e23, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x19}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) kernel console output (not intermixed with test programs): ][ T4266] RAX: 0000000000000000 RBX: 00007f85cf032048 RCX: 00007f85cef9da57 [ 104.310489][ T4266] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7e86c010 [ 104.319226][ T4266] RBP: 00007ffc7e86c010 R08: 00007ffc7e86d010 R09: 00000000ffffffff [ 104.327315][ T4266] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7e86d0a0 [ 104.335492][ T4266] R13: 00007f85cf032048 R14: 0000000000018451 R15: 00007ffc7e86d0e0 [ 104.343852][ T4266] [ 106.369967][ T4758] loop1: detected capacity change from 0 to 128 [ 106.614766][ T4763] loop2: detected capacity change from 0 to 128 [ 106.767350][ T4764] block device autoloading is deprecated and will be removed. [ 109.298443][ T4795] fuse: Unknown parameter 'grou00000000000000000000' [ 110.102751][ T4813] loop2: detected capacity change from 0 to 128 [ 112.375320][ T4841] fuse: Unknown parameter 'grou00000000000000000000' [ 112.500404][ T4831] loop2: detected capacity change from 0 to 40427 [ 112.542683][ T4831] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 112.600887][ T4831] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.717519][ T4831] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.724341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 112.948614][ T4831] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 112.981607][ T4831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.412504][ T32] kworker/u4:2: attempt to access beyond end of device [ 114.412504][ T32] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 115.214099][ T4892] fuse: Unknown parameter 'grou00000000000000000000' [ 115.465748][ T4896] loop4: detected capacity change from 0 to 32768 [ 115.500284][ T4896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.113 (4896) [ 115.552230][ T4896] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.563257][ T4896] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 115.573124][ T4896] BTRFS info (device loop4): turning on sync discard [ 115.580486][ T4896] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.590152][ T4896] BTRFS info (device loop4): use zstd compression, level 3 [ 115.597656][ T4896] BTRFS info (device loop4): turning on async discard [ 115.604813][ T4896] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 115.616118][ T4896] BTRFS info (device loop4): trying to use backup root at mount time [ 115.624760][ T4896] BTRFS info (device loop4): enabling auto defrag [ 115.631784][ T4896] BTRFS info (device loop4): using free space tree [ 115.805942][ T4905] netlink: 'syz.2.114': attribute type 4 has an invalid length. [ 115.888301][ T4905] netlink: 'syz.2.114': attribute type 4 has an invalid length. [ 116.054950][ T4883] loop0: detected capacity change from 0 to 32768 [ 116.126193][ T4793] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 116.171085][ T4883] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.110 (4883) [ 116.217963][ T4896] BTRFS error (device loop4): failed to load root extent [ 116.225894][ T4896] BTRFS warning (device loop4): try to load backup roots slot 1 [ 116.235413][ T4329] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 116.280101][ T4883] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.319566][ T4883] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 116.322671][ T4896] BTRFS warning (device loop4): couldn't read tree root [ 116.329133][ T4883] BTRFS info (device loop0): using free space tree [ 116.336286][ T4896] BTRFS warning (device loop4): try to load backup roots slot 2 [ 116.357356][ T4896] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 116.369182][ T4896] BTRFS warning (device loop4): couldn't read tree root [ 116.376374][ T4896] BTRFS warning (device loop4): try to load backup roots slot 3 [ 116.405346][ T4896] BTRFS info (device loop4): enabling ssd optimizations [ 116.414735][ T4896] BTRFS info (device loop4): rebuilding free space tree [ 116.430042][ T4896] BTRFS info (device loop4): checking UUID tree [ 116.464021][ T4883] BTRFS info (device loop0): enabling ssd optimizations [ 116.815178][ T4275] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.884339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 117.765485][ T4266] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.215411][ T4969] fuse: Unknown parameter 'group_i00000000000000000000' [ 118.269033][ T4348] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4348) [ 119.405817][ T4993] device syzkaller0 entered promiscuous mode [ 120.059337][ T5001] loop1: detected capacity change from 0 to 32768 [ 121.085555][ T5015] fuse: Unknown parameter 'group_i00000000000000000000' [ 122.491771][ T5054] kvm: pic: non byte write [ 122.786697][ T5066] fuse: Unknown parameter 'group_i00000000000000000000' [ 123.902218][ T5080] pit: kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 123.940589][ T5080] pit: kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 123.995029][ T5080] pit: kvm: requested 163428 ns i8254 timer period limited to 200000 ns [ 124.030764][ T5080] pit: kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 124.064906][ T5080] pit: kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 124.089772][ T5080] pit: kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 124.147771][ T5086] kvm: pic: non byte write [ 124.158382][ T5086] kvm: pic: non byte write [ 124.171248][ T5080] pit: kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 124.171523][ T5086] kvm: pic: non byte write [ 124.216078][ T5080] pit: kvm: requested 141638 ns i8254 timer period limited to 200000 ns [ 124.216250][ T5086] kvm: pic: non byte write [ 124.236722][ T5080] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 124.263508][ T5086] kvm: pic: non byte write [ 124.279388][ T5086] kvm: pic: non byte write [ 124.289634][ T5080] pit: kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 124.293519][ T5086] kvm: pic: non byte write [ 124.324530][ T5086] kvm: pic: non byte write [ 124.337632][ T5086] kvm: pic: non byte write [ 124.353343][ T5086] kvm: pic: non byte read [ 124.454050][ T5069] loop1: detected capacity change from 0 to 40427 [ 124.506133][ T5069] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 124.535249][ T5069] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 124.587742][ T5069] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.730644][ T5069] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 124.763290][ T5069] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.195711][ T5113] fuse: Unknown parameter 'group_id00000000000000000000' [ 125.659295][ T5007] kworker/u4:12: attempt to access beyond end of device [ 125.659295][ T5007] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 127.140988][ T5150] loop3: detected capacity change from 0 to 128 [ 128.046977][ T5156] fuse: Unknown parameter 'group_id00000000000000000000' [ 128.441365][ T5163] device syzkaller0 entered promiscuous mode [ 130.696924][ T5193] fuse: Unknown parameter 'group_id00000000000000000000' [ 130.762337][ T5189] loop3: detected capacity change from 0 to 4096 [ 131.367713][ T4277] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 131.383369][ T4277] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 131.498865][ T5207] loop4: detected capacity change from 0 to 4096 [ 131.667955][ T4333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.704342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 131.724356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 131.734346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 132.116805][ T4333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.160145][ T5195] loop1: detected capacity change from 0 to 32768 [ 132.229882][ T26] audit: type=1800 audit(1775629048.112:4): pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.192" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 132.302894][ T4333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.519336][ T4275] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 132.578390][ T4275] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 132.675163][ T4281] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.008647][ T4333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.047864][ T4281] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.084229][ T4281] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 133.129297][ T4281] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.139574][ T4281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.170954][ T5215] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 133.201403][ T5224] loop4: detected capacity change from 0 to 256 [ 133.209935][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.216712][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.597582][ T5224] futex_wake_op: syz.4.203 tries to shift op by -1; fix this program [ 134.282995][ T5243] fuse: Bad value for 'fd' [ 134.640236][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.655722][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.665104][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.673447][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.684424][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 134.692011][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.035591][ T4477] usb 2-1: USB disconnect, device number 2 [ 135.617164][ T5258] binder: BINDER_SET_CONTEXT_MGR already set [ 135.704531][ T5258] binder: 5257:5258 ioctl 4018620d 200000004a80 returned -16 [ 135.721886][ T5261] binder: 5257:5261 ioctl c0306201 0 returned -14 [ 136.826289][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 137.030550][ T5281] loop1: detected capacity change from 0 to 512 [ 137.047120][ T4477] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.096584][ T5281] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 137.162008][ T5281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.244629][ T4477] usb 4-1: Using ep0 maxpacket: 16 [ 137.253323][ T4477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.257746][ T5281] EXT4-fs (loop1): 1 orphan inode deleted [ 137.281085][ T4477] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.294431][ T4477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.303651][ T4477] usb 4-1: Product: syz [ 137.308646][ T4477] usb 4-1: Manufacturer: syz [ 137.314119][ T4477] usb 4-1: SerialNumber: syz [ 137.330301][ T4477] usb 4-1: config 0 descriptor?? [ 137.347339][ T4477] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 137.357348][ T4477] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 137.374544][ T5281] EXT4-fs (loop1): 1 truncate cleaned up [ 137.396151][ T5281] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.491561][ T5281] EXT4-fs error (device loop1): empty_inline_dir:1895: inode #12: block 7: comm syz.1.213: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 137.633974][ T5281] EXT4-fs (loop1): Remounting filesystem read-only [ 137.718594][ T5281] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 138.006098][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 138.034697][ T4477] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 138.130975][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 138.405599][ T4333] device hsr_slave_0 left promiscuous mode [ 138.418726][ T4333] device hsr_slave_1 left promiscuous mode [ 138.430698][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.439597][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.452726][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.494482][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.515532][ T4477] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 138.538748][ T4333] device bridge_slave_1 left promiscuous mode [ 138.546684][ T4477] em28xx 4-1:0.0: board has no eeprom [ 138.549889][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.752069][ T4333] device bridge_slave_0 left promiscuous mode [ 138.767819][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.884743][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 138.953601][ T4333] device veth1_macvtap left promiscuous mode [ 138.960775][ T4333] device veth0_macvtap left promiscuous mode [ 138.971046][ T4333] device veth1_vlan left promiscuous mode [ 138.977827][ T4333] device veth0_vlan left promiscuous mode [ 139.284589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 139.294351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 139.304318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 139.314314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 139.688418][ T5283] em28xx 4-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 139.754889][ T4477] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 139.764849][ T4477] em28xx 4-1:0.0: dvb set to bulk mode. [ 139.824731][ T4477] usb 4-1: USB disconnect, device number 2 [ 139.857433][ T4477] em28xx 4-1:0.0: Disconnecting em28xx [ 139.868738][ T4319] em28xx 4-1:0.0: Binding DVB extension [ 139.888847][ T4333] team0 (unregistering): Port device bridge1 removed [ 140.113834][ T5333] loop4: detected capacity change from 0 to 512 [ 140.167784][ T4319] em28xx 4-1:0.0: Registering input extension [ 140.193939][ T4477] em28xx 4-1:0.0: Closing input extension [ 140.261585][ T5333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 140.281538][ T4477] em28xx 4-1:0.0: Freeing device [ 140.291525][ T5333] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.002024][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 141.627746][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 142.331486][ T5365] fuse: Bad value for 'user_id' [ 143.054627][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 143.281967][ T5376] loop1: detected capacity change from 0 to 4096 [ 144.301512][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 144.615793][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 144.990674][ T4278] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 145.013456][ T4278] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 145.045616][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.265959][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.306592][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 145.504512][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 145.544996][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 145.575029][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.636716][ T7] usb 3-1: config 0 descriptor?? [ 145.676594][ T7] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 146.871730][ T7] gspca_sonixj: reg_w1 err -110 [ 146.894520][ T7] sonixj: probe of 3-1:0.0 failed with error -110 [ 147.112608][ T5401] syz.1.237 uses old SIOCAX25GETINFO [ 148.102081][ T4323] usb 3-1: USB disconnect, device number 2 [ 148.269195][ T4333] bond0 (unregistering): Released all slaves [ 148.815742][ T4323] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.847890][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.893464][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.946640][ T5247] device bridge_slave_0 entered promiscuous mode [ 149.005851][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.118622][ T4323] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 149.136026][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.148255][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.196346][ T5247] device bridge_slave_1 entered promiscuous mode [ 149.654423][ T4323] usb 4-1: Product: syz [ 149.665514][ T4323] usb 4-1: Manufacturer: syz [ 149.674492][ T4323] usb 4-1: SerialNumber: syz [ 149.967696][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.047443][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.059702][ T4323] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 150.125769][ T4323] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 150.485578][ T5437] loop4: detected capacity change from 0 to 32768 [ 150.622286][ T5247] team0: Port device team_slave_0 added [ 151.268324][ T5247] team0: Port device team_slave_1 added [ 151.610557][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.639816][ T5443] sctp: failed to load transform for md5: -2 [ 151.686389][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.861334][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.316076][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.498523][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.873773][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.015932][ T4323] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -71 [ 153.071834][ T4323] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 153.103493][ T4323] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 153.155212][ T5247] device hsr_slave_0 entered promiscuous mode [ 153.173644][ T4323] lan78xx: probe of 4-1:1.0 failed with error -71 [ 153.181433][ T5247] device hsr_slave_1 entered promiscuous mode [ 153.230431][ T4323] usb 4-1: USB disconnect, device number 3 [ 153.320575][ T5468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 153.670851][ T5484] random: crng reseeded on system resumption [ 155.132479][ T5247] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.199410][ T5247] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.268885][ T5247] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.309970][ T5247] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.481364][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.509192][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.520759][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.547693][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.574560][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.592646][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.612706][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.620724][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.649826][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.672183][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.712059][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.741406][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.749272][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.796816][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.819290][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.856698][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.885781][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.975325][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.014976][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.077015][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.115133][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.145572][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.191989][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.230456][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.300188][ T5519] loop4: detected capacity change from 0 to 512 [ 157.373905][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.306423][ T5535] loop4: detected capacity change from 0 to 2048 [ 158.411848][ T5535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.016359][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.045320][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.096574][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.246652][ T5552] loop4: detected capacity change from 0 to 512 [ 160.354948][ T5552] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.438094][ T5552] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 160.461942][ T5555] device syzkaller0 entered promiscuous mode [ 162.735992][ T5579] device syzkaller0 entered promiscuous mode [ 167.562932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.601801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.649184][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.675773][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.703618][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.733110][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.763038][ T5247] device veth0_vlan entered promiscuous mode [ 167.802155][ T5247] device veth1_vlan entered promiscuous mode [ 167.850246][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.870673][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.896682][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.932357][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.986138][ T5247] device veth0_macvtap entered promiscuous mode [ 168.009057][ T5247] device veth1_macvtap entered promiscuous mode [ 168.016065][ T4468] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 168.133552][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.156683][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.159760][ T5619] loop1: detected capacity change from 0 to 128 [ 168.169645][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.196237][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.235077][ T4468] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 168.289899][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.295987][ T4468] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.315229][ T4468] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.345554][ T4468] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.356609][ T4468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.752776][ T4468] usb 4-1: invalid MIDI out EP 0 [ 168.783109][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.904476][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.937951][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.110437][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.944064][ T4468] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 170.013825][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.037548][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.100033][ T4708] udevd[4708]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.123760][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.139927][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.156602][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.168149][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.179569][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.198914][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.214437][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.226691][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.238853][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.252382][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.280363][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.290291][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.300861][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.321000][ T5247] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.340462][ T5247] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.363647][ T5247] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.387086][ T5247] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.656407][ T5638] loop2: detected capacity change from 0 to 8192 [ 170.692222][ T5638] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.710074][ T5638] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 170.722290][ T5638] REISERFS (device loop2): using ordered data mode [ 170.731171][ T5638] reiserfs: using flush barriers [ 170.747857][ T5638] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.767326][ T5638] REISERFS (device loop2): checking transaction log (loop2) [ 170.813646][ T5638] REISERFS (device loop2): Using rupasov hash to sort names [ 170.837803][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.880524][ T5638] REISERFS (device loop2): using 3.5.x disk format [ 170.883991][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.918580][ T5638] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 170.977568][ T5638] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.014634][ T4323] usb 4-1: USB disconnect, device number 4 [ 171.068588][ T5638] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.096540][ T5638] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 171.124005][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.164804][ T5638] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 171.231523][ T4700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.252729][ T4700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.300115][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.571595][ T5652] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.584835][ T5652] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 172.646802][ T5659] loop5: detected capacity change from 0 to 128 [ 174.086675][ T5678] device syzkaller0 entered promiscuous mode [ 174.442208][ T5683] device syzkaller0 entered promiscuous mode [ 174.653094][ T5688] tipc: Started in network mode [ 174.705804][ T5688] tipc: Node identity f64f7a7f5948, cluster identity 4711 [ 174.741807][ T5688] tipc: Enabled bearer , priority 0 [ 174.767722][ T5689] loop4: detected capacity change from 0 to 4096 [ 174.782488][ T5690] device syzkaller0 entered promiscuous mode [ 175.001787][ T5699] device syzkaller0 entered promiscuous mode [ 176.045329][ T4319] tipc: Node number set to 2936502911 [ 176.088789][ T5690] tipc: Resetting bearer [ 176.135523][ T5685] tipc: Resetting bearer [ 176.388403][ T5685] tipc: Disabling bearer [ 176.845970][ T5703] loop2: detected capacity change from 0 to 32768 [ 177.050009][ T4275] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 177.301495][ T4275] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 178.916290][ T5714] binder: 5713:5714 ioctl c0306201 200000000180 returned -14 [ 178.940241][ T5717] loop3: detected capacity change from 0 to 4096 [ 179.685315][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 179.726534][ T5729] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.372117][ T5742] device syzkaller0 entered promiscuous mode [ 182.340069][ T5765] loop1: detected capacity change from 0 to 128 [ 184.278755][ T5771] loop2: detected capacity change from 0 to 128 [ 189.933433][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 189.944472][ T4268] Bluetooth: hci5: command 0x1003 tx timeout [ 191.323990][ T5826] ufs: You didn't specify the type of your ufs filesystem [ 191.323990][ T5826] [ 191.323990][ T5826] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 191.323990][ T5826] [ 191.323990][ T5826] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 191.359982][ T5826] ufs: ufstype=old is supported read-only [ 191.497270][ T5826] ufs: ufs_fill_super(): bad magic number [ 192.433132][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.444115][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.452482][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.653372][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.660106][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.620992][ T5861] netlink: 44 bytes leftover after parsing attributes in process `syz.5.329'. [ 197.259211][ T5864] loop1: detected capacity change from 0 to 4096 [ 199.128996][ T5884] device syzkaller0 entered promiscuous mode [ 199.211193][ T4278] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 199.218870][ T4278] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 199.316329][ T5886] input: syz0 as /devices/virtual/input/input6 [ 200.714378][ T1201] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 201.878701][ T1201] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 201.878779][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 201.889332][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 201.896452][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 201.922205][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 202.102650][ T1201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.277615][ T1201] usb 3-1: Product: syz [ 202.368659][ T1201] usb 3-1: Manufacturer: syz [ 202.459352][ T1201] usb 3-1: SerialNumber: syz [ 202.735442][ T5917] Bluetooth: MGMT ver 1.22 [ 202.879047][ T1201] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 202.944895][ T1201] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 203.070945][ T5925] device syzkaller0 entered promiscuous mode [ 203.355195][ T4477] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 203.687053][ T4477] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.718078][ T4477] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.813782][ T4477] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 204.370379][ T4477] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.431328][ T4477] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 204.492882][ T4477] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.544438][ T4477] usb 6-1: Product: syz [ 204.743585][ T4477] usb 6-1: Manufacturer: syz [ 204.778081][ T4477] cdc_wdm 6-1:1.0: skipping garbage [ 204.783474][ T4477] cdc_wdm 6-1:1.0: skipping garbage [ 205.602579][ T1201] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71 [ 205.718932][ T4477] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 205.724512][ T1201] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 205.725371][ T4477] cdc_wdm 6-1:1.0: Unknown control protocol [ 205.814813][ T4477] usb 6-1: USB disconnect, device number 2 [ 205.841095][ T1201] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 206.372093][ T5951] loop1: detected capacity change from 0 to 40427 [ 206.412783][ T5951] F2FS-fs (loop1): invalid crc value [ 206.430360][ T5951] F2FS-fs (loop1): Found nat_bits in checkpoint [ 206.454518][ T4477] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 206.512166][ T5951] F2FS-fs (loop1): Start checkpoint disabled! [ 206.588915][ T5951] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 206.673444][ T1201] lan78xx: probe of 3-1:1.0 failed with error -71 [ 206.973483][ T1201] usb 3-1: USB disconnect, device number 3 [ 206.979407][ T4477] usb 