last executing test programs: 19m32.44293829s ago: executing program 4 (id=104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) socket$kcm(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f000000ac40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa012102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd, 0x4}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100"/28) 19m32.168620716s ago: executing program 4 (id=106): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, 0x0, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0xc000, 0x1) socket(0x200000000000011, 0x2, 0xd) syz_emit_ethernet(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000400)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001ec0)={&(0x7f0000001c80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=""/153, 0x99}, 0x2240) 19m31.62593677s ago: executing program 4 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x4) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x7fffffff, 0x10000, 0x3, 0x8, 0x4, 0x10], 0x3, &(0x7f0000000000), 0x0, [{}, {}, {}]}, 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0xa00810, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file1\x00', 0x2) 19m31.368541097s ago: executing program 4 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x7, 0x1, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x80000001, 0x101, 0x6, 0xc3ac, 0x80, 0x7ff, 0x5950, 0x4, 0x0, 0x4, 0x2, 0xc, 0x9, 0x7}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000640)=@xdp={0x2c, 0xdd8c, r7, 0x3e}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000700)="80", 0x1}], 0x1}, 0x4) 19m29.232446391s ago: executing program 4 (id=116): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 19m28.656377275s ago: executing program 4 (id=121): socket$netlink(0x10, 0x3, 0x4) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 19m12.996092091s ago: executing program 32 (id=121): socket$netlink(0x10, 0x3, 0x4) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 16m46.720648823s ago: executing program 5 (id=629): prlimit64(0x0, 0xe, &(0x7f0000001f00)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001f40)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001f80)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000001fc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002040)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000020c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002100), 0x4000087, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r3, 0x5404, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) time(&(0x7f0000000140)) 16m43.332936238s ago: executing program 5 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m42.729114884s ago: executing program 5 (id=632): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) 16m42.657586136s ago: executing program 5 (id=633): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000002680), &(0x7f00000026c0)='./file0\x00', 0x18000c6, &(0x7f0000002700)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000002740)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 16m39.152618644s ago: executing program 5 (id=640): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001b40)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000001b80)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_open_dev$hidraw(&(0x7f0000001fc0), 0xf17, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000001bc0)={0x1, r2}) ioctl$int_in(r1, 0x5452, &(0x7f0000001c00)=0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="04", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x41) 16m37.368698209s ago: executing program 5 (id=647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14a40, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000100)={0xd, 0x1afe}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept(0xffffffffffffffff, &(0x7f0000000380)=@un=@abs, &(0x7f0000000400)=0x80) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m34.773744005s ago: executing program 33 (id=647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14a40, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000100)={0xd, 0x1afe}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept(0xffffffffffffffff, &(0x7f0000000380)=@un=@abs, &(0x7f0000000400)=0x80) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m57.2831395s ago: executing program 0 (id=2229): mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) write$tun(r1, 0x0, 0x44) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000006940)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f000001f940)=0x7) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r5, &(0x7f0000004900)={0x2020}, 0x205a) 7m53.924670464s ago: executing program 0 (id=2234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600), 0x1000) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) wait4(r3, 0x0, 0x8, 0x0) 7m52.446807831s ago: executing program 0 (id=2237): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x401}}]}, 0x154}}, 0x24000058) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x410040, 0x0) ptrace$cont(0x9, r1, 0x0, 0x6) socket$nl_route(0x10, 0x3, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) 7m51.111973494s ago: executing program 0 (id=2240): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f014, 0x1}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, 0x0, 0x30) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440), &(0x7f0000000080), &(0x7f0000000000)) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) listen(r3, 0x100101) accept4(r3, 0x0, 0x0, 0x80800) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) 7m49.64475588s ago: executing program 0 (id=2243): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x9, 0x10, [0x2, 0x1, 0x0, 0xa6e], &(0x7f0000000180)=[0x0, 0x0]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 7m47.045884725s ago: executing program 0 (id=2249): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) shmget$private(0x0, 0x3000, 0x400, &(0x7f000053b000/0x3000)=nil) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000780)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) 7m31.229140719s ago: executing program 34 (id=2249): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) shmget$private(0x0, 0x3000, 0x400, &(0x7f000053b000/0x3000)=nil) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000780)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) 6m1.038331624s ago: executing program 7 (id=2402): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x9, 0x10, [0x2, 0x1, 0x0, 0xa6e], &(0x7f0000000180)=[0x0, 0x0]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8100) socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 6m0.104199137s ago: executing program 7 (id=2403): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000900)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000011c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r3, 0x0, 0x400c0c0) open(0x0, 0x80242, 0x0) r4 = fsopen(&(0x7f0000002080)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) syz_mount_image$vfat(&(0x7f00000020c0), &(0x7f0000002100)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) getcwd(&(0x7f0000002280)=""/220, 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./tracefs_dir\x00', 0x1ff) 5m54.410980049s ago: executing program 7 (id=2416): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) 5m49.851398142s ago: executing program 7 (id=2423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600), 0x1000) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) wait4(r3, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r3, 0x80, &(0x7f00000000c0)={0x19, 0x7, 0x7}) 5m48.000972258s ago: executing program 7 (id=2427): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x33, 0x35, 0x65, 0x36, 0x56, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x66, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122eb4d0400000000000000ddeeff9df9bace445566778899aabbcc21eeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x39, 0x34, 0x33, 0x36, 0x30, 0x31, 0x66, 0x0, 0x61, 0x35, 0x62, 0x33, 0x64, 0x38, 0x38, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x33, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff0011223344556677899c69bbccddeeff00", 0x13}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x2, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 5m47.581333419s ago: executing program 7 (id=2430): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121b42, 0x10c) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) setpriority(0x2, 0x0, 0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xee01, 0xee01, 0x0) sendfile(r0, r0, 0x0, 0x100000000094) 5m32.500071174s ago: executing program 35 (id=2430): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121b42, 0x10c) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) setpriority(0x2, 0x0, 0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xee01, 0xee01, 0x0) sendfile(r0, r0, 0x0, 0x100000000094) 2m45.592690109s ago: executing program 6 (id=2736): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000500)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x100000000e2) r4 = syz_io_uring_setup(0x6dcd, &(0x7f0000000400)={0x0, 0x2af2, 0x400, 0x5, 0x80000139}, &(0x7f00000003c0), &(0x7f0000000900), &(0x7f0000000940)) io_uring_setup(0x400168f, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0xfffffffffffffff3, 0x40000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"}) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x80045440, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0) io_uring_enter(r4, 0x4118, 0x9bbf, 0x8, 0x0, 0x0) futex(0x0, 0xa, 0x800000, 0x0, 0x0, 0x2) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x7, 0x2003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) 2m43.711292585s ago: executing program 6 (id=2738): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1f2) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) writev(0xffffffffffffffff, 0x0, 0x0) 2m42.404119568s ago: executing program 6 (id=2740): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x814000, &(0x7f0000000000), 0x1, 0x76a, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={0x0, 0x40}}, 0xeab8b461aa1b877b) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m33.951338198s ago: executing program 6 (id=2752): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capget(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f0000000440)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(r3, 0x0, 0x40000002) socket$nl_netfilter(0x10, 0x3, 0xc) 2m19.314764563s ago: executing program 6 (id=2777): socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa000}], 0x2, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) shutdown(r3, 0x0) shutdown(r3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvfrom(r3, 0x0, 0x0, 0x3, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close_range(r2, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020751ff", @ANYRES32=r7, @ANYBLOB="080002007f000001"], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r7, 0x2f, 0x5, 0xe5, 0x3, 0x20, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x0, 0x7}}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x3, {{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x20, 0xf}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, {}, 0x0, 0x6e6bb0, 0x0, 0x1, 0x1}}, [@etimer_thresh={0x8, 0xc, 0x8}, @policy_type={0xa, 0x10, {0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x665c3ed30a41084f}, 0x0) r8 = fsopen(&(0x7f0000000540)='cgroup2\x00', 0x1) fsmount(r8, 0x0, 0x0) 2m14.697990917s ago: executing program 6 (id=2790): syz_open_dev$cec(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000340)={@local, 0x8000100, 0x1, 0x1, 0xc, 0xb6, 0x3}, 0x20) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x1000, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = gettid() timer_create(0x0, &(0x7f0000002440)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000002480)) timer_settime(0x0, 0x0, &(0x7f0000002500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002540)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000002580)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f00000025c0)={0x1d, r7, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)='.', 0x1a000}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m58.104461621s ago: executing program 36 (id=2790): syz_open_dev$cec(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000340)={@local, 0x8000100, 0x1, 0x1, 0xc, 0xb6, 0x3}, 0x20) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x1000, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = gettid() timer_create(0x0, &(0x7f0000002440)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000002480)) timer_settime(0x0, 0x0, &(0x7f0000002500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002540)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000002580)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f00000025c0)={0x1d, r7, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)='.', 0x1a000}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 40.483446943s ago: executing program 9 (id=2963): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000019480)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, 0x0, &(0x7f0000000200)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_delneigh={0x1c, 0x1d, 0x400, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x80, 0x2, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044000) 37.111696027s ago: executing program 9 (id=2971): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x33, 0x35, 0x65, 0x36, 0x56, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aab3ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x66, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122eb4d0400000000000000ddeeff9df9bace445566778899aabbcc21eeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x39, 0x34, 0x33, 0x36, 0x30, 0x31, 0x66, 0x0, 0x61, 0x35, 0x62, 0x33, 0x64, 0x38, 0x38, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x2d}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x33, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff0011223344556677899c69bbccddeeff00", 0x13}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x2, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 30.13440017s ago: executing program 9 (id=2979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600), 0x1000) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) wait4(r3, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r3, 0x80, &(0x7f00000000c0)={0x19, 0x7, 0x7}) 25.892018996s ago: executing program 9 (id=2991): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000540)=""/4113, 0x1011) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000016c0)='dir0\x00', 0x80) mount(0x0, 0x0, &(0x7f0000001740)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001780)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000017c0)=""/4, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={0x0}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 21.372091108s ago: executing program 9 (id=3003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x2c, 0x2c, 0x601, 0x20000000, 0x1, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x30000}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x5, &(0x7f0000000040)=0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x1ff, &(0x7f00007af000/0x3000)=nil, 0x1) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r7, 0x0, 0x232) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r3) set_mempolicy(0x3, 0x0, 0xd0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRES16=r10], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) 18.87123659s ago: executing program 1 (id=3016): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capget(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f0000000440)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(r4, 0x0, 0x40000002) socket$nl_netfilter(0x10, 0x3, 0xc) 15.382225328s ago: executing program 2 (id=3014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socket$nl_generic(0x10, 0x3, 0x10) wait4(r2, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r2, 0x80, &(0x7f00000000c0)={0x19, 0x7, 0x7}) 14.569552457s ago: executing program 9 (id=3015): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000002140)=""/102392, 0x18ff8) io_setup(0x5, 0x0) inotify_init() sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f000001b1c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f000001b240), 0x1) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000380)=r1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r6 = fcntl$dupfd(r0, 0x0, r5) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xdb) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xe, 0x0, &(0x7f0000001080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000010c0), 0x8, 0x10, &(0x7f0000001100)={0x0, 0x3}, 0x10}, 0x94) 13.042155006s ago: executing program 3 (id=3018): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX, @ANYRESDEC=0x0], 0x3, 0x240, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000a00)={0x3, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400fb0c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000040008"], 0x98}, 0x1, 0x7}, 0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r4, &(0x7f00000002c0)="41000200010001", 0x7) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180ba0000030180c200000108060001080074594159aaaaaac22303d2c52be5d8"], 0x0) socket$netlink(0x10, 0x3, 0x0) 11.598537262s ago: executing program 2 (id=3019): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x33, 0x35, 0x65, 0x36, 0x56, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aab3ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x66, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122eb4d0400000000000000ddeeff9df9bace445566778899aabbcc21eeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x39, 