6-1: device descriptor read/all, error -71 [ 207.618710][ T5967] loop3: detected capacity change from 0 to 128 [ 208.772238][ T5728] kworker/u4:20: attempt to access beyond end of device [ 208.772238][ T5728] loop1: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 208.856467][ T5728] kworker/u4:20: attempt to access beyond end of device [ 208.856467][ T5728] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 209.845045][ T4268] Bluetooth: hci5: command 0x1003 tx timeout [ 209.854402][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 213.075133][ T6000] loop5: detected capacity change from 0 to 32768 [ 214.438219][ T6017] netlink: 164 bytes leftover after parsing attributes in process `syz.3.360'. [ 215.647772][ T6022] loop2: detected capacity change from 0 to 64 [ 217.345244][ T6034] loop3: detected capacity change from 0 to 64 [ 217.486225][ T6035] loop5: detected capacity change from 0 to 1024 [ 220.370833][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.385368][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.395484][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.338959][ T6045] device syzkaller0 entered promiscuous mode [ 221.818290][ T6061] loop3: detected capacity change from 0 to 128 [ 223.478871][ T6070] loop1: detected capacity change from 0 to 256 [ 223.507270][ T6070] FAT-fs (loop1): Directory bread(block 64) failed [ 223.514843][ T6070] FAT-fs (loop1): Directory bread(block 65) failed [ 223.522021][ T6070] FAT-fs (loop1): Directory bread(block 66) failed [ 223.529235][ T6070] FAT-fs (loop1): Directory bread(block 67) failed [ 223.536002][ T6070] FAT-fs (loop1): Directory bread(block 68) failed [ 223.543172][ T6070] FAT-fs (loop1): Directory bread(block 69) failed [ 223.550388][ T6070] FAT-fs (loop1): Directory bread(block 70) failed [ 223.557665][ T6070] FAT-fs (loop1): Directory bread(block 71) failed [ 223.564944][ T6070] FAT-fs (loop1): Directory bread(block 72) failed [ 223.572724][ T6070] FAT-fs (loop1): Directory bread(block 73) failed [ 225.042373][ T6093] loop4: detected capacity change from 0 to 128 [ 225.417200][ T6093] syz.4.378: attempt to access beyond end of device [ 225.417200][ T6093] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 225.540288][ T4281] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 226.057443][ T4281] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 226.088766][ T4281] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.127436][ T4281] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.204378][ T4281] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.281723][ T4281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.406617][ T4281] usb 6-1: invalid MIDI out EP 0 [ 226.590596][ T6105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.604644][ T6105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.613491][ T6105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.752081][ T4281] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 228.763559][ T6112] loop1: detected capacity change from 0 to 1024 [ 230.345278][ T4281] usb 6-1: USB disconnect, device number 5 [ 230.595548][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.417013][ T6121] loop2: detected capacity change from 0 to 128 [ 233.316860][ T4281] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 233.528427][ T4281] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 233.568430][ T4281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.645362][ T4281] usb 5-1: Product: syz [ 233.670278][ T4281] usb 5-1: Manufacturer: syz [ 233.693238][ T4281] usb 5-1: SerialNumber: syz [ 233.756939][ T4281] usb 5-1: config 0 descriptor?? [ 234.472254][ T4281] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 234.551201][ T6131] loop2: detected capacity change from 0 to 8192 [ 234.619699][ T6131] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.721816][ T6131] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 234.780270][ T6131] REISERFS (device loop2): using ordered data mode [ 234.808083][ T6131] reiserfs: using flush barriers [ 234.873903][ T6131] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.916601][ T6131] REISERFS (device loop2): checking transaction log (loop2) [ 237.086283][ T4281] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 237.316395][ T4281] usb 5-1: USB disconnect, device number 2 [ 237.396700][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'. [ 237.421537][ T6131] REISERFS (device loop2): Using r5 hash to sort names [ 237.445472][ T6131] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 238.729074][ T6163] loop1: detected capacity change from 0 to 128 [ 239.784872][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.795978][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.804037][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.540017][ T6177] loop4: detected capacity change from 0 to 512 [ 240.684522][ T6177] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 241.125189][ T6177] EXT4-fs (loop4): 1 orphan inode deleted [ 241.194356][ T6177] EXT4-fs (loop4): 1 truncate cleaned up [ 241.201124][ T6177] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 241.313465][ T6177] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz.4.397: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 241.407501][ T6177] EXT4-fs (loop4): Remounting filesystem read-only [ 241.454534][ T6177] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 242.327749][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 242.652735][ T6188] loop1: detected capacity change from 0 to 32768 [ 243.258276][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 243.505202][ T4270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.519712][ T4270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.531496][ T4270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.541509][ T4270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.552963][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 243.563388][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.841096][ T5228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.073744][ T6206] tipc: Enabling of bearer rejected, failed to enable media [ 246.235762][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 246.261531][ T5228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.644164][ T5228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.331323][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 248.583692][ T5228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.917387][ T6247] loop1: detected capacity change from 0 to 128 [ 248.929247][ T26] audit: type=1800 audit(1775629164.812:5): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.404" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 248.937183][ T6223] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 249.920112][ T6223] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 249.987092][ T5228] tipc: Left network mode [ 249.997296][ T6223] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 250.021961][ T6196] chnl_net:caif_netlink_parms(): no params data found [ 250.404383][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 251.282169][ T6258] loop2: detected capacity change from 0 to 32768 [ 251.714627][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 252.484419][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 253.361275][ T6223] syz.4.404 (6223) used greatest stack depth: 20120 bytes left [ 253.931903][ T6278] loop4: detected capacity change from 0 to 2364 [ 254.811793][ T6277] loop1: detected capacity change from 0 to 4096 [ 254.880525][ T6277] ntfs3: loop1: Failed to load $Volume. [ 254.999146][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.044837][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.053396][ T6196] device bridge_slave_0 entered promiscuous mode [ 255.724977][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.732517][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.748674][ T6277] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 255.799883][ T6196] device bridge_slave_1 entered promiscuous mode [ 255.826628][ T6277] netlink: 'syz.1.415': attribute type 2 has an invalid length. [ 256.101914][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.109666][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.541410][ T6301] loop5: detected capacity change from 0 to 128 [ 256.569427][ T6196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.745089][ T6196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.611127][ T6196] team0: Port device team_slave_0 added [ 257.902084][ T6196] team0: Port device team_slave_1 added [ 258.164391][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 258.245495][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.291024][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.354428][ T6196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.368694][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.377048][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.413842][ T6196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.438184][ T6325] fuse: Unknown parameter 'user_id00000000000000000000' [ 259.184157][ T6196] device hsr_slave_0 entered promiscuous mode [ 259.263271][ T6196] device hsr_slave_1 entered promiscuous mode [ 259.332340][ T6196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.455683][ T6196] Cannot create hsr debugfs directory [ 262.592504][ T5228] device hsr_slave_0 left promiscuous mode [ 262.736133][ T5228] device hsr_slave_1 left promiscuous mode [ 262.917058][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.109565][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.161025][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.206305][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.251090][ T5228] device bridge_slave_1 left promiscuous mode [ 263.277009][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.339657][ T5228] device bridge_slave_0 left promiscuous mode [ 263.355659][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.494925][ T5228] device veth1_macvtap left promiscuous mode [ 263.502738][ T5228] device veth0_macvtap left promiscuous mode [ 263.510131][ T6365] loop1: detected capacity change from 0 to 128 [ 263.526346][ T6363] random: crng reseeded on system resumption [ 263.554911][ T5228] device veth1_vlan left promiscuous mode [ 263.562683][ T5228] device veth0_vlan left promiscuous mode [ 265.648787][ T5228] team0 (unregistering): Port device team_slave_1 removed [ 265.750116][ T5228] team0 (unregistering): Port device team_slave_0 removed [ 265.814572][ T5228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.881749][ T5228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.368807][ T5228] bond0 (unregistering): Released all slaves [ 267.886369][ T6394] tipc: Started in network mode [ 267.891790][ T6394] tipc: Node identity d61fc7021be1, cluster identity 4711 [ 267.943358][ T6394] tipc: Enabled bearer , priority 0 [ 268.527194][ T6394] device syzkaller0 entered promiscuous mode [ 268.779280][ T6196] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 268.880175][ T6394] tipc: Resetting bearer [ 268.927388][ T6196] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 268.973339][ T6196] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 269.037493][ T6393] tipc: Resetting bearer [ 269.127302][ T6393] tipc: Disabling bearer [ 269.178209][ T6196] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.291123][ T6421] device syzkaller0 entered promiscuous mode [ 269.334601][ T6427] device syzkaller0 entered promiscuous mode [ 269.923029][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 270.938366][ T6461] loop4: detected capacity change from 0 to 128 [ 272.556844][ T6469] loop5: detected capacity change from 0 to 1764 [ 277.104805][ T6486] loop5: detected capacity change from 0 to 128 [ 277.999780][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.080267][ T6196] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.185099][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.234939][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.275044][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.303194][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.357282][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.365181][ T5228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.426960][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.456240][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.491007][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.552441][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.560180][ T5228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.655328][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.724603][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.761064][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.815710][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.835328][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.852144][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.862412][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.889900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.903720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.945761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.959611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.977163][ T6196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.996914][ T4353] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 279.216348][ T4353] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 279.248396][ T4353] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.282415][ T4353] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.318278][ T4353] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.344288][ T4353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.431467][ T4353] usb 3-1: invalid MIDI out EP 0 [ 279.566374][ T4353] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 279.655435][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.949797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.958278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.188060][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.894490][ T4353] usb 3-1: USB disconnect, device number 4 [ 282.112907][ T6545] tipc: Started in network mode [ 282.172807][ T6545] tipc: Node identity 92bf2433fa99, cluster identity 4711 [ 282.256324][ T6545] tipc: Enabled bearer , priority 0 [ 282.281948][ T6548] device syzkaller0 entered promiscuous mode [ 282.375597][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.422278][ T6545] tipc: Resetting bearer [ 282.800523][ T6547] device syzkaller0 entered promiscuous mode [ 282.826117][ T6544] tipc: Resetting bearer [ 283.185481][ T6544] tipc: Disabling bearer [ 284.506406][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 284.753487][ T6583] loop4: detected capacity change from 0 to 32768 [ 284.768615][ T6583] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 286.442566][ T4424] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 289.249480][ T6618] sctp: [Deprecated]: syz.4.476 (pid 6618) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.249480][ T6618] Use struct sctp_sack_info instead [ 295.318848][ T6641] loop2: detected capacity change from 0 to 512 [ 295.327901][ T6641] FAT-fs (loop2): Unrecognized mount option "dmask=0000=000000000000000000" or missing value [ 295.413029][ T4424] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 295.457862][ T6641] loop2: detected capacity change from 0 to 1024 [ 295.682662][ T6641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 296.439151][ T6654] loop1: detected capacity change from 0 to 2364 [ 297.422304][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.598936][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.162252][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 299.182270][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.524317][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.579271][ T6196] device veth0_vlan entered promiscuous mode [ 300.601827][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.616831][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.648199][ T6196] device veth1_vlan entered promiscuous mode [ 300.762033][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.806463][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.432055][ T6687] device syzkaller0 entered promiscuous mode [ 302.531821][ T6698] loop2: detected capacity change from 0 to 512 [ 302.615355][ T6698] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 302.791212][ T6698] EXT4-fs (loop2): 1 truncate cleaned up [ 302.855664][ T6698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 303.321009][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.343143][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.353677][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.363081][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.371532][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 303.381475][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.223489][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 305.273236][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 305.446428][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 307.524456][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 308.602710][ T6730] loop5: detected capacity change from 0 to 32768 [ 309.624439][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 311.070044][ T6702] chnl_net:caif_netlink_parms(): no params data found [ 311.684440][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 311.950012][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.997435][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.054361][ T6702] device bridge_slave_0 entered promiscuous mode [ 312.559820][ T6702] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.579923][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.622505][ T6702] device bridge_slave_1 entered promiscuous mode [ 312.998574][ T6702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.243304][ T4477] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 313.904521][ T4477] usb 5-1: Using ep0 maxpacket: 32 [ 313.972765][ T6773] loop2: detected capacity change from 0 to 128 [ 315.397758][ T6702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.497238][ T4477] usb 5-1: config 0 has no interfaces? [ 315.508414][ T4477] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 315.517931][ T4477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.526897][ T4477] usb 5-1: Product: syz [ 315.531707][ T4477] usb 5-1: Manufacturer: syz [ 315.536827][ T4477] usb 5-1: SerialNumber: syz [ 315.553628][ T4477] usb 5-1: config 0 descriptor?? [ 315.795772][ T6702] team0: Port device team_slave_0 added [ 315.845364][ T4555] usb 5-1: USB disconnect, device number 3 [ 315.940360][ T6702] team0: Port device team_slave_1 added [ 317.132788][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.142517][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.186764][ T6702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.739193][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.745926][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.836257][ T6782] device syzkaller0 entered promiscuous mode [ 318.083101][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.097500][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.255792][ T6702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.337303][ T6702] device hsr_slave_0 entered promiscuous mode [ 319.929431][ T6702] device hsr_slave_1 entered promiscuous mode [ 320.235678][ T6805] loop2: detected capacity change from 0 to 32768 [ 320.891453][ T6702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.921786][ T6702] Cannot create hsr debugfs directory [ 321.338761][ T6809] loop4: detected capacity change from 0 to 40427 [ 321.356685][ T6809] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 322.027933][ T6809] F2FS-fs (loop4): invalid crc value [ 322.122290][ T6809] F2FS-fs (loop4): Found nat_bits in checkpoint [ 323.575883][ T6809] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 323.775566][ T5284] device hsr_slave_0 left promiscuous mode [ 323.835214][ T5284] device hsr_slave_1 left promiscuous mode [ 323.890989][ T5284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.717856][ T6815] loop1: detected capacity change from 0 to 1024 [ 324.848926][ T6821] loop5: detected capacity change from 0 to 512 [ 324.866583][ T6821] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 325.001766][ T5284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.073074][ T6821] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 325.170279][ T6815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 325.358139][ T5284] device bridge_slave_1 left promiscuous mode [ 325.413613][ T5284] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.557333][ T5284] device bridge_slave_0 left promiscuous mode [ 325.569939][ T5284] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.661966][ T5247] EXT4-fs (loop5): unmounting filesystem. [ 325.670304][ T6815] EXT4-fs (loop1): shut down requested (0) [ 325.733127][ T5284] device veth1_vlan left promiscuous mode [ 325.824909][ T5284] device veth0_vlan left promiscuous mode [ 326.281207][ T26] audit: type=1804 audit(1775629242.162:6): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.517" name="bus" dev="ramfs" ino=46434 res=1 errno=0 [ 326.395154][ T26] audit: type=1804 audit(1775629242.162:7): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.517" name="bus" dev="ramfs" ino=46434 res=1 errno=0 [ 326.450001][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 328.204950][ T4323] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 328.482410][ T4323] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 328.581234][ T4323] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.681961][ T4323] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 328.755724][ T4323] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.767469][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.787819][ T4323] usb 6-1: Product: syz [ 328.792687][ T4323] usb 6-1: Manufacturer: syz [ 328.809410][ T4323] usb 6-1: SerialNumber: syz [ 329.079596][ T6875] sctp: [Deprecated]: syz.1.521 (pid 6875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.079596][ T6875] Use struct sctp_sack_info instead [ 329.214399][ T4323] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 329.449657][ T4323] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 329.480954][ T4323] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 329.498736][ T4323] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 329.510034][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.623854][ T5284] team0 (unregistering): Port device team_slave_1 removed [ 329.723389][ T5284] team0 (unregistering): Port device team_slave_0 removed [ 329.860735][ T5284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.966403][ T5284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.098821][ T6880] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 330.098821][ T6880] program syz.2.522 not setting count and/or reply_len properly [ 330.191838][ T4323] usb 6-1: USB disconnect, device number 6 [ 330.436477][ T6882] loop1: detected capacity change from 0 to 8192 [ 330.479829][ T6882] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 330.671678][ T6882] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 330.711452][ T6882] REISERFS (device loop1): using ordered data mode [ 330.850191][ T6882] reiserfs: using flush barriers [ 331.080309][ T6882] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 331.238592][ T6882] REISERFS (device loop1): checking transaction log (loop1) [ 331.318070][ T6882] REISERFS (device loop1): Using r5 hash to sort names [ 331.369525][ T6882] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 331.479994][ T6882] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 331.590136][ T6887] REISERFS error (device loop1): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 331.608300][ T6887] REISERFS (device loop1): Remounting filesystem read-only [ 331.617994][ T6887] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 331.635552][ T6882] REISERFS warning (device loop1): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS [ 331.647752][ T6882] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 331.727361][ T6882] REISERFS error (device loop1): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 331.743041][ T5284] bond0 (unregistering): Released all slaves [ 331.771950][ T6882] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 332.034531][ T4316] usb 3-1: USB disconnect, device number 5 [ 340.910227][ T6935] loop2: detected capacity change from 0 to 1024 [ 341.787917][ T4424] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 341.836191][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.855357][ T4274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.867422][ T4274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.879921][ T4274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.888463][ T4274] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.918583][ T4274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.027545][ T4270] Bluetooth: hci5: command 0x0409 tx timeout [ 345.929704][ T6967] loop2: detected capacity change from 0 to 128 [ 346.094362][ T4270] Bluetooth: hci5: command 0x041b tx timeout [ 346.143098][ T6968] device syzkaller0 entered promiscuous mode [ 348.552070][ T4274] Bluetooth: hci5: command 0x040f tx timeout [ 348.794182][ T6993] loop5: detected capacity change from 0 to 128 [ 349.440610][ T6938] chnl_net:caif_netlink_parms(): no params data found [ 350.564561][ T4274] Bluetooth: hci5: command 0x0419 tx timeout [ 350.927421][ T7004] loop5: detected capacity change from 0 to 32768 [ 351.364066][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.658358][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.351479][ T6938] device bridge_slave_0 entered promiscuous mode [ 352.543744][ T7024] loop1: detected capacity change from 0 to 128 [ 352.736829][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.748688][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.464469][ T6938] device bridge_slave_1 entered promiscuous mode [ 353.753146][ T6295] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.813161][ T6938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.859221][ T6938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.928629][ T7054] Cannot find add_set index 0 as target [ 356.308127][ T6295] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.552207][ T6295] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.629147][ T6938] team0: Port device team_slave_0 added [ 356.709052][ T7050] device syzkaller0 entered promiscuous mode [ 356.727764][ T6702] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.986049][ T6938] team0: Port device team_slave_1 added [ 361.047057][ T6295] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.063384][ T6702] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.163054][ T7074] tipc: Started in network mode [ 361.186365][ T7074] tipc: Node identity 06fcee32c44e, cluster identity 4711 [ 361.217778][ T7074] tipc: Enabled bearer , priority 0 [ 361.286339][ T7075] device syzkaller0 entered promiscuous mode [ 361.406244][ T7089] loop5: detected capacity change from 0 to 128 [ 361.486397][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.512244][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.870937][ T6938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.436843][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.467896][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.482541][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.491882][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.500284][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 362.508262][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.622306][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.648796][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.689776][ T6938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.709086][ T4353] tipc: Node number set to 3266506290 [ 362.891455][ T7075] tipc: Resetting bearer [ 362.979347][ T7075] tipc: Disabling bearer [ 363.377923][ T6938] device hsr_slave_0 entered promiscuous mode [ 363.399605][ T6938] device hsr_slave_1 entered promiscuous mode [ 363.418510][ T6938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.434442][ T6938] Cannot create hsr debugfs directory [ 364.564496][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 366.311005][ T7092] chnl_net:caif_netlink_parms(): no params data found [ 366.601621][ T7147] loop2: detected capacity change from 0 to 512 [ 366.644485][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 366.677804][ T7150] loop5: detected capacity change from 0 to 8192 [ 366.705936][ T7150] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 366.707972][ T7147] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 366.732340][ T7150] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 366.774568][ T7150] REISERFS (device loop5): using ordered data mode [ 366.786479][ T7150] reiserfs: using flush barriers [ 366.854463][ T7150] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 366.875149][ T7150] REISERFS (device loop5): checking transaction log (loop5) [ 366.885724][ T7150] REISERFS (device loop5): Using r5 hash to sort names [ 366.895618][ T7150] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 366.919059][ T7147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 366.948052][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.958594][ T7150] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 366.975394][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.006052][ T7092] device bridge_slave_0 entered promiscuous mode [ 367.073838][ T7150] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 367.140556][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.145306][ T7150] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 367.174760][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.229821][ T7092] device bridge_slave_1 entered promiscuous mode [ 367.240708][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 367.270662][ T7159] REISERFS error (device loop5): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 367.365634][ T7159] REISERFS (device loop5): Remounting filesystem read-only [ 367.400078][ T7159] REISERFS error (device loop5): zam-7001 reiserfs_find_entry: io error [ 367.457496][ T7160] REISERFS error (device loop5): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 367.480940][ T6938] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 367.504611][ T7160] REISERFS error (device loop5): zam-7001 reiserfs_find_entry: io error [ 367.689047][ T7092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.458646][ T6938] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.509333][ T7092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.722381][ T6938] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.731146][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 368.789029][ T7092] team0: Port device team_slave_0 added [ 368.797909][ T6938] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 368.825381][ T6295] device hsr_slave_0 left promiscuous mode [ 368.838503][ T6295] device hsr_slave_1 left promiscuous mode [ 368.853116][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.872184][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.882722][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.901525][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.911859][ T6295] device bridge_slave_1 left promiscuous mode [ 368.926910][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.943419][ T6295] device bridge_slave_0 left promiscuous mode [ 368.954285][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.017942][ T6295] device veth1_macvtap left promiscuous mode [ 369.030349][ T6295] device veth0_macvtap left promiscuous mode [ 369.039968][ T6295] device veth1_vlan left promiscuous mode [ 369.052939][ T6295] device veth0_vlan left promiscuous mode [ 369.910127][ T6295] team0 (unregistering): Port device team_slave_1 removed [ 369.976943][ T6295] team0 (unregistering): Port device team_slave_0 removed [ 370.046986][ T6295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.113594][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.600991][ T6295] bond0 (unregistering): Released all slaves [ 370.756430][ T7092] team0: Port device team_slave_1 added [ 370.804660][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 370.850258][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.861714][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.890250][ T7092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.903580][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.911497][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.949466][ T7092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.035636][ T7092] device hsr_slave_0 entered promiscuous mode [ 371.043375][ T7092] device hsr_slave_1 entered promiscuous mode [ 371.055398][ T7092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.063288][ T7092] Cannot create hsr debugfs directory [ 371.267385][ T6938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.332529][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.362800][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.394467][ T6938] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.441232][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.453244][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.473561][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.480882][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.499951][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.519691][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.540524][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.548389][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.565503][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.613300][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.641351][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.685932][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.707055][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.723689][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.749382][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.788247][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.806350][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.823097][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.833379][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.844620][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.859888][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.323460][ T7092] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 372.411128][ T7092] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 372.429253][ T7092] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 372.441347][ T7092] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 372.462023][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 372.471435][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.501430][ T6938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.627513][ T7092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.659571][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.696583][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.710888][ T7092] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.730370][ T6295] device hsr_slave_0 left promiscuous mode [ 372.749971][ T6295] device hsr_slave_1 left promiscuous mode [ 372.766280][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.779473][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.789071][ T6295] device bridge_slave_1 left promiscuous mode [ 372.804399][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.813589][ T6295] device bridge_slave_0 left promiscuous mode [ 372.822522][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.129744][ T6295] team0 (unregistering): Port device team_slave_1 removed [ 373.189859][ T6295] team0 (unregistering): Port device team_slave_0 removed [ 373.233354][ T6295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.293913][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.430260][ T6295] bond0 (unregistering): Released all slaves [ 373.497031][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.506800][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.516625][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.524462][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.549015][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.588396][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.610409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.632614][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.644110][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.689664][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.723178][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.745216][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.757602][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.767494][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.801194][ T7092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.813017][ T7092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.847208][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.859244][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.872635][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.899716][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.911387][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.921322][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.939828][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.182195][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 374.201261][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.244434][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.277950][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.309983][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 374.322836][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 374.356762][ T6938] device veth0_vlan entered promiscuous mode [ 374.382770][ T6938] device veth1_vlan entered promiscuous mode [ 374.441992][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 374.457933][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 374.467980][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 374.478781][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 374.507839][ T6938] device veth0_macvtap entered promiscuous mode [ 374.524729][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 374.536453][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.546104][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.559479][ T7092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.575823][ T6938] device veth1_macvtap entered promiscuous mode [ 374.620332][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.664448][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.677410][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.689848][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.701529][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.714026][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.734527][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.748492][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.760844][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.773965][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.805562][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.823740][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.840731][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.852004][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.870482][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.883670][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.898032][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.910080][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.925974][ T6938] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.935953][ T6938] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.945860][ T6938] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.956207][ T6938] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.103444][ T6295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.128053][ T6295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.146598][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 375.188651][ T6260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.211300][ T6260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.223344][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 375.521774][ T7249] loop5: detected capacity change from 0 to 1024 [ 375.547447][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 375.568671][ T7249] hfsplus: unable to parse mount options [ 375.738728][ T7256] hub 9-0:1.0: USB hub found [ 375.758216][ T7256] hub 9-0:1.0: 1 port detected [ 376.403516][ T7255] loop1: detected capacity change from 0 to 128 [ 376.493948][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.390270][ T7250] loop2: detected capacity change from 0 to 4096 [ 378.083070][ T7267] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.102078][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.132863][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.111755][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.136176][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.603283][ T7272] loop7: detected capacity change from 0 to 32768 [ 380.771511][ T7092] device veth0_vlan entered promiscuous mode [ 381.052862][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.461387][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.582518][ T7092] device veth1_vlan entered promiscuous mode [ 381.712431][ T7281] device syzkaller0 entered promiscuous mode [ 381.778407][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.823438][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.835346][ T7287] loop5: detected capacity change from 0 to 512 [ 381.848649][ T7287] ext4: Unknown parameter 'nouser_xattr' [ 382.026706][ T7092] device veth0_macvtap entered promiscuous mode [ 382.160787][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 382.190734][ T7092] device veth1_macvtap entered promiscuous mode [ 382.845320][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.968982][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.016833][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.124347][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.154347][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.184327][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.250155][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.332628][ T7287] loop5: detected capacity change from 0 to 8192 [ 383.344572][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.382244][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.427903][ T7287] loop5: AHDI p1 p2 p3 [ 383.437743][ T7287] loop5: p1 start 327680 is beyond EOD, truncated [ 383.509360][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.523886][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.535253][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.103551][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.164261][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.214598][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.274347][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.315328][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.393040][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.424640][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 384.464838][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 384.513830][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 384.560698][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.104783][ T7092] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.125421][ T7092] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.191816][ T7092] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.249189][ T7094] udevd[7094]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 386.259964][ T7092] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.238902][ T7094] udevd[7094]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 387.423944][ T7308] device syzkaller0 entered promiscuous mode [ 387.702554][ T7329] loop5: detected capacity change from 0 to 32768 [ 387.760951][ T7329] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.590 (7329) [ 387.777887][ T7329] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 387.789454][ T7329] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 387.798921][ T7329] BTRFS info (device loop5): using free space tree [ 388.253758][ T7350] zonefs (nullb0) ERROR: Not a zoned block device [ 389.077450][ T7329] BTRFS info (device loop5): enabling ssd optimizations [ 392.392365][ T5247] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 394.853028][ T7382] [U]  [ 400.058544][ T7400] netlink: 76 bytes leftover after parsing attributes in process `syz.5.600'. [ 400.210991][ T7398] device syzkaller0 entered promiscuous mode [ 400.249657][ T7419] loop7: detected capacity change from 0 to 128 [ 401.544406][ T4556] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 401.635399][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.664987][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.678009][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.688619][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.697083][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 401.717122][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 401.791321][ T4556] usb 3-1: config 0 has no interfaces? [ 401.822241][ T4556] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 401.842386][ T4556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.884851][ T4556] usb 3-1: config 0 descriptor?? [ 403.844563][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 403.917758][ T4556] usb 3-1: USB disconnect, device number 6 [ 405.929854][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 406.966842][ T5706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.989060][ T5706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.026767][ T5706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.036011][ T5706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.047197][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 407.122116][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 407.247452][ T7441] device syzkaller0 entered promiscuous mode [ 408.004880][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 408.128012][ T5203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.977943][ T5203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.004572][ T7470] loop6: detected capacity change from 0 to 128 [ 409.025518][ T7468] loop2: detected capacity change from 0 to 2048 [ 409.056755][ T7472] loop5: detected capacity change from 0 to 1024 [ 409.112779][ T7468] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.211033][ T7472] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.611: lblock 2 mapped to illegal pblock 2 (length 1) [ 409.241949][ T7472] EXT4-fs (loop5): Remounting filesystem read-only [ 409.248982][ T7472] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 409.258772][ T7472] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.611: lblock 0 mapped to illegal pblock 48 (length 1) [ 409.284787][ T7472] EXT4-fs (loop5): Remounting filesystem read-only [ 409.292101][ T7472] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 409.305101][ T7472] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.611: Failed to acquire dquot type 0 [ 409.327755][ T7472] EXT4-fs (loop5): Remounting filesystem read-only [ 409.335636][ T7472] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 409.352700][ T7472] EXT4-fs (loop5): Remounting filesystem read-only [ 409.360328][ T7472] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.611: mark_inode_dirty error [ 409.389084][ T7472] EXT4-fs (loop5): Remounting filesystem read-only [ 409.396396][ T7472] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 409.407723][ T7472] EXT4-fs (loop5): 1 orphan inode deleted [ 409.415054][ T7472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 409.447040][ T9] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 409.632633][ T9] EXT4-fs (loop5): Remounting filesystem read-only [ 410.021935][ T7476] loop7: detected capacity change from 0 to 40427 [ 410.032501][ T9] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 410.063876][ T7476] F2FS-fs (loop7): invalid crc value [ 410.075916][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 410.084458][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 410.097071][ T7476] F2FS-fs (loop7): Found nat_bits in checkpoint [ 410.161530][ T7476] F2FS-fs (loop7): Start checkpoint disabled! [ 410.226293][ T7476] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 410.597308][ T9] EXT4-fs (loop5): Remounting filesystem read-only [ 410.768029][ T7472] EXT4-fs (loop5): unmounting filesystem. [ 410.781573][ T7472] EXT4-fs error (device loop5): __ext4_get_inode_loc:4509: comm syz.5.611: Invalid inode table block 1 in block_group 0 [ 410.806057][ T7472] EXT4-fs (loop5): Remounting filesystem read-only [ 410.816408][ T7472] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 410.835609][ T7472] EXT4-fs (loop5): Remounting filesystem read-only [ 410.843625][ T7472] EXT4-fs error (device loop5): ext4_quota_off:7141: inode #3: comm syz.5.611: mark_inode_dirty error [ 410.872266][ T7472] EXT4-fs (loop5): Remounting filesystem read-only [ 411.020515][ T5203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.202786][ T5203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.923241][ T7497] device syzkaller0 entered promiscuous mode [ 415.061954][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.6.614'. [ 415.186023][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.6.614'. [ 415.316556][ T7509] loop5: detected capacity change from 0 to 64 [ 415.485763][ T5284] kworker/u4:15: attempt to access beyond end of device [ 415.485763][ T5284] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 415.503701][ T26] audit: type=1800 audit(1775629331.382:8): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.616" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 416.678697][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 416.748295][ T7517] [U]  [ 418.350706][ T5203] tipc: Left network mode [ 419.838773][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.862692][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.943557][ T7428] device bridge_slave_0 entered promiscuous mode [ 424.825488][ T7595] capability: warning: `syz.2.630' uses 32-bit capabilities (legacy support in use) [ 424.842451][ T7595] omfs: Invalid superblock (0) [ 425.119455][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.170163][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.229938][ T7428] device bridge_slave_1 entered promiscuous mode [ 426.486458][ T7600] device syzkaller0 entered promiscuous mode [ 426.609268][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.486738][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.548804][ T7608] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 434.556806][ T7608] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 434.571947][ T7608] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 434.580634][ T7608] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 434.587015][ T7608] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 434.607204][ T7608] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 434.614982][ T7608] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 434.620984][ T7608] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 434.635665][ T7608] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 434.644052][ T7608] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 434.652943][ T7608] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 434.662693][ T7608] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 434.670449][ T7608] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 434.677521][ T7608] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 434.687199][ T7608] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 435.563435][ T7676] nfs: Unknown parameter 'smackfsroot' [ 436.500936][ T7428] team0: Port device team_slave_0 added [ 436.525451][ T4314] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 436.644466][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 436.651328][ T4274] Bluetooth: hci5: command 0x0c1a tx timeout [ 436.651388][ T4270] Bluetooth: hci0: command 0x0c1a tx timeout [ 436.725978][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout [ 436.732834][ T4272] Bluetooth: hci2: command 0x0c1a tx timeout [ 436.770801][ T4314] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 436.775663][ T7428] team0: Port device team_slave_1 added [ 436.780715][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.797280][ T4314] usb 3-1: Product: syz [ 436.801761][ T4314] usb 3-1: Manufacturer: syz [ 436.806971][ T4314] usb 3-1: SerialNumber: syz [ 436.834376][ T4314] usb 3-1: config 0 descriptor?? [ 437.096435][ T4314] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 437.596395][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.604094][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.705022][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.747406][ T7686] netlink: 'syz.5.644': attribute type 1 has an invalid length. [ 437.805003][ T7686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.662599][ T4314] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 438.724475][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 438.730993][ T4272] Bluetooth: hci5: command 0x0406 tx timeout [ 438.733123][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 438.749212][ T4314] usb 3-1: USB disconnect, device number 7 [ 438.755763][ T7687] bond1: (slave gretap1): making interface the new active one [ 438.804446][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 438.810898][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 438.843244][ T7687] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 438.870893][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.880795][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.925001][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.110725][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 440.700780][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.708202][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.641656][ T7718] loop6: detected capacity change from 0 to 512 [ 441.832656][ T7721] loop7: detected capacity change from 0 to 512 [ 441.898001][ T7718] loop6: detected capacity change from 0 to 164 [ 441.918840][ T7721] EXT4-fs (loop7): 1 truncate cleaned up [ 441.942934][ T7721] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 442.388636][ T7428] device hsr_slave_0 entered promiscuous mode [ 442.563566][ T7428] device hsr_slave_1 entered promiscuous mode [ 442.761534][ T7428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.771623][ T7428] Cannot create hsr debugfs directory [ 443.675547][ T6938] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 443.936025][ T6938] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set [ 444.058524][ T6938] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 444.806087][ T6938] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 444.925320][ T6938] EXT4-fs (loop7): unmounting filesystem. [ 446.236038][ T7741] sctp: failed to load transform for md5: -2 [ 447.146027][ T5203] device hsr_slave_0 left promiscuous mode [ 447.445487][ T5203] device hsr_slave_1 left promiscuous mode [ 447.452849][ T5203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.718895][ T5203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.913306][ T5203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.923636][ T5203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.937472][ T5203] device bridge_slave_1 left promiscuous mode [ 447.948424][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.105820][ T5203] device bridge_slave_0 left promiscuous mode [ 448.915420][ T5203] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.275349][ T5203] device veth1_macvtap left promiscuous mode [ 451.282493][ T5203] device veth0_macvtap left promiscuous mode [ 451.319518][ T5203] device veth1_vlan left promiscuous mode [ 451.325834][ T5203] device veth0_vlan left promiscuous mode [ 451.338422][ T7781] loop5: detected capacity change from 0 to 512 [ 451.420380][ T7781] EXT4-fs (loop5): 1 truncate cleaned up [ 451.459161][ T7781] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 453.513592][ T5247] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 453.548820][ T5247] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set [ 453.583366][ T5203] bond1 (unregistering): Released all slaves [ 453.628978][ T5247] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 453.646722][ T5247] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 453.710819][ T5247] EXT4-fs (loop5): unmounting filesystem. [ 456.493717][ T5203] team0 (unregistering): Port device team_slave_1 removed [ 456.567710][ T5203] team0 (unregistering): Port device team_slave_0 removed [ 456.637534][ T5203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.707719][ T5203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.239084][ T5203] bond0 (unregistering): Released all slaves [ 459.129028][ T7428] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 459.240214][ T7428] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 459.295246][ T7428] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 459.306342][ T7428] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 461.100168][ T7849] loop2: detected capacity change from 0 to 512 [ 461.362253][ T7850] loop5: detected capacity change from 0 to 128 [ 461.874411][ T7849] EXT4-fs (loop2): 1 truncate cleaned up [ 461.880546][ T7849] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 465.266844][ T4271] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 465.478938][ T4271] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set [ 465.571769][ T4271] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 465.642595][ T4271] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 466.464312][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 467.765289][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.686'. [ 467.926194][ T7890] loop2: detected capacity change from 0 to 32768 [ 467.998563][ T7892] netlink: 31 bytes leftover after parsing attributes in process `syz.7.686'. [ 468.070669][ T7892] netlink: 'syz.7.686': attribute type 3 has an invalid length. [ 468.219055][ T7890] XFS (loop2): Mounting V5 Filesystem [ 468.460692][ T4272] Bluetooth: hci5: command 0x0406 tx timeout [ 468.644732][ T7892] netlink: 'syz.7.686': attribute type 2 has an invalid length. [ 468.657622][ T7892] netlink: 31 bytes leftover after parsing attributes in process `syz.7.686'. [ 468.815194][ T7890] XFS (loop2): Ending clean mount [ 468.865825][ T7890] XFS (loop2): Quotacheck needed: Please wait. [ 468.915809][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.936464][ T4272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.946071][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.036961][ T4272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.045788][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 469.053788][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 469.165796][ T7890] XFS (loop2): Quotacheck: Done. [ 470.016481][ T7892] sch_tbf: burst 0 is lower than device wg0 mtu (1420) ! [ 470.291387][ T4271] XFS (loop2): Unmounting Filesystem [ 470.398198][ T7930] syz.5.690 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 470.606534][ T7933] loop6: detected capacity change from 0 to 128 [ 470.724304][ T4555] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 471.125452][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 472.944378][ T4555] usb 6-1: Using ep0 maxpacket: 8 [ 472.999041][ T4555] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 473.204468][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 473.391043][ T4555] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.494281][ T4555] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.532905][ T4555] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.577603][ T4555] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.650993][ T7954] loop7: detected capacity change from 0 to 512 [ 473.658243][ T4555] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 473.693954][ T4555] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.768517][ T4555] usb 6-1: can't set config #16, error -71 [ 473.949335][ T4555] usb 6-1: USB disconnect, device number 7 [ 474.535244][ T7908] chnl_net:caif_netlink_parms(): no params data found [ 475.394277][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 477.935772][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 478.422197][ T7987] loop6: detected capacity change from 0 to 2048 [ 478.581519][ T7987] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=14071, location=14071 [ 478.593845][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 478.608459][ T7987] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=14327, location=14327 [ 478.620989][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 478.632713][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 478.644704][ T7987] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 478.653676][ T7987] UDF-fs: Scanning with blocksize 512 failed [ 478.669774][ T7987] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=14071, location=14071 [ 478.682567][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 478.697033][ T7987] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=14327, location=14327 [ 478.708004][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 478.719732][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 478.731614][ T7987] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 478.740044][ T7987] UDF-fs: Scanning with blocksize 1024 failed [ 478.753667][ T7987] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=14071, location=14071 [ 478.766907][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 478.928159][ T7987] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=14327, location=14327 [ 478.939777][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 478.952081][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 478.965466][ T7987] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 478.973851][ T7987] UDF-fs: Scanning with blocksize 2048 failed [ 479.009826][ T7987] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=14071, location=14071 [ 479.025890][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 479.044198][ T7987] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=14327, location=14327 [ 479.055872][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 479.067979][ T7987] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 479.079901][ T7987] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 479.088118][ T7987] UDF-fs: Scanning with blocksize 4096 failed [ 479.094777][ T7987] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 479.297719][ T7943] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.281027][ T7908] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.298665][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.339770][ T7908] device bridge_slave_0 entered promiscuous mode [ 481.173288][ T7908] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.202050][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.543374][ T7908] device bridge_slave_1 entered promiscuous mode [ 481.684057][ T7908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.755781][ T7908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.807287][ T8019] nfs: Unknown parameter 'smackfsroot' [ 484.730726][ T7908] team0: Port device team_slave_0 added [ 484.756677][ T8022] loop5: detected capacity change from 0 to 512 [ 484.825271][ T7908] team0: Port device team_slave_1 added [ 485.661370][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.691416][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.945873][ T8029] loop7: detected capacity change from 0 to 40427 [ 485.956036][ T7908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.977480][ T8029] F2FS-fs (loop7): invalid crc value [ 485.989181][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.997999][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.085151][ T8029] F2FS-fs (loop7): Found nat_bits in checkpoint [ 486.128359][ T8029] F2FS-fs (loop7): Start checkpoint disabled! [ 486.146287][ T8029] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 486.216364][ T26] audit: type=1800 audit(1775629402.092:9): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.712" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 486.833705][ T7908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.850912][ T26] audit: type=1800 audit(1775629402.202:10): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.712" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 486.926528][ T8042] delete_channel: no stack [ 486.938092][ T8042] loop2: detected capacity change from 0 to 22 [ 486.947032][ T8042] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 487.002244][ T8042] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 488.656525][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 488.705601][ T7683] kworker/u4:24: attempt to access beyond end of device [ 488.705601][ T7683] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 488.772466][ T7908] device hsr_slave_0 entered promiscuous mode [ 488.802974][ T7908] device hsr_slave_1 entered promiscuous mode [ 488.817766][ T8045] loop2: detected capacity change from 0 to 128 [ 488.915610][ T7908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.947883][ T7908] Cannot create hsr debugfs directory [ 489.305926][ T8048] loop5: detected capacity change from 0 to 40427 [ 489.832464][ T8048] F2FS-fs (loop5): invalid crc value [ 489.840460][ T8048] F2FS-fs (loop5): Found nat_bits in checkpoint [ 489.893419][ T8048] F2FS-fs (loop5): Start checkpoint disabled! [ 489.912781][ T8048] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 491.364955][ T8064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.371281][ T8064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 491.377760][ T8064] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 491.384362][ T8064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.391194][ T8064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.398234][ T8064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 491.407154][ T8064] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 493.440801][ T1013] kworker/u4:4: attempt to access beyond end of device [ 493.440801][ T1013] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 493.445699][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout [ 493.462059][ T4274] Bluetooth: hci2: command 0x0c1a tx timeout [ 493.468469][ T4274] Bluetooth: hci5: command 0x0c1a tx timeout [ 493.468793][ T4270] Bluetooth: hci0: command 0x0c1a tx timeout [ 493.474724][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout [ 493.582302][ T8067] loop6: detected capacity change from 0 to 8192 [ 493.616124][ T8067] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 493.734458][ T8067] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 493.763933][ T8067] REISERFS (device loop6): using ordered data mode [ 493.787988][ T8067] reiserfs: using flush barriers [ 493.848500][ T8067] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 493.904677][ T8067] REISERFS (device loop6): checking transaction log (loop6) [ 494.927971][ T8085] fuse: Bad value for 'fd' [ 495.219073][ T8089] loop7: detected capacity change from 0 to 128 [ 495.524489][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 495.661830][ T8067] REISERFS (device loop6): Using tea hash to sort names [ 495.802330][ T5203] device hsr_slave_0 left promiscuous mode [ 495.865435][ T8067] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 496.333830][ T5203] device hsr_slave_1 left promiscuous mode [ 496.358439][ T5203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.387652][ T5203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.404099][ T5203] device bridge_slave_1 left promiscuous mode [ 496.435827][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.471415][ T5203] device bridge_slave_0 left promiscuous mode [ 496.482819][ T5203] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.182414][ T8103] loop5: detected capacity change from 0 to 16 [ 497.272860][ T8103] erofs: (device loop5): mounted with root inode @ nid 36. [ 497.430860][ T8103] syz.5.725: attempt to access beyond end of device [ 497.430860][ T8103] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 497.456825][ T5203] team0 (unregistering): Port device team_slave_1 removed [ 497.472328][ T8103] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 497.484828][ T8103] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 497.496899][ T8103] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 497.507768][ T8103] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 497.518359][ T8103] syz.5.725: attempt to access beyond end of device [ 497.518359][ T8103] loop5: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 497.542370][ T8103] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 497.615641][ T26] audit: type=1800 audit(1775629413.502:11): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.725" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 498.209824][ T8103] syz.5.725 (8103) used greatest stack depth: 19984 bytes left [ 498.255765][ T5203] team0 (unregistering): Port device team_slave_0 removed [ 498.290323][ T8109] loop7: detected capacity change from 0 to 128 [ 498.319452][ T5203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.615075][ T5203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.914022][ T8115] loop2: detected capacity change from 0 to 2048 [ 498.973181][ T8115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.451575][ T8127] tipc: Can't bind to reserved service type 1 [ 500.864752][ T8133] mmap: syz.5.728 (8133) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 501.438879][ T8113] Falling back ldisc for ptm0. [ 501.466641][ T5203] bond0 (unregistering): Released all slaves [ 501.799291][ T8138] loop5: detected capacity change from 0 to 128 [ 501.853643][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.874393][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.158924][ T7908] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 507.807149][ T7908] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 508.443334][ T7908] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 508.481613][ T7908] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 508.718958][ T8178] loop2: detected capacity change from 0 to 512 [ 508.809703][ T7908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.839931][ T7943] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 508.867961][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 508.893675][ T8178] loop2: detected capacity change from 0 to 164 [ 508.903551][ T7943] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 508.915095][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 509.378825][ T7908] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.600200][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 509.625260][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.664799][ T4793] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.672695][ T4793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.799120][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 509.855007][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.885475][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.939142][ T4793] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.946422][ T4793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.004617][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 511.171243][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 511.197868][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 511.259192][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.302136][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 513.681653][ T7908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.794176][ T7908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.077451][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 514.115111][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.179309][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 514.246504][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.390465][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 514.501929][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.596025][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 516.525742][ T8218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 516.532453][ T8218] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 516.538911][ T8218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 516.545585][ T8218] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 516.552625][ T8218] ================================================================== [ 516.561307][ T8218] BUG: KASAN: use-after-free in __list_del_entry_valid+0x80/0x120 [ 516.569844][ T8218] Read of size 8 at addr ffff88807497d518 by task syz.5.741/8218 [ 516.578669][ T8218] [ 516.581522][ T8218] CPU: 0 PID: 8218 Comm: syz.5.741 Not tainted syzkaller #0 [ 516.589479][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 516.600131][ T8218] Call Trace: [ 516.603708][ T8218] [ 516.607030][ T8218] dump_stack_lvl+0x188/0x24e [ 516.612082][ T8218] ? __lock_acquire+0x7d10/0x7d10 [ 516.617629][ T8218] ? show_regs_print_info+0x12/0x12 [ 516.623563][ T8218] ? load_image+0x400/0x400 [ 516.628935][ T8218] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 516.635989][ T8218] ? __virt_addr_valid+0x188/0x540 [ 516.641944][ T8218] ? __virt_addr_valid+0x465/0x540 [ 516.649086][ T8218] ? __list_del_entry_valid+0x80/0x120 [ 516.655690][ T8218] print_report+0xa8/0x210 [ 516.660818][ T8218] kasan_report+0x10b/0x140 [ 