0x34, 0x33, 0x36, 0x30, 0x31, 0x66, 0x0, 0x61, 0x35, 0x62, 0x33, 0x64, 0x38, 0x38, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff0011223344556677899c69bbccddeeff00", 0x13}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x2, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 11.376599727s ago: executing program 2 (id=3020): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600), 0x1000) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) wait4(r3, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r3, 0x80, &(0x7f00000000c0)={0x19, 0x7, 0x7}) 11.092214684s ago: executing program 3 (id=3021): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x400000000d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000380)={0x5, 0xfffffffe}, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 9.420030796s ago: executing program 3 (id=3022): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x800455cc, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x24004044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x20008040) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 7.894013014s ago: executing program 3 (id=3023): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000180)="f5a33db6", 0x4, 0xfffffffffffffffe) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1000000f7) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000240)=""/69, 0x45, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xc229, 0x0) 7.786644417s ago: executing program 8 (id=3024): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='lzo', 0x3) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x11a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x80, 0x2) setns(r8, 0x24020000) 7.785191037s ago: executing program 1 (id=3025): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x9, 0x10, [0x2, 0x1, 0x0, 0xa6e], &(0x7f0000000180)=[0x0, 0x0]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8100) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 7.64423237s ago: executing program 1 (id=3027): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x2c, 0x2c, 0x601, 0x20000000, 0x1, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x30000}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x5, &(0x7f0000000040)=0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x1ff, &(0x7f00007af000/0x3000)=nil, 0x1) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r7, 0x0, 0x232) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r3) set_mempolicy(0x3, 0x0, 0xd0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRES16=r10], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) 6.002009471s ago: executing program 8 (id=3028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000cc0)=0x3, 0x12) ioctl$KDFONTOP_SET(r1, 0x4b72, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) statx(r1, &(0x7f0000000300)='./file0\x00', 0x1000, 0x100, &(0x7f0000000340)) statx(r1, &(0x7f0000000440)='./file0\x00', 0x2000, 0x40, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4040080) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'pimreg1\x00', {0xb}, 0x69ae}) 5.309012528s ago: executing program 8 (id=3029): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000c40)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000cc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r1, &(0x7f0000000d80), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000dc0)=0x1) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000e000000080000000200000004000000", @ANYRES32, @ANYBLOB="000000000000000000000000152f000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000440), &(0x7f0000000a80)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r4, &(0x7f0000000a80), 0x0}, 0x20) recvmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x4000000, &(0x7f0000000f00)=[{&(0x7f0000000f40)=""/4096, 0xecc}], 0x1}}], 0x8, 0xa6, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 5.104863713s ago: executing program 1 (id=3030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socket$nl_generic(0x10, 0x3, 0x10) wait4(r2, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r2, 0x80, &(0x7f00000000c0)={0x19, 0x7, 0x7}) 4.483055059s ago: executing program 8 (id=3031): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x33, 0x35, 0x65, 0x36, 0x56, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aab3ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x66, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122eb4d0400000000000000ddeeff9df9bace445566778899aabbcc21eeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x39, 0x34, 0x33, 0x36, 0x30, 0x31, 0x66, 0x0, 0x61, 0x35, 0x62, 0x33, 0x64, 0x38, 0x38, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff0011223344556677899c69bbccddeeff00", 0x13}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x2, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 4.445348809s ago: executing program 2 (id=3032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x80, &(0x7f00000000c0)=ANY=[], 0xf4, 0x216, &(0x7f0000000480)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x800) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./bus\x00', 0x204818, &(0x7f0000000280)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e2c666f726f636b2c756e686964652c736d736563746f723d30783030303030303030954a5af560d3addf08510ed19e76076230303030303030302c696f636861727365743d63703433372c6d6f64653d3078303030103030303030303030303030372c6e6f726f636b2c636865636b3d737472696374"], 0x1, 0x571, &(0x7f0000000e40)="$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") 4.229037735s ago: executing program 8 (id=3033): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5\x00'/439, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xa) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0xff64000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 3.155905932s ago: executing program 3 (id=3034): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2814800, &(0x7f0000000100)=ANY=[], 0x3, 0x6c2, &(0x7f0000001600)="$eJzs3ctvHVcdB/DvXD9ip23ipkkbUKVajQSIiMSOlYLZEBBCRqoQKgvWVuI0Vm7S4rjIrRB1eIpdF/0DuskGsUJixSZSy6Ib2HWHvKyExKYbzGrQ3Dv3kevXbR6+Sfl8ornnzDlzzvzmNzP3FVk3wP+tpbMZv5siS2df3ajWt+4sNLfuLNzo1JMcSbKZjCdpJCn+U5blh8mlpOhOUwyUO7y/uvjaJ59tfdpeG6+X1vaN/cYNqLfbHGje7LTNJhmrywdwz3yXH3i+ohv5pSRn6hJGbiJJWU6k7PrZx093e6rO4+1yerfRU4cXKPDIFO3XzerFuNHfPpMcrW/06n1A55W3MZIgh3BkyO0G30EAAADAk2aYz8DHt7OdjeLYIYQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwibvd//L+ql0anPpuj8/v9k3Za6/nh56fNtfvdRxQEAAAAAAAAAh+il7WxnI8c662XR+j//l1srJ1uPT+Wt3MpK1nIuG1nOetazlvkkM30TTW4sr6+vzQ8x8sKuIy8cEOiRupx+OMcNAAAAAAAAAF8wv8pS7///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcVAkY+0ixe2+5pk0xpNMJZmsGjaTf3TqT7K7ow4AAAAADsHx7WxnI8c662WRk0meb30HMJW3cjPrWc16mlnJldb3Au1P/Y2tOwvNrTsLN6pl57zf/fc9q1MHhNGaMe3vHnbf8+nWFtO5mtVWy7lczhtp5koarZGV03U8nVkH4rpdxVR8pzZkgq7UZXXk79XlDu8OOdn+Br9Mmd7/C5aZVkYmuhmZq2OrsvFs58zsfoYGzs5BBvc0n0Y3sJMDe+oL+OM/3GfOj9ZldTy/2yvnIzGYiQt9V9/z++c8+epf/vTTubr++BzScMbqsmw9Tu/MxEKjl4kXhsnEtebN69eu3jr7pGVih7lWJk5115fyg/wkZzObH2ctq/l5lrOelczm+63acn3yi77be49MXWoXE7vtdqmXuE7eJ+srdKxu/Twxvdwaeyyr+VHeyJWs5JXWvwuZzzdzMRez2Hetn9r/DLfu+sY9d33vFaB8Ztc0nvlaXame9n5fl7vas+NRqfL6bF9e+59zZ1p9/S29LJ04OEtVWu55bvzr/qGMf7muVPv4dd+5H73BTMz3ZeK5/TLRuZBvNW9eX7u2/OZwuzvxXt/w3z5WT6nV9XKiOlnpnKDe1VH1PdfpG8hX1Xey29fY0Xeq29e+Uzf3vFMn6/dwO2e60Op7Yde+hVbf6b6+3d5vHfxuDoARO/r1o5PT/5r++/QH07+Zvjb96tT3jnzryIuTmfho4tvjc2NfabxY/Dkf5Je9z/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD9u/X2O9eXm82VtYFKWZbv7tHVLI8ne3TdX6WxZxhVZfyAUHdUMvvPp6oBnZYy3a7Oz5k9xOAPqnzp6WT4UfUv8KTdMv5w8zzCyn/Lsqxbij22+ePfdibqmaFSNzn8tXFAZaozYVKWZflYpK6ujB/yTkf0hAQcmvPrN948f+vtd76xemP59ZXXV24uXry4OLd48ZWF81dXmytz7cdRRwk8Cr0X/VFHAgAAAAAAAAAAAAxrqL8H+CjJA/w5waiPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiyLZ3N+N0UmZ87N1etb91ZaFZLp97bcjxJI0nxi6T4MLmU9pKZvumKvfbz/uria598tvVpb65qyQ8vHzBuOJv1ktkkY+3y9sOa73Jd7qvY7xCK7hFWCTvTSRyM2v8CAAD//9NF+gI=") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr(r3, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300801c, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRESDEC, @ANYBLOB="de3631d09a34c16dcba1ffab984911dcdbc1e2658c0e67172ccdcb14208a27a4ff0c1cbd0fa976fdbbaad16f5c6fde7c2c92f2e0ab2344e716564d5a635f805beb1b8f511710cab116bf7d89a29c2663983ab0d1ba440d9b6dad26650c4fcbc378c942f1886742a767c7a16ea03d45863b2d1cb3c0b110fce5adcfb2a8b7eaeb511b156d10fcaff3dc0e49dab7a3f17f23f991b330ebbbe05cf266927dbfaf48e5a94cc269103cc3becda023f5c580b23c1692efe1242191b52e58260985c320a9fe27a1cb3b4d1fa1494038ee8af6168a9d6ec2c35671b71eaac01cf09c1df4cd5cf00ae24e0191a460c21f04f00c70d4", @ANYRES16], 0x1, 0x2d0, &(0x7f00000004c0)="$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") r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, 0x0, 0x0) sendmsg(r4, 0x0, 0x44004) ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000100)={0x28, 0x4, 0x0, {0x1}}, 0x28) 2.964747536s ago: executing program 2 (id=3035): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x2008c000}, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019640)=0x80000000000003) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000196c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x24000808) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={0x0}}, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) write(r0, &(0x7f0000000100)='isp1301 0x2', 0xb) 2.949314117s ago: executing program 8 (id=3036): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capget(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f0000000440)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(r4, 0x0, 0x40000002) socket$nl_netfilter(0x10, 0x3, 0xc) 2.887635808s ago: executing program 1 (id=3037): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x9, 0x10, [0x2, 0x1, 0x0, 0xa6e], &(0x7f0000000180)=[0x0, 0x0]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8100) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 753.838532ms ago: executing program 2 (id=3038): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000080)={0x2, 0x0, [{0x1, 0x2, 0x1, 0x2, 0x10, 0x9, 0x546b89ad}, {0x8000000f, 0x1ff, 0x1, 0x2, 0x2, 0x25, 0x3ff}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) connect(r4, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xc004) connect(r4, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r6 = getpid() setpriority(0x0, r6, 0x5) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x5e5010ad, '\x00', 0x441}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r8, &(0x7f0000000100), 0x0) mq_notify(r8, &(0x7f0000000380)={0x0, 0x22, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000300)="677b4af6a35bfcf4dc2f00f281bac188cda9cca0187d21322d17c5e2c9da26c9ac6fa76ed28173ae924e74be3f43d805b1804b0d803b54e449fe163137199cf125a455bc6bf3e42c"}}) close(r7) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000002c0)={r3, r9, 0x1, 0x0, 0x400000d4}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) 734.745352ms ago: executing program 1 (id=3048): syz_open_dev$evdev(&(0x7f0000000000), 0x3ff, 0x21c0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e24, @broadcast}]}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x141102) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x2982, 0x0) eventfd2(0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000840)='testdomain / 2147483647\n', 0x18) close(r4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) pipe2$9p(&(0x7f0000000980), 0x0) 0s ago: executing program 3 (id=3039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x100) timerfd_gettime(0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x800040, &(0x7f0000000200)=ANY=[], 0x1, 0x577, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) rseq(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000ac0)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000b00)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000b40)=[{&(0x7f0000000b80)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000000) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) setresuid(0xee01, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x8000) kernel console output (not intermixed with test programs): converter now attached to ttyUSB1 [ 661.745875][ T4738] usb 7-1: USB disconnect, device number 10 [ 661.847846][ T4738] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 661.923820][ T4738] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 662.082247][T11352] hub 8-0:1.0: USB hub found [ 662.091524][T11352] hub 8-0:1.0: 1 port detected [ 662.257357][ T4738] keyspan 7-1:1.0: device disconnected [ 662.416822][ T7701] net_ratelimit: 30 callbacks suppressed [ 667.456340][ T4290] net_ratelimit: 27 callbacks suppressed [ 671.274553][ T26] audit: type=1800 audit(1792439582.280:161): pid=11463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1832" name="subclass" dev="configfs" ino=54502 res=0 errno=0 [ 671.321995][ T26] audit: type=1800 audit(1792439582.510:162): pid=11468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1833" name="subclass" dev="configfs" ino=53964 res=0 errno=0 [ 672.555684][ C0] net_ratelimit: 25 callbacks suppressed [ 672.891625][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1839'. [ 673.696365][T11498] loop2: detected capacity change from 0 to 2048 [ 673.812814][T11498] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 676.444919][ T26] audit: type=1800 audit(1792439587.631:163): pid=11519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1848" name="subclass" dev="configfs" ino=54016 res=0 errno=0 [ 677.615143][ C1] net_ratelimit: 26 callbacks suppressed [ 677.985953][T11543] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1852'. [ 679.081724][T11558] kvm: pic: single mode not supported [ 679.081960][T11558] kvm: pic: level sensitive irq not supported [ 682.179777][T11587] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11587] [ 682.208170][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1866'. [ 682.814458][ C1] net_ratelimit: 26 callbacks suppressed [ 683.573456][T11610] cgroup: No subsys list or none specified [ 684.027962][T11615] ip_tables: iptables: counters copy to user failed while replacing table [ 685.117221][ T26] audit: type=1800 audit(1792439596.312:164): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1880" name="subclass" dev="configfs" ino=54168 res=0 errno=0 [ 685.457223][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.464973][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.013816][T11235] net_ratelimit: 30 callbacks suppressed [ 689.436445][ T26] audit: type=1800 audit(1792439600.633:165): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1894" name="subclass" dev="configfs" ino=54222 res=0 errno=0 [ 689.923603][T11698] Cannot find add_set index 0 as target [ 690.973199][T11708] loop2: detected capacity change from 0 to 4096 [ 692.392787][T11708] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 692.392787][T11708] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 692.392787][T11708] [ 692.443331][T11708] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 692.452651][T11708] EXT4-fs (loop2): Ignoring removed orlov option [ 692.542732][T11708] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 692.542732][T11708] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 692.542732][T11708] [ 692.700067][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1905'. [ 693.094975][ C1] net_ratelimit: 32 callbacks suppressed [ 693.341647][T11708] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 693.613428][T11747] ip_tables: iptables: counters copy to user failed while replacing table [ 694.731931][ T26] audit: type=1800 audit(1792439605.913:166): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1913" name="subclass" dev="configfs" ino=55119 res=0 errno=0 [ 694.769489][T11764] lo speed is unknown, defaulting to 1000 [ 694.841453][T11764] lo speed is unknown, defaulting to 1000 [ 694.937476][T11764] lo speed is unknown, defaulting to 1000 [ 695.071386][T11764] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 695.306996][T11764] lo speed is unknown, defaulting to 1000 [ 695.353106][T11764] lo speed is unknown, defaulting to 1000 [ 695.448236][T11764] lo speed is unknown, defaulting to 1000 [ 695.836579][T11764] lo speed is unknown, defaulting to 1000 [ 695.910181][T11764] lo speed is unknown, defaulting to 1000 [ 696.597326][ T26] audit: type=1800 audit(1792439607.753:167): pid=11789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1919" name="subclass" dev="configfs" ino=55157 res=0 errno=0 [ 698.292727][ T7697] net_ratelimit: 26 callbacks suppressed [ 698.776010][T11812] ip_tables: iptables: counters copy to user failed while replacing table [ 699.080312][ T26] audit: type=1800 audit(1792439610.264:168): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1927" name="subclass" dev="configfs" ino=55419 res=0 errno=0 [ 701.809534][ T26] audit: type=1800 audit(1792439612.994:169): pid=11875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1942" name="subclass" dev="configfs" ino=55447 res=0 errno=0 [ 702.166846][T11879] 9pnet_virtio: no channels available for device ./proc/file0 [ 703.372045][ T7697] net_ratelimit: 32 callbacks suppressed [ 708.799455][ C0] net_ratelimit: 25 callbacks suppressed [ 708.943589][ T26] audit: type=1800 audit(1792439620.135:170): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1973" name="subclass" dev="configfs" ino=55632 res=0 errno=0 [ 709.409334][ T26] audit: type=1800 audit(1792439620.215:171): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1974" name="subclass" dev="configfs" ino=55641 res=0 errno=0 [ 709.653404][T11993] capability: warning: `syz.1.1976' uses 32-bit capabilities (legacy support in use) [ 713.940708][ C0] net_ratelimit: 40 callbacks suppressed [ 715.508251][ T26] audit: type=1800 audit(1792439626.696:172): pid=12068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1997" name="subclass" dev="configfs" ino=55768 res=0 errno=0 [ 715.808440][ T26] audit: type=1800 audit(1792439626.996:173): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1999" name="subclass" dev="configfs" ino=55794 res=0 errno=0 [ 716.940115][T12083] loop6: detected capacity change from 0 to 512 [ 717.002802][T12081] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.041091][T12083] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 717.428909][T12083] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.2002: corrupted in-inode xattr [ 717.709746][T12083] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.2002: couldn't read orphan inode 15 (err -117) [ 717.950539][T12083] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 719.101739][ C0] net_ratelimit: 23 callbacks suppressed [ 720.146170][ T26] audit: type=1800 audit(1792439631.336:174): pid=12115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2009" name="subclass" dev="configfs" ino=55866 res=0 errno=0 [ 722.512897][T12131] loop2: detected capacity change from 0 to 40427 [ 723.065844][T12131] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 723.072291][T12131] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 723.737696][T12131] F2FS-fs (loop2): invalid crc value [ 724.045021][T12131] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 724.111842][ C0] net_ratelimit: 34 callbacks suppressed [ 724.194532][T12152] ip_tables: iptables: counters copy to user failed while replacing table [ 724.276479][T12131] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 724.283659][T12131] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 724.488161][T12131] attempt to access beyond end of device [ 724.488161][T12131] loop2: rw=10241, want=53256, limit=40427 [ 724.944631][ T4194] attempt to access beyond end of device [ 724.944631][ T4194] loop2: rw=2049, want=45104, limit=40427 [ 725.161909][T12165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2024'. [ 726.972491][T12187] loop6: detected capacity change from 0 to 1024 [ 728.088898][T12200] No such timeout policy "syz1" [ 728.485602][T12187] hfsplus: extend alloc file! (8192,512,393216) [ 728.917533][T12205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2036'. [ 729.143930][ T7694] net_ratelimit: 26 callbacks suppressed [ 729.895772][ T1324] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 730.259571][ T1324] usb 3-1: not running at top speed; connect to a high speed hub [ 730.450652][ T1324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.584305][ T1324] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 730.638112][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.805699][ T1324] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 730.893293][T12233] tipc: Enabling of bearer rejected, failed to enable media [ 731.019126][ T1324] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 731.088085][ T1324] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 731.205360][T12237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.491669][ T1324] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 731.500049][ T1324] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 731.520537][ T1324] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 731.533352][T12242] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 732.056700][ T1324] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 732.065399][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 732.115565][ T1324] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 732.198913][ T1324] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 732.980627][ T1324] usb 3-1: USB disconnect, device number 17 [ 733.200053][ T1324] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 733.486891][ T1324] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 733.744790][ T1324] keyspan 3-1:1.0: device disconnected [ 734.248409][ C1] net_ratelimit: 22 callbacks suppressed [ 737.044119][ T1324] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 738.058969][ T1324] usb 7-1: not running at top speed; connect to a high speed hub [ 738.188218][ T1324] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.203200][ T1324] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 738.259536][ T1324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.870220][ T1324] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 738.958850][ T1324] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 739.259181][T12312] net_ratelimit: 25 callbacks suppressed [ 739.259207][T12312] ip_tables: iptables: counters copy to user failed while replacing table [ 739.827790][ T1324] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 739.836576][ T1324] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 740.561512][ T1324] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 740.585006][ T1324] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 740.623832][ T1324] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 740.917913][T12328] loop6: detected capacity change from 0 to 40427 [ 740.932176][ T1324] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 741.159971][ T1324] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 741.397971][ T4740] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 741.512032][ T1324] usb 7-1: USB disconnect, device number 11 [ 741.557146][T12328] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 741.563709][T12328] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 741.575951][T12328] F2FS-fs (loop6): invalid crc value [ 741.619261][ T1324] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 741.737978][T12328] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 741.812755][T12328] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 741.819947][T12328] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 741.839816][ T1324] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 741.870934][ T4740] usb 3-1: device descriptor read/64, error -71 [ 742.067712][ T1324] keyspan 7-1:1.0: device disconnected [ 742.188594][T12345] attempt to access beyond end of device [ 742.188594][T12345] loop6: rw=10241, want=53256, limit=40427 [ 742.222944][ T4740] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 742.603230][ T7011] attempt to access beyond end of device [ 742.603230][ T7011] loop6: rw=2049, want=45104, limit=40427 [ 743.220965][ T4740] usb 3-1: device descriptor read/64, error -71 [ 743.854293][ T4740] usb usb3-port1: attempt power cycle [ 743.882886][T12358] FAULT_INJECTION: forcing a failure. [ 743.882886][T12358] name failslab, interval 1, probability 0, space 0, times 0 [ 743.902429][T12358] CPU: 1 PID: 12358 Comm: syz.2.2078 Not tainted syzkaller #0 [ 743.909945][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 743.920021][T12358] Call Trace: [ 743.923369][T12358] [ 743.926332][T12358] dump_stack_lvl+0x188/0x250 [ 743.931053][T12358] ? show_regs_print_info+0x20/0x20 [ 743.936288][T12358] ? load_image+0x410/0x410 [ 743.940832][T12358] ? __lock_acquire+0x7d40/0x7d40 [ 743.945905][T12358] should_fail+0x383/0x4b0 [ 743.950379][T12358] should_failslab+0x5/0x20 [ 743.954943][T12358] slab_pre_alloc_hook+0x51/0xc0 [ 743.959928][T12358] ? key_alloc+0x346/0x1030 [ 743.964470][T12358] __kmalloc_track_caller+0x69/0x330 [ 743.969814][T12358] ? key_alloc+0x346/0x1030 [ 743.974374][T12358] kmemdup+0x22/0x50 [ 743.978329][T12358] key_alloc+0x346/0x1030 [ 743.982717][T12358] keyring_alloc+0x41/0xa0 [ 743.987174][T12358] look_up_user_keyrings+0x459/0x670 [ 743.992526][T12358] ? key_validate+0xf0/0xf0 [ 743.997070][T12358] ? preempt_schedule+0xbc/0xd0 [ 744.001990][T12358] ? lookup_user_key+0xd1/0x1160 [ 744.006966][T12358] lookup_user_key+0x37c/0x1160 [ 744.007025][T12358] ? lookup_user_key_possessed+0x40/0x40 [ 744.007052][T12358] ? mark_lock+0x94/0x320 [ 744.007075][T12358] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 744.007116][T12358] keyctl_get_persistent+0x24b/0x780 [ 744.007146][T12358] ? proc_key_users_show+0x310/0x310 [ 744.007172][T12358] ? verify_lock_unused+0x140/0x140 [ 744.007197][T12358] ? verify_lock_unused+0x140/0x140 [ 744.018234][T12358] ? do_futex+0xd83/0x12b0 [ 744.054056][T12358] ? vfs_write+0xaa6/0xd70 [ 744.058520][T12358] __se_sys_keyctl+0x61e/0xa20 [ 744.063328][T12358] ? __x64_sys_keyctl+0xc0/0xc0 [ 744.068253][T12358] ? __context_tracking_exit+0x4c/0x80 [ 744.073753][T12358] ? __lock_acquire+0x7d40/0x7d40 [ 744.078822][T12358] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 744.084926][T12358] ? lock_chain_count+0x20/0x20 [ 744.089842][T12358] ? lockdep_hardirqs_on+0x94/0x140 [ 744.095081][T12358] ? __x64_sys_keyctl+0x1c/0xc0 [ 744.099983][T12358] do_syscall_64+0x4c/0xa0 [ 744.104440][T12358] ? clear_bhb_loop+0x30/0x80 [ 744.109176][T12358] ? clear_bhb_loop+0x30/0x80 [ 744.113905][T12358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 744.119838][T12358] RIP: 0033:0x7ff6d6f2d559 [ 744.119865][T12358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.119885][T12358] RSP: 002b:00007ff6d5185028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 744.119911][T12358] RAX: ffffffffffffffda RBX: 00007ff6d71b4fa0 RCX: 00007ff6d6f2d559 [ 744.160513][T12358] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 744.168631][T12358] RBP: 00007ff6d6fc4ad8 R08: 0000000000000000 R09: 0000000000000000 [ 744.176648][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.184662][T12358] R13: 00007ff6d71b5038 R14: 00007ff6d71b4fa0 R15: 00007ffd0c5affb8 [ 744.192697][T12358] [ 744.731818][T12372] net_ratelimit: 25 callbacks suppressed [ 744.731832][T12372] ip_tables: iptables: counters copy to user failed while replacing table [ 745.056049][T12377] binder: 12376:12377 ioctl c0306201 0 returned -14 [ 746.889972][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.914276][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.626879][T12411] device syzkaller0 entered promiscuous mode [ 749.637662][T12411] tipc: Started in network mode [ 749.642559][T12411] tipc: Node identity f252175ca17e, cluster identity 4711 [ 749.650107][T12411] tipc: Enabled bearer , priority 0 [ 749.670158][T12411] tipc: Resetting bearer [ 749.693004][T12409] tipc: Resetting bearer [ 749.756116][T12409] tipc: Disabling bearer [ 749.834788][T12417] net_ratelimit: 23 callbacks suppressed [ 749.834806][T12417] ip_tables: iptables: counters copy to user failed while replacing table [ 750.176590][ T4740] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 750.758653][ T4740] usb 3-1: not running at top speed; connect to a high speed hub [ 751.186607][ T4740] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.256787][ T4740] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 751.265989][ T4740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.409667][T12435] loop6: detected capacity change from 0 to 164 [ 751.738217][ T4740] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 751.753484][ T4740] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 751.786674][ T4740] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 751.867873][T12442] loop6: detected capacity change from 0 to 8 [ 751.897811][ T4740] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 751.978422][ T4740] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 752.050427][ T4740] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 752.100016][ T4740] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 752.140535][ T4740] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 752.181018][ T4740] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 752.250563][ T4740] usb 3-1: USB disconnect, device number 21 [ 752.340012][ T4740] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 752.404173][ T4740] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 753.172062][T12436] trusted_key: encrypted_key: insufficient parameters specified [ 753.243509][ T4740] keyspan 3-1:1.0: device disconnected [ 753.379870][T12456] tipc: Enabling of bearer rejected, failed to enable media [ 754.598045][T12473] raw_sendmsg: syz.6.2109 forgot to set AF_INET. Fix it! [ 754.788625][T12465] loop2: detected capacity change from 0 to 8192 [ 755.046015][ C1] net_ratelimit: 27 callbacks suppressed [ 759.245517][ T26] audit: type=1326 audit(1792439670.421:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.1.2119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6953268559 code=0x0 [ 759.765413][ T6928] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 760.005402][ T6928] usb 3-1: Using ep0 maxpacket: 16 [ 760.145943][ T6928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.446373][ T6928] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 760.530681][ T6928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.565300][ C0] net_ratelimit: 27 callbacks suppressed [ 760.630013][ T6928] usb 3-1: Product: syz [ 760.634273][ T6928] usb 3-1: Manufacturer: syz [ 760.694369][ T6928] usb 3-1: SerialNumber: syz [ 760.776522][ T6928] usb 3-1: config 0 descriptor?? [ 761.944935][T12477] usb 3-1: USB disconnect, device number 22 [ 766.484614][ C0] net_ratelimit: 25 callbacks suppressed [ 771.684142][ C1] net_ratelimit: 33 callbacks suppressed [ 772.803958][ T6928] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 773.153878][ T6928] usb 7-1: Using ep0 maxpacket: 16 [ 773.274195][ T6928] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.484102][ T6928] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 773.513917][ T6928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.521989][ T6928] usb 7-1: Product: syz [ 773.600767][ T6928] usb 7-1: Manufacturer: syz [ 773.618378][ T6928] usb 7-1: SerialNumber: syz [ 773.655406][ T6928] usb 7-1: config 0 descriptor?? [ 773.903638][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'. [ 774.115260][T12677] hub 8-0:1.0: USB hub found [ 774.120636][T12677] hub 8-0:1.0: 1 port detected [ 775.129868][ T6928] usb 7-1: USB disconnect, device number 12 [ 777.123413][ C0] net_ratelimit: 24 callbacks suppressed [ 777.892119][T12725] netlink: 'syz.3.2174': attribute type 4 has an invalid length. [ 778.011037][T12725] netlink: 'syz.3.2174': attribute type 17 has an invalid length. [ 779.487823][T12739] loop2: detected capacity change from 0 to 128 [ 779.665604][T12739] attempt to access beyond end of device [ 779.665604][T12739] loop2: rw=2049, want=1041, limit=128 [ 781.596384][T12761] loop2: detected capacity change from 0 to 512 [ 781.681289][T12761] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 782.322772][ C0] net_ratelimit: 32 callbacks suppressed [ 782.519625][T12761] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.2186: corrupted in-inode xattr [ 782.693828][T12761] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.2186: couldn't read orphan inode 15 (err -117) [ 782.875884][T12761] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 783.064866][T12778] ip_tables: iptables: counters copy to user failed while replacing table [ 787.359496][ C1] net_ratelimit: 24 callbacks suppressed [ 791.423819][T12860] loop6: detected capacity change from 0 to 4096 [ 791.624044][T12872] xt_CONNSECMARK: invalid mode: 66 [ 792.335174][T12870] input: syz1 as /devices/virtual/input/input15 [ 792.481637][ C1] net_ratelimit: 38 callbacks suppressed [ 792.488043][ C1] hrtimer: interrupt took 607889 ns [ 792.583695][T12860] ntfs3: loop6: Failed to load $Extend. [ 794.254401][T12886] xt_hashlimit: max too large, truncated to 1048576 [ 794.262725][T12886] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 794.833495][ T7011] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 794.840459][ T7011] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 797.840996][ C0] net_ratelimit: 18 callbacks suppressed [ 797.847207][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2226'. [ 797.973124][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2226'. [ 798.197084][T12902] loop6: detected capacity change from 0 to 24 [ 798.212553][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2226'. [ 798.683186][T12902] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 798.900271][T12902] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 799.500936][ T1324] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 800.845984][T12931] tipc: Cannot configure node identity twice [ 800.934791][T12932] tipc: Enabled bearer , priority 0 [ 801.000770][ T1324] usb 3-1: Using ep0 maxpacket: 16 [ 801.121013][ T1324] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 802.054657][ T1324] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 802.070259][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.253676][ T1324] usb 3-1: Product: syz [ 802.470770][ T1324] usb 3-1: Manufacturer: syz [ 802.475448][ T1324] usb 3-1: SerialNumber: syz [ 802.491359][ T1324] usb 3-1: config 0 descriptor?? [ 802.496553][ T6928] tipc: Node number set to 413849466 [ 803.040436][ C0] net_ratelimit: 24 callbacks suppressed [ 803.528966][ T6928] usb 3-1: USB disconnect, device number 23 [ 806.510761][T12982] tipc: Enabled bearer , priority 0 [ 808.226359][ T4738] net_ratelimit: 22 callbacks suppressed [ 808.347981][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.368065][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.976848][T13021] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 811.999268][T13032] loop2: detected capacity change from 0 to 40427 [ 812.118932][T13032] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 812.126563][T13032] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 812.143414][T13032] F2FS-fs (loop2): invalid crc value [ 812.194657][T13032] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 812.525812][T13032] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 812.533972][T13032] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 813.138550][T13049] tipc: Cannot configure node identity twice [ 813.188983][T13049] tipc: Enabled bearer , priority 