516.666222][ T8218] ? __list_del_entry_valid+0x80/0x120 [ 516.672386][ T8218] __list_del_entry_valid+0x80/0x120 [ 516.678860][ T8218] bt_accept_unlink+0x35/0x230 [ 516.684400][ T8218] l2cap_sock_teardown_cb+0x1af/0x380 [ 516.690316][ T8218] l2cap_chan_del+0xab/0x620 [ 516.695694][ T8218] l2cap_conn_del+0x3c4/0x6a0 [ 516.700683][ T8218] l2cap_connect_cfm+0x119/0x1120 [ 516.705825][ T8218] ? hci_conn_failed+0x10c/0x2a0 [ 516.711531][ T8218] ? mutex_lock_nested+0x10/0x10 [ 516.716853][ T8218] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 516.722435][ T8218] ? hci_connect_le_scan_cleanup+0x1a1/0x390 [ 516.729149][ T8218] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 516.734747][ T8218] hci_conn_failed+0x16f/0x2a0 [ 516.740590][ T8218] hci_abort_conn_sync+0xb3c/0xd50 [ 516.746300][ T8218] ? hci_abort_conn_sync+0x8e1/0xd50 [ 516.751727][ T8218] ? hci_resume_advertising_sync+0x540/0x540 [ 516.758222][ T8218] hci_suspend_sync+0x48a/0xdb0 [ 516.763539][ T8218] ? cancel_work_sync+0x20/0x20 [ 516.768596][ T8218] ? mutex_lock_nested+0x10/0x10 [ 516.773662][ T8218] ? hci_active_scan_sync+0x6e0/0x6e0 [ 516.779410][ T8218] ? mgmt_discovering+0x170/0x170 [ 516.785144][ T8218] ? _find_next_bit+0x11e/0x130 [ 516.790866][ T8218] ? mgmt_pending_find+0x108/0x120 [ 516.796460][ T8218] ? hci_cmd_sync_cancel_sync+0xc5/0x180 [ 516.802413][ T8218] hci_suspend_dev+0x199/0x320 [ 516.807500][ T8218] hci_suspend_notifier+0xc8/0x270 [ 516.813261][ T8218] notifier_call_chain_robust+0xe1/0x2c0 [ 516.819209][ T8218] blocking_notifier_call_chain_robust+0x66/0x90 [ 516.826318][ T8218] pm_notifier_call_chain_robust+0x28/0x60 [ 516.832538][ T8218] snapshot_open+0x19b/0x280 [ 516.837772][ T8218] ? snapshot_compat_ioctl+0x90/0x90 [ 516.843612][ T8218] misc_open+0x31f/0x390 [ 516.848133][ T8218] chrdev_open+0x5c5/0x6a0 [ 516.853366][ T8218] ? cd_forget+0x160/0x160 [ 516.858103][ T8218] ? fsnotify_perm+0x39b/0x550 [ 516.863353][ T8218] ? cd_forget+0x160/0x160 [ 516.868160][ T8218] do_dentry_open+0x7e9/0x10d0 [ 516.873561][ T8218] path_openat+0x2635/0x2ee0 [ 516.878730][ T8218] ? verify_lock_unused+0x140/0x140 [ 516.885259][ T8218] ? do_syscall_64+0x4c/0xa0 [ 516.890372][ T8218] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.896677][ T8218] ? do_filp_open+0x430/0x430 [ 516.901671][ T8218] do_filp_open+0x1f1/0x430 [ 516.906847][ T8218] ? vfs_tmpfile+0x480/0x480 [ 516.911747][ T8218] ? _raw_spin_unlock+0x24/0x40 [ 516.917130][ T8218] ? alloc_fd+0x58f/0x630 [ 516.921795][ T8218] do_sys_openat2+0x150/0x4b0 [ 516.927418][ T8218] ? do_sys_open+0xe0/0xe0 [ 516.932342][ T8218] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 516.938634][ T8218] ? lock_chain_count+0x20/0x20 [ 516.943874][ T8218] __x64_sys_openat+0x135/0x160 [ 516.949196][ T8218] do_syscall_64+0x4c/0xa0 [ 516.953726][ T8218] ? clear_bhb_loop+0x60/0xb0 [ 516.959148][ T8218] ? clear_bhb_loop+0x60/0xb0 [ 516.964284][ T8218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.970588][ T8218] RIP: 0033:0x7f3f8999c819 [ 516.975405][ T8218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.997069][ T8218] RSP: 002b:00007f3f877f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 517.006230][ T8218] RAX: ffffffffffffffda RBX: 00007f3f89c16270 RCX: 00007f3f8999c819 [ 517.014574][ T8218] RDX: 0000000000084400 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 517.023257][ T8218] RBP: 00007f3f89a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 517.032235][ T8218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.040575][ T8218] R13: 00007f3f89c16308 R14: 00007f3f89c16270 R15: 00007fff5b591ae8 [ 517.049226][ T8218] [ 517.052359][ T8218] [ 517.054898][ T8218] Allocated by task 8100: [ 517.059665][ T8218] kasan_set_track+0x4b/0x70 [ 517.064484][ T8218] __kasan_kmalloc+0x8e/0xa0 [ 517.069144][ T8218] __kmalloc+0xb0/0x240 [ 517.073885][ T8218] sk_prot_alloc+0xe7/0x210 [ 517.078780][ T8218] sk_alloc+0x36/0x340 [ 517.083209][ T8218] bt_sock_alloc+0x36/0x130 [ 517.088528][ T8218] l2cap_sock_create+0x12b/0x2f0 [ 517.094228][ T8218] bt_sock_create+0x155/0x220 [ 517.099499][ T8218] __sock_create+0x4a2/0x940 [ 517.104901][ T8218] __sys_socket+0xc4/0x190 [ 517.109461][ T8218] __x64_sys_socket+0x76/0x80 [ 517.114431][ T8218] do_syscall_64+0x4c/0xa0 [ 517.119220][ T8218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.125499][ T8218] [ 517.128171][ T8218] Freed by task 8100: [ 517.132707][ T8218] kasan_set_track+0x4b/0x70 [ 517.137402][ T8218] kasan_save_free_info+0x2d/0x50 [ 517.142601][ T8218] ____kasan_slab_free+0x126/0x1e0 [ 517.148529][ T8218] slab_free_freelist_hook+0x131/0x1a0 [ 517.154713][ T8218] __kmem_cache_free+0xb6/0x1f0 [ 517.159812][ T8218] __sk_destruct+0x4ba/0x650 [ 517.165098][ T8218] l2cap_sock_release+0x169/0x1e0 [ 517.170889][ T8218] sock_close+0xd5/0x240 [ 517.175433][ T8218] __fput+0x22c/0x920 [ 517.180127][ T8218] task_work_run+0x1d0/0x260 [ 517.185624][ T8218] exit_to_user_mode_loop+0xe6/0x110 [ 517.191078][ T8218] exit_to_user_mode_prepare+0xee/0x180 [ 517.197014][ T8218] syscall_exit_to_user_mode+0x16/0x40 [ 517.202824][ T8218] do_syscall_64+0x58/0xa0 [ 517.207705][ T8218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.214131][ T8218] [ 517.217222][ T8218] Last potentially related work creation: [ 517.223564][ T8218] kasan_save_stack+0x3a/0x60 [ 517.228875][ T8218] __kasan_record_aux_stack+0xb2/0xc0 [ 517.234584][ T8218] call_rcu+0x14f/0x990 [ 517.239192][ T8218] netlink_release+0x158e/0x19e0 [ 517.244832][ T8218] sock_close+0xd5/0x240 [ 517.252355][ T8218] __fput+0x22c/0x920 [ 517.257598][ T8218] task_work_run+0x1d0/0x260 [ 517.262823][ T8218] exit_to_user_mode_loop+0xe6/0x110 [ 517.268373][ T8218] exit_to_user_mode_prepare+0xee/0x180 [ 517.275445][ T8218] syscall_exit_to_user_mode+0x16/0x40 [ 517.282017][ T8218] do_syscall_64+0x58/0xa0 [ 517.286584][ T8218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.292837][ T8218] [ 517.295752][ T8218] Second to last potentially related work creation: [ 517.303470][ T8218] kasan_save_stack+0x3a/0x60 [ 517.309555][ T8218] __kasan_record_aux_stack+0xb2/0xc0 [ 517.316516][ T8218] call_rcu+0x14f/0x990 [ 517.321735][ T8218] dev_shutdown+0x92/0x440 [ 517.327243][ T8218] unregister_netdevice_many+0xa4f/0x1930 [ 517.333590][ T8218] unregister_netdevice_queue+0x324/0x370 [ 517.341323][ T8218] __tun_detach+0xd4a/0x1500 [ 517.346847][ T8218] tun_chr_close+0x109/0x1b0 [ 517.352356][ T8218] __fput+0x22c/0x920 [ 517.357859][ T8218] task_work_run+0x1d0/0x260 [ 517.363683][ T8218] get_signal+0x11a6/0x1350 [ 517.369404][ T8218] arch_do_signal_or_restart+0xc4/0x1350 [ 517.376276][ T8218] exit_to_user_mode_loop+0x70/0x110 [ 517.382304][ T8218] exit_to_user_mode_prepare+0xee/0x180 [ 517.388869][ T8218] syscall_exit_to_user_mode+0x16/0x40 [ 517.396211][ T8218] do_syscall_64+0x58/0xa0 [ 517.401016][ T8218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.407206][ T8218] [ 517.409547][ T8218] The buggy address belongs to the object at ffff88807497d000 [ 517.409547][ T8218] which belongs to the cache kmalloc-2k of size 2048 [ 517.425158][ T8218] The buggy address is located 1304 bytes inside of [ 517.425158][ T8218] 2048-byte region [ffff88807497d000, ffff88807497d800) [ 517.439597][ T8218] [ 517.442172][ T8218] The buggy address belongs to the physical page: [ 517.449136][ T8218] page:ffffea0001d25e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74978 [ 517.460532][ T8218] head:ffffea0001d25e00 order:3 compound_mapcount:0 compound_pincount:0 [ 517.470225][ T8218] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 517.479122][ T8218] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017442000 [ 517.488712][ T8218] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 517.498674][ T8218] page dumped because: kasan: bad access detected [ 517.507020][ T8218] page_owner tracks the page as allocated [ 517.514866][ T8218] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4275, tgid 4275 (syz-executor), ts 76010218148, free_ts 76001239974 [ 517.540960][ T8218] post_alloc_hook+0x173/0x1a0 [ 517.546897][ T8218] get_page_from_freelist+0x1a1e/0x1ab0 [ 517.552911][ T8218] __alloc_pages+0x1ec/0x4f0 [ 517.558040][ T8218] alloc_slab_page+0x5d/0x160 [ 517.563582][ T8218] new_slab+0x87/0x2c0 [ 517.568350][ T8218] ___slab_alloc+0xbc6/0x1240 [ 517.573486][ T8218] __kmem_cache_alloc_node+0x1a0/0x260 [ 517.579317][ T8218] __kmalloc_node_track_caller+0x9e/0x230 [ 517.586773][ T8218] pskb_expand_head+0x1a6/0x12a0 [ 517.592250][ T8218] netlink_trim+0x180/0x220 [ 517.598195][ T8218] netlink_broadcast+0x75/0x10d0 [ 517.604488][ T8218] nlmsg_notify+0xe7/0x1a0 [ 517.609743][ T8218] register_netdevice+0x1742/0x1b00 [ 517.615576][ T8218] __ip_tunnel_create+0x346/0x450 [ 517.621229][ T8218] ip_tunnel_init_net+0x2ac/0x780 [ 517.626714][ T8218] ops_init+0x355/0x5f0 [ 517.633114][ T8218] page last free stack trace: [ 517.639890][ T8218] free_unref_page_prepare+0x8b4/0x9a0 [ 517.647037][ T8218] free_unref_page+0x2e/0x3f0 [ 517.654082][ T8218] qlist_free_all+0x76/0xe0 [ 517.659894][ T8218] kasan_quarantine_reduce+0x144/0x160 [ 517.666815][ T8218] __kasan_slab_alloc+0x1e/0x80 [ 517.672981][ T8218] slab_post_alloc_hook+0x4b/0x480 [ 517.679140][ T8218] __kmem_cache_alloc_node+0x140/0x260 [ 517.685307][ T8218] __kmalloc_node_track_caller+0x9e/0x230 [ 517.691859][ T8218] kmemdup+0x27/0x60 [ 517.696234][ T8218] __addrconf_sysctl_register+0xa2/0x3e0 [ 517.702739][ T8218] addrconf_sysctl_register+0x15c/0x1b0 [ 517.709263][ T8218] ipv6_add_dev+0xbe0/0x1120 [ 517.715009][ T8218] addrconf_notify+0x634/0xf40 [ 517.720616][ T8218] raw_notifier_call_chain+0xcb/0x160 [ 517.727200][ T8218] register_netdevice+0x163f/0x1b00 [ 517.732874][ T8218] register_netdev+0x37/0x50 [ 517.738010][ T8218] [ 517.740729][ T8218] Memory state around the buggy address: [ 517.746425][ T8218] ffff88807497d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 517.755172][ T8218] ffff88807497d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 517.764069][ T8218] >ffff88807497d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 517.773846][ T8218] ^ [ 517.779454][ T8218] ffff88807497d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 517.788521][ T8218] ffff88807497d600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 517.797118][ T8218] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 518.479063][ T8218] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 518.487181][ T8218] CPU: 0 PID: 8218 Comm: syz.5.741 Not tainted syzkaller #0 [ 518.495704][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 518.507194][ T8218] Call Trace: [ 518.511206][ T8218] [ 518.514564][ T8218] dump_stack_lvl+0x188/0x24e [ 518.519322][ T8218] ? memcpy+0x3c/0x60 [ 518.524307][ T8218] ? show_regs_print_info+0x12/0x12 [ 518.530145][ T8218] ? load_image+0x400/0x400 [ 518.535466][ T8218] panic+0x2e5/0x730 [ 518.539579][ T8218] ? asm_common_interrupt+0x22/0x40 [ 518.544999][ T8218] ? bpf_jit_dump+0xd0/0xd0 [ 518.550089][ T8218] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 518.556697][ T8218] ? _raw_spin_unlock+0x40/0x40 [ 518.563467][ T8218] check_panic_on_warn+0x80/0xa0 [ 518.570292][ T8218] ? __list_del_entry_valid+0x80/0x120 [ 518.578547][ T8218] end_report+0x66/0x110 [ 518.585093][ T8218] kasan_report+0x118/0x140 [ 518.591481][ T8218] ? __list_del_entry_valid+0x80/0x120 [ 518.599467][ T8218] __list_del_entry_valid+0x80/0x120 [ 518.606837][ T8218] bt_accept_unlink+0x35/0x230 [ 518.612929][ T8218] l2cap_sock_teardown_cb+0x1af/0x380 [ 518.619393][ T8218] l2cap_chan_del+0xab/0x620 [ 518.625235][ T8218] l2cap_conn_del+0x3c4/0x6a0 [ 518.630826][ T8218] l2cap_connect_cfm+0x119/0x1120 [ 518.636541][ T8218] ? hci_conn_failed+0x10c/0x2a0 [ 518.642408][ T8218] ? mutex_lock_nested+0x10/0x10 [ 518.648463][ T8218] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 518.654575][ T8218] ? hci_connect_le_scan_cleanup+0x1a1/0x390 [ 518.662085][ T8218] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 518.668574][ T8218] hci_conn_failed+0x16f/0x2a0 [ 518.675471][ T8218] hci_abort_conn_sync+0xb3c/0xd50 [ 518.683411][ T8218] ? hci_abort_conn_sync+0x8e1/0xd50 [ 518.690057][ T8218] ? hci_resume_advertising_sync+0x540/0x540 [ 518.698717][ T8218] hci_suspend_sync+0x48a/0xdb0 [ 518.704703][ T8218] ? cancel_work_sync+0x20/0x20 [ 518.711028][ T8218] ? mutex_lock_nested+0x10/0x10 [ 518.716582][ T8218] ? hci_active_scan_sync+0x6e0/0x6e0 [ 518.722598][ T8218] ? mgmt_discovering+0x170/0x170 [ 518.728315][ T8218] ? _find_next_bit+0x11e/0x130 [ 518.733688][ T8218] ? mgmt_pending_find+0x108/0x120 [ 518.739732][ T8218] ? hci_cmd_sync_cancel_sync+0xc5/0x180 [ 518.746468][ T8218] hci_suspend_dev+0x199/0x320 [ 518.752449][ T8218] hci_suspend_notifier+0xc8/0x270 [ 518.758559][ T8218] notifier_call_chain_robust+0xe1/0x2c0 [ 518.765331][ T8218] blocking_notifier_call_chain_robust+0x66/0x90 [ 518.773224][ T8218] pm_notifier_call_chain_robust+0x28/0x60 [ 518.780517][ T8218] snapshot_open+0x19b/0x280 [ 518.787230][ T8218] ? snapshot_compat_ioctl+0x90/0x90 [ 518.794230][ T8218] misc_open+0x31f/0x390 [ 518.798971][ T8218] chrdev_open+0x5c5/0x6a0 [ 518.804402][ T8218] ? cd_forget+0x160/0x160 [ 518.809116][ T8218] ? fsnotify_perm+0x39b/0x550 [ 518.814434][ T8218] ? cd_forget+0x160/0x160 [ 518.820908][ T8218] do_dentry_open+0x7e9/0x10d0 [ 518.826373][ T8218] path_openat+0x2635/0x2ee0 [ 518.831649][ T8218] ? verify_lock_unused+0x140/0x140 [ 518.838574][ T8218] ? do_syscall_64+0x4c/0xa0 [ 518.844087][ T8218] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.851631][ T8218] ? do_filp_open+0x430/0x430 [ 518.858013][ T8218] do_filp_open+0x1f1/0x430 [ 518.863553][ T8218] ? vfs_tmpfile+0x480/0x480 [ 518.869244][ T8218] ? _raw_spin_unlock+0x24/0x40 [ 518.874817][ T8218] ? alloc_fd+0x58f/0x630 [ 518.879725][ T8218] do_sys_openat2+0x150/0x4b0 [ 518.884739][ T8218] ? do_sys_open+0xe0/0xe0 [ 518.889583][ T8218] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 518.896148][ T8218] ? lock_chain_count+0x20/0x20 [ 518.901654][ T8218] __x64_sys_openat+0x135/0x160 [ 518.907360][ T8218] do_syscall_64+0x4c/0xa0 [ 518.912232][ T8218] ? clear_bhb_loop+0x60/0xb0 [ 518.917208][ T8218] ? clear_bhb_loop+0x60/0xb0 [ 518.922367][ T8218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.928728][ T8218] RIP: 0033:0x7f3f8999c819 [ 518.933460][ T8218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.955030][ T8218] RSP: 002b:00007f3f877f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 518.964702][ T8218] RAX: ffffffffffffffda RBX: 00007f3f89c16270 RCX: 00007f3f8999c819 [ 518.974436][ T8218] RDX: 0000000000084400 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 518.984154][ T8218] RBP: 00007f3f89a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 518.992829][ T8218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.001640][ T8218] R13: 00007f3f89c16308 R14: 00007f3f89c16270 R15: 00007fff5b591ae8 [ 519.010194][ T8218] [ 519.013652][ T8218] Kernel Offset: disabled [ 519.019323][ T8218] Rebooting in 86400 seconds..