0 [ 813.409427][ T4741] net_ratelimit: 29 callbacks suppressed [ 813.492574][T13054] attempt to access beyond end of device [ 813.492574][T13054] loop2: rw=10241, want=53256, limit=40427 [ 814.481412][ T4194] attempt to access beyond end of device [ 814.481412][ T4194] loop2: rw=2049, want=45104, limit=40427 [ 814.520420][ T6928] tipc: Node number set to 1395398492 [ 815.359735][T13069] loop6: detected capacity change from 0 to 2048 [ 818.182183][T13069] EXT4-fs (loop6): failed to initialize system zone (-117) [ 818.264325][T13069] EXT4-fs (loop6): mount failed [ 818.569397][ T4290] net_ratelimit: 26 callbacks suppressed [ 820.406515][T13098] Cannot find add_set index 0 as target [ 823.598746][ C0] net_ratelimit: 33 callbacks suppressed [ 823.665446][T13128] netlink: 'syz.1.2277': attribute type 4 has an invalid length. [ 826.923923][ T8305] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 827.140697][T13155] loop6: detected capacity change from 0 to 64 [ 828.177645][ T8305] usb 3-1: Using ep0 maxpacket: 16 [ 828.193016][T13155] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 828.317724][ T8305] usb 3-1: device descriptor read/all, error -71 [ 828.637507][ C0] net_ratelimit: 24 callbacks suppressed [ 828.723053][T12476] Bluetooth: hci5: command 0x0409 tx timeout [ 830.769572][T12647] device syz_tun left promiscuous mode [ 830.956365][T13145] rxe_eth0 speed is unknown, defaulting to 1000 [ 831.952403][T12477] Bluetooth: hci5: command 0x041b tx timeout [ 833.810789][ C1] net_ratelimit: 23 callbacks suppressed [ 834.008757][T13145] lo speed is unknown, defaulting to 1000 [ 834.116228][T12477] Bluetooth: hci5: command 0x040f tx timeout [ 834.841683][T13215] loop2: detected capacity change from 0 to 512 [ 836.510737][T12477] Bluetooth: hci5: command 0x0419 tx timeout [ 836.734396][T13215] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 836.758594][T13215] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2296: invalid indirect mapped block 256 (level 1) [ 836.773260][T13215] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2296: invalid indirect mapped block 2683928664 (level 1) [ 836.791831][T13215] EXT4-fs (loop2): 1 truncate cleaned up [ 836.799020][T13215] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 836.824554][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.474330][T13145] chnl_net:caif_netlink_parms(): no params data found [ 837.486001][T13238] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 838.944846][ C1] net_ratelimit: 26 callbacks suppressed [ 842.169926][T13145] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.246400][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.307271][T13145] device bridge_slave_0 entered promiscuous mode [ 842.430350][T13145] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.516109][T13145] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.622602][T13145] device bridge_slave_1 entered promiscuous mode [ 843.074480][ T7694] device ip6gretap0 left promiscuous mode [ 843.149895][T13288] netlink: 'syz.2.2309': attribute type 16 has an invalid length. [ 843.157985][T13288] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2309'. [ 844.015996][ C1] net_ratelimit: 22 callbacks suppressed [ 849.275979][ T7699] net_ratelimit: 16 callbacks suppressed [ 850.619282][T13318] input: syz1 as /devices/virtual/input/input16 [ 850.677774][T13145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.166957][T13322] FAULT_INJECTION: forcing a failure. [ 851.166957][T13322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 851.220083][T13322] CPU: 0 PID: 13322 Comm: syz.2.2319 Not tainted syzkaller #0 [ 851.227787][T13322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 851.237913][T13322] Call Trace: [ 851.241361][T13322] [ 851.244359][T13322] dump_stack_lvl+0x188/0x250 [ 851.249119][T13322] ? show_regs_print_info+0x20/0x20 [ 851.254391][T13322] ? load_image+0x410/0x410 [ 851.258970][T13322] ? __lock_acquire+0x7d40/0x7d40 [ 851.264072][T13322] should_fail+0x383/0x4b0 [ 851.268575][T13322] prepare_alloc_pages+0x1e3/0x5b0 [ 851.273872][T13322] __alloc_pages+0x11b/0x480 [ 851.278631][T13322] ? zone_statistics+0x170/0x170 [ 851.283628][T13322] ? up_write+0x1b6/0x410 [ 851.288020][T13322] alloc_pages_vma+0x2bc/0x790 [ 851.292835][T13322] handle_mm_fault+0x23be/0x4440 [ 851.297822][T13322] ? get_page+0xe0/0xe0 [ 851.302012][T13322] ? follow_page_mask+0x272/0x12b0 [ 851.307183][T13322] ? vma_is_secretmem+0x9/0x40 [ 851.311974][T13322] ? check_vma_flags+0x359/0x470 [ 851.316943][T13322] __get_user_pages+0x952/0x11e0 [ 851.321960][T13322] ? populate_vma_page_range+0x290/0x290 [ 851.327629][T13322] ? __might_sleep+0xf0/0xf0 [ 851.332251][T13322] ? read_lock_is_recursive+0x10/0x10 [ 851.337659][T13322] __get_user_pages_remote+0x1c2/0x730 [ 851.343149][T13322] ? get_user_pages_remote+0x55/0xa0 [ 851.348461][T13322] get_arg_page+0x11b/0x350 [ 851.352999][T13322] ? copy_string_kernel+0x280/0x280 [ 851.358219][T13322] ? up_write+0x1b6/0x410 [ 851.362629][T13322] copy_string_kernel+0x14d/0x280 [ 851.367700][T13322] do_execveat_common+0x360/0x6b0 [ 851.372767][T13322] __x64_sys_execveat+0xc0/0xe0 [ 851.377656][T13322] do_syscall_64+0x4c/0xa0 [ 851.382118][T13322] ? clear_bhb_loop+0x30/0x80 [ 851.386843][T13322] ? clear_bhb_loop+0x30/0x80 [ 851.391567][T13322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 851.397504][T13322] RIP: 0033:0x7ff6d6f2d559 [ 851.401963][T13322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.421797][T13322] RSP: 002b:00007ff6d5185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 851.430279][T13322] RAX: ffffffffffffffda RBX: 00007ff6d71b4fa0 RCX: 00007ff6d6f2d559 [ 851.438318][T13322] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000008 [ 851.446374][T13322] RBP: 00007ff6d6fc4ad8 R08: 0000000000001000 R09: 0000000000000000 [ 851.454393][T13322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.462412][T13322] R13: 00007ff6d71b5038 R14: 00007ff6d71b4fa0 R15: 00007ffd0c5affb8 [ 851.470453][T13322] [ 851.884198][T13145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.197871][T13332] loop6: detected capacity change from 0 to 2048 [ 853.498970][T13332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.807611][T13145] team0: Port device team_slave_0 added [ 854.331436][T13346] No such timeout policy "syz1" [ 854.394617][ C0] net_ratelimit: 26 callbacks suppressed [ 854.473722][T13145] team0: Port device team_slave_1 added [ 855.257336][T13145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.552125][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.829823][T13145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.106162][T13145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.831203][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.938493][T13145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.378130][T13145] device hsr_slave_0 entered promiscuous mode [ 859.413417][T13389] FAULT_INJECTION: forcing a failure. [ 859.413417][T13389] name failslab, interval 1, probability 0, space 0, times 0 [ 859.514893][ T4521] net_ratelimit: 24 callbacks suppressed [ 859.548889][T13389] CPU: 0 PID: 13389 Comm: syz.2.2337 Not tainted syzkaller #0 [ 859.556500][T13389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 859.566610][T13389] Call Trace: [ 859.569948][T13389] [ 859.572938][T13389] dump_stack_lvl+0x188/0x250 [ 859.577695][T13389] ? show_regs_print_info+0x20/0x20 [ 859.582956][T13389] ? load_image+0x410/0x410 [ 859.587553][T13389] ? __might_sleep+0xf0/0xf0 [ 859.587593][T13389] ? __lock_acquire+0x7d40/0x7d40 [ 859.587624][T13389] ? aa_get_newest_label+0xf5/0x5a0 [ 859.587655][T13389] should_fail+0x383/0x4b0 [ 859.587703][T13389] should_failslab+0x5/0x20 [ 859.587727][T13389] slab_pre_alloc_hook+0x51/0xc0 [ 859.587754][T13389] ? skb_clone+0x1bd/0x350 [ 859.587782][T13389] kmem_cache_alloc+0x3d/0x280 [ 859.587810][T13389] skb_clone+0x1bd/0x350 [ 859.587835][T13389] ? nfnetlink_rcv+0x4a7/0x2450 [ 859.587865][T13389] nfnetlink_rcv+0x4e0/0x2450 [ 859.587898][T13389] ? lockdep_hardirqs_on+0x94/0x140 [ 859.597603][T13389] ? __local_bh_enable_ip+0x136/0x1c0 [ 859.597641][T13389] ? _local_bh_enable+0xa0/0xa0 [ 859.597682][T13389] ? __dev_queue_xmit+0x1b64/0x2e50 [ 859.597708][T13389] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 859.597751][T13389] ? dev_queue_xmit+0x20/0x20 [ 859.597775][T13389] ? memcpy+0x3c/0x60 [ 859.597798][T13389] ? __copy_skb_header+0x3ba/0x4f0 [ 859.597838][T13389] ? skb_clone+0x1f1/0x350 [ 859.597862][T13389] ? rcu_lock_release+0x5/0x20 [ 859.597887][T13389] ? __lock_acquire+0x7d40/0x7d40 [ 859.597935][T13389] netlink_unicast+0x78f/0x940 [ 859.597973][T13389] netlink_sendmsg+0x8ba/0xbe0 [ 859.597995][T13389] ? lockdep_hardirqs_on+0x94/0x140 [ 859.598034][T13389] ? netlink_getsockopt+0x570/0x570 [ 859.598062][T13389] ? bpf_lsm_socket_accept+0x10/0x10 [ 859.720192][T13389] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 859.725530][T13389] ? security_socket_sendmsg+0x7c/0xa0 [ 859.731039][T13389] ? netlink_getsockopt+0x570/0x570 [ 859.736282][T13389] ____sys_sendmsg+0x5be/0x8f0 [ 859.736323][T13389] ? __sys_sendmsg_sock+0x30/0x30 [ 859.736359][T13389] ? import_iovec+0x6f/0xa0 [ 859.736388][T13389] ___sys_sendmsg+0x236/0x2e0 [ 859.736423][T13389] ? __sys_sendmsg+0x290/0x290 [ 859.736488][T13389] __se_sys_sendmsg+0x1b7/0x2a0 [ 859.736518][T13389] ? __x64_sys_sendmsg+0x80/0x80 [ 859.746460][T13389] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 859.746508][T13389] ? lockdep_hardirqs_on+0x94/0x140 [ 859.746541][T13389] do_syscall_64+0x4c/0xa0 [ 859.746564][T13389] ? clear_bhb_loop+0x30/0x80 [ 859.746590][T13389] ? clear_bhb_loop+0x30/0x80 [ 859.746616][T13389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 859.746644][T13389] RIP: 0033:0x7ff6d6f2d559 [ 859.746673][T13389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.746693][T13389] RSP: 002b:00007ff6d5185028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.746719][T13389] RAX: ffffffffffffffda RBX: 00007ff6d71b4fa0 RCX: 00007ff6d6f2d559 [ 859.746736][T13389] RDX: 0000000024000004 RSI: 0000200000000c40 RDI: 0000000000000009 [ 859.746752][T13389] RBP: 00007ff6d6fc4ad8 R08: 0000000000000000 R09: 0000000000000000 [ 859.746767][T13389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.746782][T13389] R13: 00007ff6d71b5038 R14: 00007ff6d71b4fa0 R15: 00007ffd0c5affb8 [ 859.746816][T13389] [ 859.917234][T13145] device hsr_slave_1 entered promiscuous mode [ 859.984687][T13145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 859.992306][T13145] Cannot create hsr debugfs directory [ 861.206886][T13145] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 861.276553][T13145] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 861.356371][ T7694] device hsr_slave_0 left promiscuous mode [ 861.385400][ T7694] device hsr_slave_1 left promiscuous mode [ 861.413879][ T7694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.430064][ T7694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.457290][ T7694] device bridge_slave_1 left promiscuous mode [ 861.481949][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.534725][ T7694] device bridge_slave_0 left promiscuous mode [ 861.541317][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.754459][ T7694] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 861.806761][ T7694] bond1 (unregistering): Released all slaves [ 863.290701][T13145] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 863.372807][T13145] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 864.008036][T13145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.048538][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 864.068895][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 864.224716][T13145] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.294101][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 864.305969][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 864.322315][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.329590][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.356560][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 864.400792][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 864.432152][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 864.444864][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.453114][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.495513][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 864.544492][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 864.610808][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 864.633634][ C0] net_ratelimit: 32 callbacks suppressed [ 864.685189][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 864.711900][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 864.755400][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 864.787091][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 864.865096][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 864.880562][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 864.917051][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 864.961895][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.014913][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 865.626759][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 865.646171][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 865.699408][T13145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.218752][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 866.251292][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 866.327839][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 866.354878][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 866.369864][T13145] device veth0_vlan entered promiscuous mode [ 866.401592][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 866.414580][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 866.472210][T13145] device veth1_vlan entered promiscuous mode [ 866.642126][T13145] device veth0_macvtap entered promiscuous mode [ 866.657226][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 866.678939][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 866.707877][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 866.746377][T13145] device veth1_macvtap entered promiscuous mode [ 866.845185][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.879973][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.895266][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.916378][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.935878][T13145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.954213][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 866.990938][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 867.014326][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 867.055863][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.081513][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.093968][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.112084][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.137973][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.166117][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.195244][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.219717][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.236068][T13145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.253700][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 867.276855][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 867.335219][T13145] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.347738][T13145] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.358042][T13145] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.368865][T13145] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.761938][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.786536][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.821927][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 867.947817][ T7701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.978909][ T7701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.991162][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 868.387118][T13464] loop6: detected capacity change from 0 to 256 [ 869.658118][ C1] net_ratelimit: 64 callbacks suppressed [ 870.467878][T13464] exfat: Deprecated parameter 'utf8' [ 870.566612][T13464] exfat: Unknown parameter 'iocharx:`8set' [ 870.703640][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.710066][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.438059][T12477] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 873.183112][T12477] Bluetooth: hci3: Injecting HCI hardware error event [ 873.625177][ T4193] Bluetooth: hci3: hardware error 0x00 [ 874.885663][ T7699] net_ratelimit: 23 callbacks suppressed [ 877.004586][T13518] loop7: detected capacity change from 0 to 40427 [ 877.286664][T13518] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 877.294100][T13518] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 877.307574][T13518] F2FS-fs (loop7): invalid crc value [ 877.416509][T13518] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 877.642983][T13518] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 877.651237][T13518] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 879.662952][T13145] attempt to access beyond end of device [ 879.662952][T13145] loop7: rw=2049, want=45104, limit=40427 [ 880.594909][ C1] net_ratelimit: 56 callbacks suppressed [ 882.962380][ T4734] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 883.292639][ T4734] usb 7-1: not running at top speed; connect to a high speed hub [ 883.426009][ T4734] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.487378][ T4734] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 883.531742][ T4734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.738885][ T4734] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 883.787044][ T4734] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 883.838951][ T4734] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 883.970174][ T4734] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 884.041465][ T4734] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 884.142641][ T4734] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 884.189215][ T4734] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 884.222036][ T4734] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 885.618139][ T4734] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 885.671048][ C0] net_ratelimit: 31 callbacks suppressed [ 885.753523][ T4734] usb 7-1: USB disconnect, device number 13 [ 886.756616][T13585] loop6: detected capacity change from 0 to 256 [ 886.824885][ T4734] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 886.872871][T13585] exfat: Deprecated parameter 'utf8' [ 886.878876][T13585] exfat: Deprecated parameter 'utf8' [ 886.965441][T13585] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 888.493882][T13593] loop2: detected capacity change from 0 to 2048 [ 888.599224][ T4734] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 888.629094][ T4734] keyspan 7-1:1.0: device disconnected [ 888.960519][ T26] audit: type=1326 audit(1792439800.165:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13595 comm="syz.7.2359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3049552559 code=0x0 [ 890.711272][ C1] net_ratelimit: 38 callbacks suppressed [ 890.876207][T13593] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 892.436005][T13624] loop2: detected capacity change from 0 to 256 [ 894.729486][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2368'. [ 895.829955][ C0] net_ratelimit: 29 callbacks suppressed [ 895.925935][T13650] device bridge0 entered promiscuous mode [ 897.721932][T13655] loop7: detected capacity change from 0 to 2048 [ 898.596440][T13655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 899.024664][T13675] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2375'. [ 899.322529][T13680] No such timeout policy "syz1" [ 900.278408][T13687] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2377'. [ 900.879348][ C0] net_ratelimit: 36 callbacks suppressed [ 906.869334][ T8305] net_ratelimit: 16 callbacks suppressed [ 907.410287][T13736] loop2: detected capacity change from 0 to 2048 [ 908.304768][T13736] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 911.988998][ T7699] net_ratelimit: 37 callbacks suppressed [ 917.027568][ C1] net_ratelimit: 33 callbacks suppressed [ 922.125761][ C0] net_ratelimit: 44 callbacks suppressed [ 922.360372][T13889] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 922.360372][T13889] [ 922.376033][T13889] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 922.391168][T13889] CIFS: Attempting to mount \\127.0.0.1\share [ 922.434355][T13889] CIFS: VFS: Error connecting to socket. Aborting operation. [ 922.452738][T13889] CIFS: VFS: cifs_mount failed w/return code = -111 [ 925.864806][T13897] binder: 13896:13897 ioctl 4018620d 0 returned -22 [ 927.058922][T13915] kAFS: unparsable volume name [ 927.474481][ C0] net_ratelimit: 26 callbacks suppressed [ 931.206747][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.213721][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.105735][ C0] net_ratelimit: 34 callbacks suppressed [ 938.533541][T13892] net_ratelimit: 29 callbacks suppressed [ 940.774395][T14037] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2451'. [ 943.744822][T13892] net_ratelimit: 39 callbacks suppressed [ 944.080430][T14077] ip_tables: iptables: counters copy to user failed while replacing table [ 946.193582][T14089] loop2: detected capacity change from 0 to 256 [ 946.399879][T14088] rxe_eth0 speed is unknown, defaulting to 1000 [ 946.611489][T14089] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 948.137969][T14088] lo speed is unknown, defaulting to 1000 [ 948.153738][ T8305] Bluetooth: hci1: command 0x0409 tx timeout [ 948.408975][ T4449] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.542980][ T4449] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.114030][ C0] net_ratelimit: 36 callbacks suppressed [ 949.508626][T14134] kAFS: unparsable volume name [ 950.183323][ T4449] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.234160][ T6928] Bluetooth: hci1: command 0x041b tx timeout [ 950.420385][ T4449] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.213953][T14088] chnl_net:caif_netlink_parms(): no params data found [ 951.462684][T14171] loop6: detected capacity change from 0 to 164 [ 952.413224][ T6924] Bluetooth: hci1: command 0x040f tx timeout [ 954.223445][ C0] net_ratelimit: 21 callbacks suppressed [ 956.607127][ T6924] Bluetooth: hci1: command 0x0419 tx timeout [ 956.709279][T14198] loop6: detected capacity change from 0 to 2048 [ 956.771227][T14198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 957.526984][T14088] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.542819][T14088] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.562305][T14088] device bridge_slave_0 entered promiscuous mode [ 957.607451][T14088] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.629876][T14088] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.696263][T14088] device bridge_slave_1 entered promiscuous mode [ 958.485062][T14088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.523475][T14088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.750141][T14088] team0: Port device team_slave_0 added [ 958.782704][T14088] team0: Port device team_slave_1 added [ 958.911809][T14088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.919907][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.032656][T14088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.102750][T14088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.122912][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.166136][T14088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.330350][T14088] device hsr_slave_0 entered promiscuous mode [ 959.339270][T14088] device hsr_slave_1 entered promiscuous mode [ 959.347267][T14088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.354948][T14088] Cannot create hsr debugfs directory [ 959.355978][ T7697] net_ratelimit: 29 callbacks suppressed [ 959.923496][T14088] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 959.966771][T14088] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 960.019076][T14088] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 960.064266][T14088] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 960.336194][ T4449] device hsr_slave_0 left promiscuous mode [ 960.356138][ T4449] device hsr_slave_1 left promiscuous mode [ 960.376054][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.399694][ T4449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.413351][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.420880][ T4449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.441310][ T4449] device bridge_slave_1 left promiscuous mode [ 960.453695][ T4449] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.486717][ T4449] device bridge_slave_0 left promiscuous mode [ 960.502959][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.547878][ T4449] device veth1_macvtap left promiscuous mode [ 960.554462][ T4449] device veth0_macvtap left promiscuous mode [ 960.560586][ T4449] device veth1_vlan left promiscuous mode [ 960.598379][ T4449] device veth0_vlan left promiscuous mode [ 961.154206][ T4449] team0 (unregistering): Port device team_slave_1 removed [ 961.193713][ T4449] team0 (unregistering): Port device team_slave_0 removed [ 961.223116][ T4449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.259902][ T4449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.428824][ T4449] bond0 (unregistering): Released all slaves [ 961.471230][T14088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.561451][T14088] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.569739][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 961.581463][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 961.639817][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 961.661421][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 961.671347][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.678508][ T7699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.712150][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 961.726678][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 961.758499][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 961.767305][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.774438][ T7699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.793182][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 961.816572][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 961.859164][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 961.870441][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 961.920733][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 961.930634][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 961.954854][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 961.963951][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 961.983789][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 962.003133][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 962.022097][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 962.038415][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 962.520294][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 962.534035][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 962.577195][T14088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.220798][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 963.244159][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 963.310169][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 963.326220][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 963.352792][T14088] device veth0_vlan entered promiscuous mode [ 963.380817][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 963.393464][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 963.435351][T14088] device veth1_vlan entered promiscuous mode [ 963.493915][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 963.523483][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 963.543132][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 963.553653][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 963.595420][T14088] device veth0_macvtap entered promiscuous mode [ 963.644686][T14088] device veth1_macvtap entered promiscuous mode [ 963.696613][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.716572][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.728011][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.742483][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.755685][T14088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.766216][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 963.776733][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 963.792959][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.806974][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.821773][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.836734][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.847499][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.858672][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.875314][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.889721][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.906070][T14088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.920452][T14088] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.930645][T14088] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.940106][T14088] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.950200][T14088] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.967715][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 963.979342][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 964.163730][ T7699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.171631][ T7699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.219276][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 964.277861][ T7697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.308326][ T7697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.329855][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 964.472663][ T4289] net_ratelimit: 64 callbacks suppressed [ 965.367631][T14318] loop6: detected capacity change from 0 to 512 [ 966.997127][T14320] usb usb9: usbfs: process 14320 (syz.2.2495) did not claim interface 0 before use [ 969.065114][T14331] kAFS: unparsable volume name [ 969.618374][T13892] net_ratelimit: 25 callbacks suppressed [ 971.447794][T14346] loop6: detected capacity change from 0 to 512 [ 973.488366][T14346] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 973.500970][T14346] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.621299][ C1] net_ratelimit: 45 callbacks suppressed [ 974.702989][T14379] loop8: detected capacity change from 0 to 4096 [ 979.713517][T14379] NILFS (loop8): invalid segment: Checksum error in segment payload [ 979.723358][T14379] NILFS (loop8): trying rollback from an earlier position [ 979.821452][ T4289] net_ratelimit: 13 callbacks suppressed [ 979.894645][T14379] NILFS (loop8): recovery complete [ 980.014750][T14389] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 983.718990][T14410] loop2: detected capacity change from 0 to 256 [ 984.028026][T14410] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 985.298084][ T4521] net_ratelimit: 28 callbacks suppressed [ 989.080356][T14437] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 989.080356][T14437] [ 989.097338][T14437] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 989.115162][T14437] CIFS: Attempting to mount \\127.0.0.1\share [ 990.735887][ C1] net_ratelimit: 36 callbacks suppressed [ 993.241506][T14437] CIFS: VFS: cifs_mount failed w/return code = -512 [ 993.475587][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.482195][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.268518][T14464] loop2: detected capacity change from 0 to 1024 [ 996.559848][ C1] net_ratelimit: 26 callbacks suppressed [ 998.445677][ T26] audit: type=1800 audit(1792439908.496:177): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2515" name="subclass" dev="configfs" ino=63820 res=0 errno=0 [ 1002.677715][ C0] net_ratelimit: 46 callbacks suppressed [ 1003.136134][ T26] audit: type=1800 audit(1792439912.885:178): pid=14543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2533" name="subclass" dev="configfs" ino=63900 res=0 errno=0 [ 1004.470799][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1004.479624][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1005.004493][T14542] loop8: detected capacity change from 0 to 4096 [ 1005.277308][ T4738] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1005.548211][T14542] ntfs: (device loop8): parse_options(): Invalid gid option argument: 0xffffffffffffffff [ 1005.653751][ T4738] usb 3-1: not running at top speed; connect to a high speed hub [ 1005.782859][ T4738] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.144758][ T4738] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1006.417144][ T4738] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1006.453570][T14566] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1006.464503][T14566] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1006.474127][T14566] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1006.623970][ T4738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.807925][ T4738] usb 3-1: can't set config #1, error -71 [ 1006.844222][ T4738] usb 3-1: USB disconnect, device number 26 [ 1008.090113][ T4521] net_ratelimit: 42 callbacks suppressed [ 1008.502333][T14591] block nbd2: NBD_DISCONNECT [ 1013.527571][ C0] net_ratelimit: 20 callbacks suppressed [ 1013.660942][ T26] audit: type=1800 audit(1792439922.739:179): pid=14611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2549" name="subclass" dev="configfs" ino=64564 res=0 errno=0 [ 1017.379548][T14669] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1018.525906][T14671] loop6: detected capacity change from 0 to 128 [ 1020.123258][ C1] net_ratelimit: 35 callbacks suppressed [ 1020.721383][T14671] attempt to access beyond end of device [ 1020.721383][T14671] loop6: rw=2049, want=140, limit=128 [ 1020.801702][T14671] attempt to access beyond end of device [ 1020.801702][T14671] loop6: rw=2049, want=140, limit=128 [ 1021.229821][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 1021.346855][T14706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1021.372773][T14706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1021.464257][T14704] loop8: detected capacity change from 0 to 128 [ 1024.145730][T14704] EXT4-fs (loop8): Unrecognized mount option "dont_measure" or missing value [ 1024.283699][ T4738] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1025.797962][ C1] net_ratelimit: 35 callbacks suppressed [ 1026.106547][ T4738] usb 3-1: device descriptor read/all, error -71 [ 1026.771427][ T26] audit: type=1800 audit(1792439934.998:180): pid=14752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2581" name="subclass" dev="configfs" ino=64258 res=0 errno=0 [ 1027.428705][T14762] loop6: detected capacity change from 0 to 256 [ 1027.942658][T14762] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1029.746484][T14781] IPVS: ip_vs_add_dest(): server weight less than zero [ 1030.597402][ T26] audit: type=1326 audit(1792439937.768:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1030.921262][ T26] audit: type=1326 audit(1792439937.768:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1030.968676][ T26] audit: type=1326 audit(1792439937.777:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6d6eedd8e code=0x7ffc0000 [ 1031.087733][ T26] audit: type=1326 audit(1792439937.777:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1031.225081][ T26] audit: type=1326 audit(1792439937.777:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1031.346883][ C1] net_ratelimit: 24 callbacks suppressed [ 1031.416392][ T26] audit: type=1326 audit(1792439937.777:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1031.649699][ T26] audit: type=1326 audit(1792439937.777:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1032.461157][ T26] audit: type=1326 audit(1792439937.777:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1032.762888][T14808] loop6: detected capacity change from 0 to 512 [ 1032.791533][ T26] audit: type=1326 audit(1792439937.777:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1032.913988][T14808] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1032.927635][T14808] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.995079][ T26] audit: type=1326 audit(1792439937.787:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1033.019751][ T26] audit: type=1326 audit(1792439937.787:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1034.851667][ T26] audit: type=1326 audit(1792439937.787:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1035.760594][ T26] audit: type=1326 audit(1792439937.787:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1035.784924][ T26] audit: type=1326 audit(1792439937.787:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1035.809216][ T26] audit: type=1326 audit(1792439937.787:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1035.833697][ T26] audit: type=1326 audit(1792439937.796:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1035.833736][ T26] audit: type=1326 audit(1792439937.796:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.2584" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6f2d559 code=0x7ffc0000 [ 1036.492313][T14838] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2598'. [ 1036.824438][ C1] net_ratelimit: 27 callbacks suppressed [ 1037.758124][T14297] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1037.971283][T14846] loop6: detected capacity change from 0 to 256 [ 1038.582668][T14847] 9pnet: Insufficient options for proto=fd [ 1039.734347][T14846] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1040.148171][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1040.148237][ T26] audit: type=1800 audit(1792439947.510:210): pid=14858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2606" name="subclass" dev="configfs" ino=64796 res=0 errno=0 [ 1042.204580][ C1] net_ratelimit: 27 callbacks suppressed [ 1042.829094][T14897] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1043.814114][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1046.637966][T14924] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2619'. [ 1046.647264][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2619'. [ 1046.657191][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2619'. [ 1047.574113][ C1] net_ratelimit: 31 callbacks suppressed [ 1048.123356][T14931] loop8: detected capacity change from 0 to 256 [ 1048.404655][T14931] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1051.130713][T14959] loop6: detected capacity change from 0 to 256 [ 1052.405563][T14959] exfat: Deprecated parameter 'utf8' [ 1052.410961][T14959] exfat: Deprecated parameter 'utf8' [ 1052.449710][T14959] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1053.398530][ C1] net_ratelimit: 43 callbacks suppressed [ 1054.488798][T14791] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1055.753977][T14791] usb 9-1: not running at top speed; connect to a high speed hub [ 1056.002465][T14791] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.100958][T14791] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1056.499310][T14791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.712616][T14791] usb 9-1: can't set config #1, error -71 [ 1056.955855][T14791] usb 9-1: USB disconnect, device number 3 [ 1057.003209][T15005] loop6: detected capacity change from 0 to 256 [ 1057.633288][T15005] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1059.211734][ C1] net_ratelimit: 36 callbacks suppressed [ 1059.480024][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.486470][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.856234][T15031] loop8: detected capacity change from 0 to 1024 [ 1061.188100][T15031] EXT4-fs (loop8): Ignoring removed bh option [ 1061.532452][T15031] EXT4-fs (loop8): mounted filesystem without journal. Opts: nolazytime,nodioread_nolock,noquota,delalloc,auto_da_alloc,bsddf,bh,,errors=continue. Quota mode: none. [ 1061.549327][T15031] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.860127][ T26] audit: type=1800 audit(1792439967.770:211): pid=15040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2646" name="subclass" dev="configfs" ino=64978 res=0 errno=0 [ 1063.219302][T12466] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1063.593347][T12466] usb 3-1: not running at top speed; connect to a high speed hub [ 1063.678893][T12466] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.712369][T12466] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1063.791375][T12466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.931083][T12466] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 1063.984566][T12466] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 1064.067935][T12466] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 1064.167212][T12466] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 1064.222120][T12466] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 1064.291586][T12466] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1064.357437][T12466] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 1064.416081][T12466] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 1064.496322][T12466] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1064.625603][T12466] usb 3-1: USB disconnect, device number 30 [ 1064.685306][T15080] loop8: detected capacity change from 0 to 256 [ 1064.734483][T12466] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1064.813171][T15080] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1064.859908][T12466] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1064.924150][T12466] keyspan 3-1:1.0: device disconnected [ 1065.152828][ C0] net_ratelimit: 42 callbacks suppressed [ 1067.559932][T15097] loop2: detected capacity change from 0 to 512 [ 1071.267158][ C0] net_ratelimit: 17 callbacks suppressed [ 1071.971033][T14297] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1072.313716][T14297] usb 3-1: not running at top speed; connect to a high speed hub [ 1072.402624][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1072.411818][T15146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1073.905694][T14297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.973181][T14297] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1074.332975][ T26] audit: type=1800 audit(1792439979.449:212): pid=15156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2674" name="subclass" dev="configfs" ino=65910 res=0 errno=0 [ 1074.355775][T14297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.431940][T14297] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 1076.480987][T14297] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 1076.489684][T14297] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 1076.626206][T14297] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 1076.834498][T13892] net_ratelimit: 29 callbacks suppressed [ 1077.941804][T14297] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 1078.116324][T14297] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1078.184364][T14297] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 1078.237250][T14297] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 1078.434772][T14297] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1078.456765][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1078.879675][T14297] usb 3-1: USB disconnect, device number 31 [ 1078.997714][ T8301] Bluetooth: hci1: command 0x0406 tx timeout [ 1079.023338][T14297] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1079.154723][T14297] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1079.335764][ T26] audit: type=1800 audit(1792439984.137:213): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2686" name="subclass" dev="configfs" ino=66085 res=0 errno=0 [ 1079.367740][T14297] keyspan 3-1:1.0: device disconnected [ 1082.436834][ C1] net_ratelimit: 22 callbacks suppressed [ 1082.761241][T15251] loop2: detected capacity change from 0 to 256 [ 1084.154758][T15251] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1084.612671][T12466] Bluetooth: hci5: command 0x1003 tx timeout [ 1084.621534][T13148] Bluetooth: hci5: sending frame failed (-49) [ 1087.359528][T12466] Bluetooth: hci5: command 0x1001 tx timeout [ 1087.366432][T13148] Bluetooth: hci5: sending frame failed (-49) [ 1087.912966][ C0] net_ratelimit: 28 callbacks suppressed [ 1089.628951][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'. [ 1090.068625][T12025] Bluetooth: hci5: command 0x1009 tx timeout [ 1093.321810][ C1] net_ratelimit: 30 callbacks suppressed [ 1093.820453][T15353] loop6: detected capacity change from 0 to 256 [ 1093.906176][ T26] audit: type=1800 audit(1792439997.828:214): pid=15356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2701" name="subclass" dev="configfs" ino=66285 res=0 errno=0 [ 1094.038973][T15353] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1094.497433][T15365] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1096.622516][T15383] loop6: detected capacity change from 0 to 128 [ 1099.039432][ C1] net_ratelimit: 32 callbacks suppressed [ 1105.546638][ C0] net_ratelimit: 29 callbacks suppressed [ 1108.779175][ T26] audit: type=1800 audit(1792440011.752:215): pid=15467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2733" name="subclass" dev="configfs" ino=66465 res=0 errno=0 [ 1108.971842][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2729'. [ 1108.990516][T15475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2729'. [ 1111.017809][ C1] net_ratelimit: 58 callbacks suppressed [ 1113.781156][T15516] loop6: detected capacity change from 0 to 2048 [ 1113.963625][T15516] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1113.994314][T15516] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.595936][T15524] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 1114.605886][T15524] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1116.425187][T15541] loop8: detected capacity change from 0 to 512 [ 1116.745483][ C1] net_ratelimit: 28 callbacks suppressed [ 1116.922276][T15539] overlayfs: failed to clone lowerpath [ 1117.858182][T15541] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 1117.945512][T15541] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.242886][T15573] overlayfs: failed to clone lowerpath [ 1120.466707][T15568] loop2: detected capacity change from 0 to 2048 [ 1120.768830][T15568] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1121.376686][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'. [ 1121.385658][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2747'. [ 1122.644144][ C1] net_ratelimit: 35 callbacks suppressed [ 1124.358025][T15612] futex_wake_op: syz.2.2753 tries to shift op by 144; fix this program [ 1124.383142][T15612] loop2: detected capacity change from 0 to 256 [ 1125.191629][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.198066][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.866492][T15619] loop8: detected capacity change from 0 to 256 [ 1126.451727][T15625] 9pnet: Insufficient options for proto=fd [ 1126.857290][T15612] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1126.913390][ T26] audit: type=1800 audit(1792440028.718:216): pid=15610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2753" name="file1" dev="loop2" ino=1048798 res=0 errno=0 [ 1127.259185][ T26] audit: type=1800 audit(1792440029.037:217): pid=15627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2758" name="subclass" dev="configfs" ino=66685 res=0 errno=0 [ 1127.594587][T15619] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1128.126186][ C1] net_ratelimit: 21 callbacks suppressed [ 1130.270261][T15651] IPVS: ip_vs_add_dest(): server weight less than zero [ 1130.299504][ T26] audit: type=1326 audit(1792440031.835:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1130.327193][ T26] audit: type=1326 audit(1792440031.835:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1131.136983][ T26] audit: type=1326 audit(1792440031.844:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5874bafd8e code=0x7ffc0000 [ 1132.001594][ T26] audit: type=1326 audit(1792440031.844:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1132.002228][ T26] audit: type=1326 audit(1792440031.844:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1132.071346][ T26] audit: type=1326 audit(1792440031.844:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1132.193587][ T26] audit: type=1326 audit(1792440031.844:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1132.395993][ T26] audit: type=1326 audit(1792440031.844:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1132.667725][ T26] audit: type=1326 audit(1792440031.844:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1132.725067][T15663] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1132.725067][T15663] [ 1132.738932][T15663] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1132.751532][T15663] CIFS: Attempting to mount \\127.0.0.1\share [ 1133.568189][ T26] audit: type=1326 audit(1792440031.844:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1133.598016][ T26] audit: type=1326 audit(1792440031.844:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1133.708240][ T26] audit: type=1326 audit(1792440031.863:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1134.344723][ T26] audit: type=1326 audit(1792440031.863:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1134.372243][ C0] net_ratelimit: 23 callbacks suppressed [ 1134.383946][T15663] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1134.462524][ T26] audit: type=1326 audit(1792440031.863:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1134.644717][ T26] audit: type=1326 audit(1792440031.863:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1134.810737][ T26] audit: type=1326 audit(1792440031.872:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1134.879397][ T26] audit: type=1326 audit(1792440031.872:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.8.2763" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x7ffc0000 [ 1136.507059][T15697] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1136.570169][T15697] Cannot find map_set index 2 as target [ 1136.601883][T15702] netlink: 14544 bytes leftover after parsing attributes in process `syz.8.2775'. [ 1136.669103][T15697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2774'. [ 1137.034106][T15705] loop2: detected capacity change from 0 to 4096 [ 1138.321096][T15725] netlink: 'syz.2.2781': attribute type 27 has an invalid length. [ 1138.398569][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'. [ 1138.449990][T15725] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1139.063637][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 1139.063671][ T26] audit: type=1800 audit(1792440040.088:251): pid=15731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2783" name="subclass" dev="configfs" ino=65420 res=0 errno=0 [ 1139.958184][ C0] net_ratelimit: 37 callbacks suppressed [ 1140.029356][T15707] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2777'. [ 1144.252436][T15785] kAFS: No cell specified [ 1145.310761][ T1170] net_ratelimit: 45 callbacks suppressed [ 1150.772282][ T4289] net_ratelimit: 36 callbacks suppressed [ 1151.321310][T15818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2801'. [ 1155.515926][T15854] loop8: detected capacity change from 0 to 16 [ 1155.963760][T15854] erofs: (device loop8): mounted with root inode @ nid 36. [ 1156.327004][ C1] net_ratelimit: 27 callbacks suppressed [ 1159.034033][T13920] tipc: Resetting bearer [ 1159.445095][T13920] tipc: Disabling bearer [ 1159.526510][T15887] Invalid ELF header magic: != ELF [ 1160.411806][T15885] rxe_eth0 speed is unknown, defaulting to 1000 [ 1161.684341][ C0] net_ratelimit: 27 callbacks suppressed [ 1162.150458][T12466] Bluetooth: hci2: command 0x0409 tx timeout [ 1162.936214][T15899] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 1162.962810][T15885] lo speed is unknown, defaulting to 1000 [ 1163.196165][ T4289] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.068849][ T4289] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.453944][T12466] Bluetooth: hci2: command 0x041b tx timeout [ 1165.208823][ T4289] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.682901][T12479] Bluetooth: hci2: command 0x040f tx timeout [ 1167.124636][T15969] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[15969] [ 1167.140446][ T1170] net_ratelimit: 42 callbacks suppressed [ 1168.029106][ T4289] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.609771][T15976] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 1168.904220][T14791] Bluetooth: hci2: command 0x0419 tx timeout [ 1169.320593][T15885] chnl_net:caif_netlink_parms(): no params data found [ 1169.770927][T15997] device bridge0 entered promiscuous mode [ 1169.894366][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2831'. [ 1170.967002][T16004] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 37049 - 0 [ 1171.112674][T16004] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 37049 - 0 [ 1171.121589][T16004] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 37049 - 0 [ 1171.130450][T16004] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 37049 - 0 [ 1171.130686][T16004] device geneve2 entered promiscuous mode [ 1171.297931][T16004] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 1171.348197][ T4289] tipc: Left network mode [ 1172.797679][ C0] net_ratelimit: 26 callbacks suppressed [ 1174.299655][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802366bc00: rx timeout, send abort [ 1174.732335][T15885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.829293][T15885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.836547][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023669400: rx timeout, send abort [ 1174.844911][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802366bc00: abort rx timeout. Force session deactivation [ 1174.859674][T15885] device bridge_slave_0 entered promiscuous mode [ 1174.936592][T15885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.950636][T15885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.012455][T15885] device bridge_slave_1 entered promiscuous mode [ 1175.370979][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023669400: abort rx timeout. Force session deactivation [ 1175.573331][T15885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.698707][T15885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.909647][T15885] team0: Port device team_slave_0 added [ 1176.039269][T15885] team0: Port device team_slave_1 added [ 1176.803818][T16090] loop2: detected capacity change from 0 to 8 [ 1178.393070][ T1170] net_ratelimit: 30 callbacks suppressed [ 1178.458217][T15885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.465227][T15885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.762850][T15885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.821959][T15885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.896385][T15885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.282100][T15885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.675959][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 1181.685011][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2856'. [ 1182.102218][T15885] device hsr_slave_0 entered promiscuous mode [ 1182.209161][T15885] device hsr_slave_1 entered promiscuous mode [ 1182.248787][T15885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1182.248936][T15885] Cannot create hsr debugfs directory [ 1184.281265][ C1] net_ratelimit: 22 callbacks suppressed ** 6347 printk messages dropped ** [ 1187.263788][ T4289] device hsr_slave_0 left promiscuous mode [ 1187.669215][ T4289] device hsr_slave_1 left promiscuous mode [ 1187.705706][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.759447][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.803867][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.811413][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.949875][ T4289] device bridge_slave_1 left promiscuous mode [ 1187.956191][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.980269][ T4289] device bridge_slave_0 left promiscuous mode [ 1187.986549][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.512902][ T4289] device veth1_macvtap left promiscuous mode [ 1189.523426][ T4289] device veth0_macvtap left promiscuous mode [ 1189.565139][ T4289] device veth1_vlan left promiscuous mode [ 1189.683404][ C0] net_ratelimit: 32 callbacks suppressed [ 1189.697191][ T4289] device veth0_vlan left promiscuous mode [ 1190.212198][ T6924] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1190.459090][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1190.467183][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1190.543753][ T6924] usb 3-1: Using ep0 maxpacket: 8 [ 1190.588393][ T6924] usb 3-1: no configurations [ 1190.644079][ T6924] usb 3-1: can't read configurations, error -22 [ 1191.334131][ T6924] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1191.466060][ T4289] team0 (unregistering): Port device bond1 removed [ 1191.490056][ T4289] bond1 (unregistering): Released all slaves [ 1191.612043][ T6924] usb 3-1: Using ep0 maxpacket: 8 [ 1191.655719][ T6924] usb 3-1: no configurations [ 1191.663253][ T6924] usb 3-1: can't read configurations, error -22 [ 1191.682742][ T6924] usb usb3-port1: attempt power cycle [ 1192.348911][ T6924] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1192.595406][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 1192.634689][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 1192.659478][ T6924] usb 3-1: Using ep0 maxpacket: 8 [ 1192.702225][ T6924] usb 3-1: no configurations [ 1192.706977][ T6924] usb 3-1: can't read configurations, error -22 [ 1192.766587][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.811589][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.849120][T16210] 9pnet_virtio: no channels available for device syz [ 1192.858264][T16210] overlayfs: failed to clone upperpath [ 1192.894246][ T6924] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1192.979899][ T6924] usb 3-1: device descriptor read/8, error -71 [ 1193.108660][ T6924] usb usb3-port1: unable to enumerate USB device [ 1195.133921][ C0] net_ratelimit: 32 callbacks suppressed [ 1197.408640][ T4289] bond0 (unregistering): Released all slaves [ 1197.810031][ T26] audit: type=1800 audit(1792440095.038:252): pid=16248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2879" name="c_chmask" dev="configfs" ino=68777 res=0 errno=0 [ 1197.887083][T16248] configfs-gadget gadget: afunc_bind:1183 Error! [ 1197.903692][ T26] audit: type=1800 audit(1792440095.104:253): pid=16248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2879" name="UDC" dev="configfs" ino=67952 res=0 errno=0 [ 1197.950450][T16248] udc dummy_udc.0: failed to start g1: -19 [ 1198.171748][T16248] loop2: detected capacity change from 0 to 16 [ 1198.239071][T16253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2879'. [ 1198.332835][T16252] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2880'. [ 1198.382944][T16248] erofs: (device loop2): mounted with root inode @ nid 36. [ 1198.481509][T15885] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1198.581586][T15885] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1198.606711][T15885] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1198.667584][T15885] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1200.791321][ C1] net_ratelimit: 23 callbacks suppressed [ 1200.881629][T15885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.940231][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1201.309735][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1201.392011][T15885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.356829][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1203.452425][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1203.514801][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.522055][ T4449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.556990][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1203.572830][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1203.607906][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.615093][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.623681][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1203.636278][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1203.835633][T16329] FAULT_INJECTION: forcing a failure. [ 1203.835633][T16329] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1204.416529][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1204.449360][T16329] CPU: 0 PID: 16329 Comm: syz.8.2895 Not tainted syzkaller #0 [ 1204.456917][T16329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1204.467027][T16329] Call Trace: [ 1204.470390][T16329] [ 1204.473369][T16329] dump_stack_lvl+0x188/0x250 [ 1204.478228][T16329] ? show_regs_print_info+0x20/0x20 [ 1204.483484][T16329] ? load_image+0x410/0x410 [ 1204.488056][T16329] should_fail+0x383/0x4b0 [ 1204.492527][T16329] get_futex_key+0x1a1/0x12d0 [ 1204.497266][T16329] ? __lock_acquire+0x13b3/0x7d40 [ 1204.502362][T16329] ? futex_wait_restart+0x250/0x250 [ 1204.507621][T16329] futex_wake+0x101/0x540 [ 1204.512001][T16329] ? futex_wait+0x680/0x680 [ 1204.516556][T16329] ? verify_lock_unused+0x140/0x140 [ 1204.521814][T16329] ? verify_lock_unused+0x140/0x140 [ 1204.527071][T16329] do_futex+0xd83/0x12b0 [ 1204.531377][T16329] ? vfs_write+0xaa6/0xd70 [ 1204.535847][T16329] ? futex_exit_release+0x1c0/0x1c0 [ 1204.541100][T16329] ? __context_tracking_exit+0x4c/0x80 [ 1204.546625][T16329] __se_sys_futex+0x389/0x420 [ 1204.551367][T16329] ? __x64_sys_futex+0xf0/0xf0 [ 1204.556195][T16329] ? __x64_sys_futex+0x1d/0xf0 [ 1204.561024][T16329] do_syscall_64+0x4c/0xa0 [ 1204.565496][T16329] ? clear_bhb_loop+0x30/0x80 [ 1204.570226][T16329] ? clear_bhb_loop+0x30/0x80 [ 1204.574980][T16329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1204.580941][T16329] RIP: 0033:0x7f5874bef559 [ 1204.585406][T16329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.605066][T16329] RSP: 002b:00007f5872e470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1204.613732][T16329] RAX: ffffffffffffffda RBX: 00007f5874e76fa8 RCX: 00007f5874bef559 [ 1204.621753][T16329] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5874e76fac [ 1204.629807][T16329] RBP: 00007f5874e76fa0 R08: 001e3c334f0260b0 R09: 0000000000000000 [ 1204.637843][T16329] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000 [ 1204.645866][T16329] R13: 00007f5874e77038 R14: 00007ffd75e30480 R15: 00007ffd75e30568 [ 1204.653904][T16329] [ 1204.744192][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1204.770622][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1204.817063][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1204.987962][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1205.006050][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1205.261536][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1205.289150][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1205.459075][T15885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1205.595039][T15885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1205.813770][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1205.839602][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1206.213086][ C1] net_ratelimit: 25 callbacks suppressed [ 1207.439272][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1207.447242][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1207.509606][T15885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.972927][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2905'. [ 1209.981902][T16403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2905'. [ 1211.328853][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1211.554864][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1211.666858][T16413] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2907'. [ 1211.676401][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 1211.685606][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 1211.797267][ T7699] net_ratelimit: 19 callbacks suppressed [ 1212.260362][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1212.309830][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1212.326128][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1212.343822][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1212.391960][T15885] device veth0_vlan entered promiscuous mode [ 1212.520596][T15885] device veth1_vlan entered promiscuous mode [ 1212.572243][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061b83c00: rx timeout, send abort [ 1212.584321][T16420] loop2: detected capacity change from 0 to 164 [ 1212.750506][T15885] device veth0_macvtap entered promiscuous mode [ 1212.792018][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1212.823135][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1212.876187][T15885] device veth1_macvtap entered promiscuous mode [ 1212.954297][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1212.985000][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1213.106729][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061b82c00: rx timeout, send abort [ 1213.555139][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.602825][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.691854][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.705074][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061b83c00: abort rx timeout. Force session deactivation [ 1213.715372][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061b82c00: abort rx timeout. Force session deactivation [ 1213.777108][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.817797][T15885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.852002][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.074239][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.929886][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.007265][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.042230][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.052796][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.065466][T16440] sctp: [Deprecated]: syz.2.2913 (pid 16440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1215.065466][T16440] Use struct sctp_sack_info instead [ 1215.095854][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.121197][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.213909][T15885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.275912][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1215.295973][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1215.314746][T16437] loop2: detected capacity change from 0 to 1024 [ 1215.335220][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1215.344269][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1215.422299][T15885] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.634891][T15885] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.912658][T15885] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.921478][T15885] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.021397][T16454] loop8: detected capacity change from 0 to 256 [ 1216.524814][T16454] exfat: Deprecated parameter 'namecase' [ 1216.530817][T16454] exfat: Deprecated parameter 'namecase' [ 1216.594412][T16454] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1216.641085][T16437] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1216.740980][T16437] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 1216.874542][T16437] EXT4-fs (loop2): invalid journal inode [ 1216.973663][T16437] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1217.326304][ C1] net_ratelimit: 53 callbacks suppressed [ 1217.838800][T16464] loop8: detected capacity change from 0 to 256 [ 1217.913718][T16464] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1217.979859][ T4449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.043888][ T4449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.890143][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1218.957803][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2917'. [ 1218.966808][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2917'. [ 1219.054205][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.062170][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.150356][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1219.408944][T16481] loop8: detected capacity change from 0 to 1024 [ 1219.446916][T16476] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2919'. [ 1219.482047][T16481] EXT4-fs (loop8): inline encryption not supported [ 1219.488721][T16481] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1219.787246][T16481] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #3: block 2: comm syz.8.2921: lblock 2 mapped to illegal pblock 2 (length 1) [ 1220.057980][T16481] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1220.066249][T16481] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.2921: Invalid inode table block 1 in block_group 0 [ 1220.427138][T16481] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1220.441117][T16481] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #3: comm syz.8.2921: mark_inode_dirty error [ 1220.455656][T16481] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1220.466104][T16481] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.2921: Failed to acquire dquot type 0 [ 1220.480047][T16481] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1220.495276][T16481] EXT4-fs error (device loop8): ext4_evict_inode:284: inode #11: comm syz.8.2921: mark_inode_dirty error [ 1220.507553][T16481] EXT4-fs warning (device loop8): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 1220.517872][T16481] EXT4-fs (loop8): 1 orphan inode deleted [ 1220.523886][T16481] EXT4-fs (loop8): mounted filesystem without journal. Opts: acl,noblock_validity,user_xattr,max_batch_time=0x00000000000009fe,inlinecrypt,dioread_nolock,,errors=continue. Quota mode: none. [ 1221.259323][T16510] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 16: comm syz.8.2921: lblock 0 mapped to illegal pblock 16 (length 1) [ 1221.291168][ T4521] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1221.384216][ T4521] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1221.392764][ T4521] EXT4-fs error (device loop8): ext4_release_dquot:6272: comm kworker/u4:12: Failed to release dquot type 0 [ 1222.443550][T14088] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1222.535113][T16525] netlink: 'syz.2.2929': attribute type 30 has an invalid length. [ 1222.561499][T14088] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1222.698232][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'. [ 1222.711662][T14088] EXT4-fs error (device loop8): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 1222.763611][T16525] bond0: option arp_missed_max: invalid value (0) [ 1222.804609][T16525] bond0: option arp_missed_max: allowed values 1 - 255 [ 1223.275657][ T7694] net_ratelimit: 40 callbacks suppressed [ 1224.400555][T16555] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1225.941324][T16544] ceph: No mds server is up or the cluster is laggy [ 1225.993765][T12466] libceph: connect (1)[c::]:6789 error -101 [ 1226.048696][T12466] libceph: mon0 (1)[c::]:6789 connect error [ 1226.486786][T12466] libceph: connect (1)[c::]:6789 error -101 [ 1227.094464][T12466] libceph: mon0 (1)[c::]:6789 connect error [ 1228.360159][T16581] loop9: detected capacity change from 0 to 1024 [ 1228.470844][T16581] EXT4-fs (loop9): inline encryption not supported [ 1228.477476][T16581] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1228.991683][ C1] net_ratelimit: 35 callbacks suppressed [ 1229.031203][T16581] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #3: block 2: comm syz.9.2939: lblock 2 mapped to illegal pblock 2 (length 1) [ 1229.045784][T16581] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 1229.054030][T16581] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.2939: Invalid inode table block 1 in block_group 0 [ 1229.067337][T16581] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1229.077071][T16581] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #3: comm syz.9.2939: mark_inode_dirty error [ 1229.091875][T16581] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 1229.102344][T16581] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.2939: Failed to acquire dquot type 0 [ 1229.114081][T16581] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1229.124034][T16581] EXT4-fs error (device loop9): ext4_evict_inode:284: inode #11: comm syz.9.2939: mark_inode_dirty error [ 1229.135693][T16581] EXT4-fs warning (device loop9): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 1229.146100][T16581] EXT4-fs (loop9): 1 orphan inode deleted [ 1229.151904][T16581] EXT4-fs (loop9): mounted filesystem without journal. Opts: acl,noblock_validity,user_xattr,max_batch_time=0x00000000000009fe,inlinecrypt,dioread_nolock,,errors=continue. Quota mode: none. [ 1229.175920][ T4521] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1229.317762][ T4521] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1229.402424][T16594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.409879][T16594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.452613][T16602] ip_tables: iptables: counters copy to user failed while replacing table [ 1229.479720][ T4521] EXT4-fs error (device loop9): ext4_release_dquot:6272: comm kworker/u4:12: Failed to release dquot type 0 [ 1229.892568][T15885] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1229.929940][T15885] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1229.961486][T15885] EXT4-fs error (device loop9): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 1233.572448][T14791] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1234.171616][T16666] loop9: detected capacity change from 0 to 256 [ 1234.305542][T16666] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1234.377585][ C0] net_ratelimit: 38 callbacks suppressed [ 1234.934277][T16684] tmpfs: Unknown parameter 'quota' [ 1235.660218][T14791] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1236.460126][T14791] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1237.440126][T11235] rpcbind: server 127.0.0.1 not responding, timed out [ 1237.522263][T14791] usb 9-1: string descriptor 0 read error: -71 [ 1237.528711][T14791] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1237.564950][T14791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.650808][T14791] usb 9-1: config 0 descriptor?? [ 1237.719543][T14791] usb 9-1: can't set config #0, error -71 [ 1237.752623][T14791] usb 9-1: USB disconnect, device number 4 [ 1237.989753][T13729] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1238.433493][T13729] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 1238.452559][T13729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.969398][T13729] usb 3-1: config 0 has no interfaces? [ 1239.213815][T13729] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1239.239783][T13729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.293191][T13729] usb 3-1: Product: syz [ 1239.297445][T13729] usb 3-1: Manufacturer: syz [ 1239.412443][T13729] usb 3-1: SerialNumber: syz [ 1239.468263][T13729] usb 3-1: config 0 descriptor?? [ 1240.302716][ C0] net_ratelimit: 48 callbacks suppressed [ 1240.698283][T13729] usb 3-1: USB disconnect, device number 36 [ 1245.745676][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2968'. [ 1245.760034][ C1] net_ratelimit: 35 callbacks suppressed [ 1246.028924][T16777] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1248.722619][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 1249.850237][T16824] loop8: detected capacity change from 0 to 256 [ 1250.009418][T16824] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1250.256609][ T26] audit: type=1800 audit(1792440145.140:254): pid=16833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2990" name="c_chmask" dev="configfs" ino=70664 res=0 errno=0 [ 1250.366306][ T26] audit: type=1800 audit(1792440145.215:255): pid=16833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2990" name="UDC" dev="configfs" ino=70669 res=0 errno=0 [ 1250.417943][T16833] configfs-gadget gadget: afunc_bind:1183 Error! [ 1250.442673][T16833] udc dummy_udc.0: failed to start g1: -19 [ 1250.461147][T16832] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1250.924769][T16836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2990'. [ 1250.947895][T16833] loop2: detected capacity change from 0 to 16 [ 1251.058834][T16833] erofs: (device loop2): mounted with root inode @ nid 36. [ 1251.181405][ C1] net_ratelimit: 51 callbacks suppressed [ 1251.275640][T16846] loop8: detected capacity change from 0 to 2048 [ 1251.361826][T16846] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 1256.095561][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1256.102073][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1256.304705][T16925] loop2: detected capacity change from 0 to 512 [ 1256.509732][T16925] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿ" or missing value [ 1256.786094][ C1] net_ratelimit: 36 callbacks suppressed [ 1259.019853][T16944] FAULT_INJECTION: forcing a failure. [ 1259.019853][T16944] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1259.132658][T16944] CPU: 1 PID: 16944 Comm: syz.2.3008 Not tainted syzkaller #0 [ 1259.140200][T16944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1259.140218][T16944] Call Trace: [ 1259.140227][T16944] [ 1259.140237][T16944] dump_stack_lvl+0x188/0x250 [ 1259.140267][T16944] ? show_regs_print_info+0x20/0x20 [ 1259.140292][T16944] ? load_image+0x410/0x410 [ 1259.140320][T16944] ? __lock_acquire+0x7d40/0x7d40 [ 1259.140351][T16944] should_fail+0x383/0x4b0 [ 1259.140377][T16944] _copy_from_user+0x2e/0x170 [ 1259.154631][T16944] __sys_bpf+0x26d/0x6f0 [ 1259.162274][T16944] ? bpf_link_show_fdinfo+0x380/0x380 [ 1259.162326][T16944] __x64_sys_bpf+0x78/0x90 [ 1259.172059][T16944] do_syscall_64+0x4c/0xa0 [ 1259.172085][T16944] ? clear_bhb_loop+0x30/0x80 [ 1259.172110][T16944] ? clear_bhb_loop+0x30/0x80 [ 1259.172134][T16944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1259.172159][T16944] RIP: 0033:0x7ff6d6f2d559 [ 1259.172182][T16944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.172201][T16944] RSP: 002b:00007ff6d5185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1259.172224][T16944] RAX: ffffffffffffffda RBX: 00007ff6d71b4fa0 RCX: 00007ff6d6f2d559 [ 1259.172240][T16944] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000024 [ 1259.172256][T16944] RBP: 00007ff6d6fc4ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1259.172270][T16944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.172283][T16944] R13: 00007ff6d71b5038 R14: 00007ff6d71b4fa0 R15: 00007ffd0c5affb8 [ 1259.172312][T16944] [ 1262.588692][ C0] net_ratelimit: 44 callbacks suppressed [ 1264.483218][ T26] audit: type=1326 audit(1792440158.457:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16982 comm="syz.8.3026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5874bef559 code=0x0 [ 1268.059888][ C0] net_ratelimit: 40 callbacks suppressed [ 1269.297412][ T6924] Bluetooth: hci5: command 0x1003 tx timeout [ 1269.310053][T13148] Bluetooth: hci5: sending frame failed (-49) [ 1269.776357][T17060] IPVS: Error connecting to the multicast addr [ 1271.479678][ T6924] Bluetooth: hci5: command 0x1001 tx timeout [ 1271.489661][T13148] Bluetooth: hci5: sending frame failed (-49) [ 1271.603754][T17087] loop2: detected capacity change from 0 to 16 [ 1271.654111][T17087] erofs: (device loop2): mounted with root inode @ nid 36. [ 1274.133609][T17116] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 1275.199193][ C1] net_ratelimit: 36 callbacks suppressed [ 1275.313849][ T8305] Bluetooth: hci5: command 0x1009 tx timeout [ 1276.051049][T17123] smc: removing ib device rxe0 [ 1276.685515][T17123] rdma_rxe: rxe-pd pool destroyed with unfree'd elem [ 1276.692282][T17123] rdma_rxe: rxe-mr pool destroyed with unfree'd elem [ 1276.699635][T17123] ------------[ cut here ]------------ [ 1276.705184][T17123] WARNING: CPU: 0 PID: 17123 at drivers/infiniband/core/restrack.c:52 rdma_restrack_clean+0x2a6/0x300 [ 1276.716196][T17123] Modules linked in: [ 1276.720150][T17123] CPU: 0 PID: 17123 Comm: syz.1.3048 Not tainted syzkaller #0 [ 1276.727682][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1276.738043][T17123] RIP: 0010:rdma_restrack_clean+0x2a6/0x300 [ 1276.744008][T17123] Code: 70 46 40 fa 49 81 c6 68 02 00 00 4c 89 f7 e8 61 fb d5 fc 48 89 df 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bf f6 84 fa e8 4a 46 40 fa <0f> 0b e9 b9 fd ff ff e8 3e 46 40 fa 0f 0b e9 f9 fd ff ff e8 32 46 [ 1276.763826][T17123] RSP: 0018:ffffc90003c8f240 EFLAGS: 00010246 [ 1276.770014][T17123] RAX: ffffffff8738dd16 RBX: ffff88802742d000 RCX: 0000000000080000 [ 1276.778037][T17123] RDX: ffffc9000ee3d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1276.786123][T17123] RBP: 1ffff1100f2871db R08: ffff888079438eeb R09: 1ffff1100f2871dd [ 1276.794193][T17123] R10: dffffc0000000000 R11: ffffed100f2871de R12: 1ffff1100f2871cc [ 1276.802290][T17123] R13: dffffc0000000000 R14: ffff888079438ed8 R15: ffff88802742d048 [ 1276.810547][T17123] FS: 00007f695149f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1276.819554][T17123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1276.826271][T17123] CR2: 00007fdcdf3636d0 CR3: 000000002569c000 CR4: 00000000003506f0 [ 1276.834298][T17123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1276.842292][T17123] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1276.850301][T17123] Call Trace: [ 1276.853587][T17123] [ 1276.856569][T17123] ib_dealloc_device+0x160/0x1f0 [ 1276.861525][T17123] __ib_unregister_device+0x110/0x170 [ 1276.866957][T17123] ib_unregister_device_and_put+0xb4/0xf0 [ 1276.872694][T17123] nldev_dellink+0x281/0x310 [ 1276.877345][T17123] ? nldev_newlink+0x580/0x580 [ 1276.882111][T17123] ? __lock_acquire+0x13b3/0x7d40 [ 1276.887222][T17123] ? apparmor_capable+0x12c/0x190 [ 1276.892274][T17123] ? bpf_lsm_capable+0x5/0x10 [ 1276.896970][T17123] ? security_capable+0x85/0xb0 [ 1276.901861][T17123] ? nldev_newlink+0x580/0x580 [ 1276.906630][T17123] rdma_nl_rcv+0x6d8/0xa00 [ 1276.911081][T17123] ? rdma_nl_net_init+0x190/0x190 [ 1276.916108][T17123] ? rcu_lock_release+0x5/0x20 [ 1276.920909][T17123] netlink_unicast+0x78f/0x940 [ 1276.925686][T17123] netlink_sendmsg+0x8ba/0xbe0 [ 1276.930484][T17123] ? netlink_getsockopt+0x570/0x570 [ 1276.935685][T17123] ? aa_sock_msg_perm+0x94/0x150 [ 1276.940829][T17123] ? apparmor_socket_sendmsg+0x88/0x230 [ 1276.946380][T17123] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1276.951693][T17123] ? security_socket_sendmsg+0x7c/0xa0 [ 1276.957159][T17123] ? netlink_getsockopt+0x570/0x570 [ 1276.962383][T17123] ____sys_sendmsg+0x5be/0x8f0 [ 1276.967177][T17123] ? __sys_sendmsg_sock+0x30/0x30 [ 1276.972238][T17123] ? import_iovec+0x6f/0xa0 [ 1276.976750][T17123] ___sys_sendmsg+0x236/0x2e0 [ 1276.981455][T17123] ? __sys_sendmsg+0x290/0x290 [ 1276.986285][T17123] __se_sys_sendmsg+0x1b7/0x2a0 [ 1276.991144][T17123] ? __x64_sys_sendmsg+0x80/0x80 [ 1276.996107][T17123] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1277.002107][T17123] ? lockdep_hardirqs_on+0x94/0x140 [ 1277.007362][T17123] do_syscall_64+0x4c/0xa0 [ 1277.011786][T17123] ? clear_bhb_loop+0x30/0x80 [ 1277.016511][T17123] ? clear_bhb_loop+0x30/0x80 [ 1277.021195][T17123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1277.027115][T17123] RIP: 0033:0x7f6953268559 [ 1277.031534][T17123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.051169][T17123] RSP: 002b:00007f695149f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1277.059612][T17123] RAX: ffffffffffffffda RBX: 00007f69534f0090 RCX: 00007f6953268559 [ 1277.067607][T17123] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000009 [ 1277.075615][T17123] RBP: 00007f69532ffad8 R08: 0000000000000000 R09: 0000000000000000 [ 1277.083638][T17123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1277.091631][T17123] R13: 00007f69534f0128 R14: 00007f69534f0090 R15: 00007fff69e38128 [ 1277.099664][T17123] [ 1277.102841][T17123] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1277.110121][T17123] CPU: 0 PID: 17123 Comm: syz.1.3048 Not tainted syzkaller #0 [ 1277.117589][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1277.127647][T17123] Call Trace: [ 1277.130930][T17123] [ 1277.133864][T17123] dump_stack_lvl+0x188/0x250 [ 1277.138642][T17123] ? show_regs_print_info+0x20/0x20 [ 1277.143863][T17123] ? load_image+0x410/0x410 [ 1277.148381][T17123] panic+0x2f8/0x850 [ 1277.152279][T17123] ? bpf_jit_dump+0xd0/0xd0 [ 1277.156806][T17123] ? rdma_restrack_clean+0x2a6/0x300 [ 1277.162100][T17123] __warn+0x248/0x2b0 [ 1277.166083][T17123] ? rdma_restrack_clean+0x2a6/0x300 [ 1277.171390][T17123] report_bug+0x1b9/0x2e0 [ 1277.175730][T17123] handle_bug+0x3a/0x70 [ 1277.179907][T17123] exc_invalid_op+0x16/0x40 [ 1277.184411][T17123] asm_exc_invalid_op+0x16/0x20 [ 1277.189285][T17123] RIP: 0010:rdma_restrack_clean+0x2a6/0x300 [ 1277.195194][T17123] Code: 70 46 40 fa 49 81 c6 68 02 00 00 4c 89 f7 e8 61 fb d5 fc 48 89 df 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bf f6 84 fa e8 4a 46 40 fa <0f> 0b e9 b9 fd ff ff e8 3e 46 40 fa 0f 0b e9 f9 fd ff ff e8 32 46 [ 1277.214798][T17123] RSP: 0018:ffffc90003c8f240 EFLAGS: 00010246 [ 1277.220870][T17123] RAX: ffffffff8738dd16 RBX: ffff88802742d000 RCX: 0000000000080000 [ 1277.228861][T17123] RDX: ffffc9000ee3d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1277.236835][T17123] RBP: 1ffff1100f2871db R08: ffff888079438eeb R09: 1ffff1100f2871dd [ 1277.244829][T17123] R10: dffffc0000000000 R11: ffffed100f2871de R12: 1ffff1100f2871cc [ 1277.252803][T17123] R13: dffffc0000000000 R14: ffff888079438ed8 R15: ffff88802742d048 [ 1277.260784][T17123] ? rdma_restrack_clean+0x2a6/0x300 [ 1277.266085][T17123] ib_dealloc_device+0x160/0x1f0 [ 1277.271033][T17123] __ib_unregister_device+0x110/0x170 [ 1277.276563][T17123] ib_unregister_device_and_put+0xb4/0xf0 [ 1277.282304][T17123] nldev_dellink+0x281/0x310 [ 1277.286909][T17123] ? nldev_newlink+0x580/0x580 [ 1277.291677][T17123] ? __lock_acquire+0x13b3/0x7d40 [ 1277.296766][T17123] ? apparmor_capable+0x12c/0x190 [ 1277.301795][T17123] ? bpf_lsm_capable+0x5/0x10 [ 1277.306476][T17123] ? security_capable+0x85/0xb0 [ 1277.311351][T17123] ? nldev_newlink+0x580/0x580 [ 1277.316118][T17123] rdma_nl_rcv+0x6d8/0xa00 [ 1277.320547][T17123] ? rdma_nl_net_init+0x190/0x190 [ 1277.325572][T17123] ? rcu_lock_release+0x5/0x20 [ 1277.330350][T17123] netlink_unicast+0x78f/0x940 [ 1277.335139][T17123] netlink_sendmsg+0x8ba/0xbe0 [ 1277.339908][T17123] ? netlink_getsockopt+0x570/0x570 [ 1277.345111][T17123] ? aa_sock_msg_perm+0x94/0x150 [ 1277.350053][T17123] ? apparmor_socket_sendmsg+0x88/0x230 [ 1277.355603][T17123] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1277.360899][T17123] ? security_socket_sendmsg+0x7c/0xa0 [ 1277.366378][T17123] ? netlink_getsockopt+0x570/0x570 [ 1277.371603][T17123] ____sys_sendmsg+0x5be/0x8f0 [ 1277.376383][T17123] ? __sys_sendmsg_sock+0x30/0x30 [ 1277.381425][T17123] ? import_iovec+0x6f/0xa0 [ 1277.385935][T17123] ___sys_sendmsg+0x236/0x2e0 [ 1277.390622][T17123] ? __sys_sendmsg+0x290/0x290 [ 1277.395422][T17123] __se_sys_sendmsg+0x1b7/0x2a0 [ 1277.400279][T17123] ? __x64_sys_sendmsg+0x80/0x80 [ 1277.405221][T17123] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1277.411216][T17123] ? lockdep_hardirqs_on+0x94/0x140 [ 1277.416425][T17123] do_syscall_64+0x4c/0xa0 [ 1277.420850][T17123] ? clear_bhb_loop+0x30/0x80 [ 1277.425555][T17123] ? clear_bhb_loop+0x30/0x80 [ 1277.430259][T17123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1277.436155][T17123] RIP: 0033:0x7f6953268559 [ 1277.440574][T17123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.460272][T17123] RSP: 002b:00007f695149f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1277.468687][T17123] RAX: ffffffffffffffda RBX: 00007f69534f0090 RCX: 00007f6953268559 [ 1277.476680][T17123] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000009 [ 1277.484669][T17123] RBP: 00007f69532ffad8 R08: 0000000000000000 R09: 0000000000000000 [ 1277.492643][T17123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1277.500614][T17123] R13: 00007f69534f0128 R14: 00007f69534f0090 R15: 00007fff69e38128 [ 1277.508598][T17123] [ 1277.512462][T17123] Kernel Offset: disabled [ 1277.517282][T17123] Rebooting in 86400 seconds..