last executing test programs: 9m19.260311377s ago: executing program 4 (id=20): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0xffff, 0x4, 0x9, 0x433c6, 0xffffffffffffffff, 0x1}, 0x50) socket$igmp(0x2, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x130}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081c", 0xa8}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c", 0x50}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512d82086a1a2", 0x4f}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d9c8a463041e206ecb01a51b07ab9ae015b316e56b9ba420baffca4", 0x51}, {0x0}], 0x5) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r4, 0x0, 0x32, 0x0, &(0x7f0000002cc0)) write(r3, &(0x7f0000001e00)="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", 0x3a6) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m16.593664262s ago: executing program 4 (id=22): syz_open_dev$vim2m(&(0x7f0000000200), 0x6, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = open(0x0, 0x80140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x5a42, &(0x7f0000000040)={0x0, 0x5bf4, 0x10, 0x1, 0x148}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0xc, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listns(0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) syz_ublk_setup_queues(r10, r8, &(0x7f0000000340)={0x0, 0x5a7a, 0x0, 0x2, 0x2ca}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x0, 0x1f5, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa8d6, 0x1000, 0x4000006, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x40000, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x1, 0x20e, 0x0, r0}}], 0x4, &(0x7f0000000400)={0x2e, 0x10, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r7, '\x00', {0x6, 0xe50, 0x0, 0x0}}, &(0x7f0000000480)) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x2}) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xc1962c2dcac55def, 0x20000800, &(0x7f0000000100)={0xa, 0x4e22, 0x40000000, @remote, 0x1}, 0x0) pipe2(&(0x7f0000000200), 0x800) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0xafa9, 0x1800}], 0x1, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) mount(0x0, 0x0, 0x0, 0x4000, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=@v3={0x3000000, [{0xffff, 0xa8}, {0x8, 0x4}]}, 0x18, 0x3) 9m12.669909583s ago: executing program 4 (id=28): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x8001, 0x1, 0x20b, 0x1, 0xfffffffe, 0xeb8a, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x80}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) syz_mount_image$udf(&(0x7f00000028c0), &(0x7f0000002900)='./file0\x00', 0x0, &(0x7f0000002940), 0x1, 0x2893, &(0x7f0000002980)="$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") 9m10.910881938s ago: executing program 4 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8001) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x20000000000000, 0x0) mq_unlink(&(0x7f00000002c0)='Gt\xe80\x00(Y\xb3\xa4t\x9f\x92\xd9Qg\xf3dfv\xe1\x83\x9bs\x01\x17H9\x0e\xa3c;T\xf6\xa1\xa0\x8e\xaf5Lk\xcc6u\x1d\xae\tWb}\xd3\x1e9\xd21\xfc\xc0\xe1n\xdd\f7~\xe9\xb9\x9cb\x81\x12e1\x80\x05[\x86=\xd0[\xc9\x0f53q\xd9m\x7f\xa7\x05\xf0&\x0e\xd5\xeb\x13\x80\xfb\x8e') close(r4) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYBLOB], 0x354}, 0x1, 0x0, 0x0, 0x10}, 0x840) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000000c0)={'syz_tun\x00', 0x7}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x401, 0x400000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af33da4}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0xfd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 9m9.339285277s ago: executing program 4 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000c40)='p:s/p ./file0:0', 0xf) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000240)=0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) pipe(&(0x7f00000001c0)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x4b4b, &(0x7f0000000040)) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 9m7.940611131s ago: executing program 4 (id=32): r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x48850) r4 = getpgrp(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, &(0x7f0000000000)={0xc, 0xf2a, 0xfffffff8}, 0x0) mknod(0x0, 0x8001420, 0x0) open$dir(0x0, 0x424002, 0x95) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x154) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000180)={0xa, {0x1, 0x3, 0x6}}, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000240)={0x14, &(0x7f0000000300)={0x40, 0x3, 0xc, {0xc, 0xf, "b5ec326d29fd7a50b269"}}, 0x0}, 0x0) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000040), 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31a00ffa1000000bfa10000000000000701000007000000b702000008000000b703000000000000850000007600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1e) 8m52.695084805s ago: executing program 32 (id=32): r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x48850) r4 = getpgrp(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, &(0x7f0000000000)={0xc, 0xf2a, 0xfffffff8}, 0x0) mknod(0x0, 0x8001420, 0x0) open$dir(0x0, 0x424002, 0x95) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x154) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000180)={0xa, {0x1, 0x3, 0x6}}, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000240)={0x14, &(0x7f0000000300)={0x40, 0x3, 0xc, {0xc, 0xf, "b5ec326d29fd7a50b269"}}, 0x0}, 0x0) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000040), 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31a00ffa1000000bfa10000000000000701000007000000b702000008000000b703000000000000850000007600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1e) 8m35.063518609s ago: executing program 0 (id=66): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 8m31.90270832s ago: executing program 0 (id=69): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4}, 0x94) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) 8m27.780382446s ago: executing program 0 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioprio_get$uid(0x3, 0xffffffffffffffff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3c, 0x3000001, 0x50, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18, 0x48811}}], 0x1, 0x40804) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000080)) 8m25.901228309s ago: executing program 0 (id=74): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f0000000bc0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 8m14.408038786s ago: executing program 0 (id=84): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0xc87c, 0x400, 0x1, 0x15}, 0x0, 0x4, &(0x7f0000001680)={0x2e, 0x0, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2000, 0xa5e, 0x0, &(0x7f0000000680)=@buf_4k="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"}}, &(0x7f0000000140)) r3 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x0, 0x17b}) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000080)={0x3e8, 0x0, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r3, 0x0, 0x3f, 0x9, &(0x7f0000000180), 0x18) r4 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) 8m12.359952636s ago: executing program 0 (id=87): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a00000001000000000000010400000020000001050000000100"], 0x0, 0x8e}, 0x28) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000080)=ANY=[], 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) close(0x3) 8m11.072803748s ago: executing program 33 (id=87): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a00000001000000000000010400000020000001050000000100"], 0x0, 0x8e}, 0x28) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000080)=ANY=[], 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) close(0x3) 4m40.25178182s ago: executing program 2 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x201, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, &(0x7f0000000600)='dir .', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') r3 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r4, 0x0, &(0x7f00000010c0)={0x0, 0xfb7e, 0x3000, 0x2, 0x3cf, 0x0, r3}, 0x0, 0x4, &(0x7f0000000e00)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x702219655fdc3d5a, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socket$kcm(0xa, 0x5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) preadv(r6, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) write(r1, &(0x7f0000000700)='bind', 0x4) writev(r0, &(0x7f0000000640)=[{&(0x7f00000003c0)="eca08c5eb32064d0acf903f0bbed1ebdb3dce38f47c1672516eef9b1c2e33f528ebed9113e9fc6dbad18a74895f6b6226821fe5f6930d56818e4ff05", 0x3c}], 0x1) 4m36.779228902s ago: executing program 2 (id=325): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x94, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000140)={0x1, 0x803, 0x2}) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/current_tracer\x00', 0x1, 0x0) writev(r1, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000140)="bf07", 0x2}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r2}, 0x38) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='prev_state.function', 0x13) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x8e0d4, &(0x7f0000000280)={[{@creator={'creator', 0x3d, "91b212f7"}}, {@nls={'nls', 0x3d, 'cp862'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@gid}]}, 0xff, 0x5d9, &(0x7f0000000cc0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./tracing\x00', 0x804053, 0x0, 0x0, 0x0, &(0x7f0000000340)) syz_mount_image$fuse(0x0, &(0x7f0000002280)='./file0\x00', 0x1f6e0a9aa7648d53, 0x0, 0x1, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40), 0x800001, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x3, 0x2, 0x3, {0xa, 0x4e20, 0x20000005, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x32) recvfrom$unix(r3, &(0x7f0000000180)=""/105, 0x69, 0x20, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x300000d, &(0x7f0000000440)=ANY=[@ANYBLOB="0096976cd8c2447ee2f807739bebd49821a5eba779e235ef8afc9adc2c954e64cf4dfbe2e711fab8d69a6a1d20a4ced0caa0548d881bd346061574d8ae96f710afe8528e3923b06874cd15301b6d6cb65480241b1f4cf97e315418bd404b7cb0aef5b396c8d2f598f7b9a8403f2fc7e2adc031614449d928d0f709ae2840783a7dacc67fb73c6af73556cf35c2f7be3fc528945f701fa128fe153b93d7f5e7bdfe"], 0x1, 0x5f0, &(0x7f0000000bc0)="$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") ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000040)) 4m29.964314396s ago: executing program 2 (id=335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$lock(r4, 0x5, 0x0) r5 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) keyctl$session_to_parent(0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x2, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000005c0)={0x66c, r9, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x14}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x63c, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x113f}, @broadcast, @device_b, @initial, {0xf, 0x1}}, 0x401, 0x6d90, @device_a, {0x0, 0x1b, @random="00494e611a62826540d75672162d30594a89128949e5655e2fb246"}, @void, @void, [{0xdd, 0xc0, "91a42b5a6248f023c5aa35578a1c4eef5e8f501ae0bf5ae68adc3de9ee78337192e26216c84b38ae3bb7744dedd2105841ac3c58f3e1241cbf36ad5dfec981d79dabf418f4b4dbd652bcfc3a954fff9346705075324ac47efec0e7639171753813eb4ef7077ff6a8c62ddf8f9cf94ce25b721c9b68ef745106f313bb84dbd007ab4a7abe1e8600e491bafe245306539e79e5d77a26e255ac9e405c1e6723ec1d6844da01204c0c8420df4f293ae227f2a29e016e09d27fde053998e3b04d1873"}, {0xdd, 0x11, "aaaa57bca3168dd052482b9641ff9a58ea"}, {0xdd, 0xd2, "49f18d64fe20b53f4f1e64808490b714e3dc37a2cbd2d9e2c63b0d7e163e54fbbf4cb31478647dcc37e25edceb457359648cef40c0244d3c366fe80c2d2ccff865b1896ceb57d4bb4338de7ddd96ab7fd83eed4db2413990ad9dfa65bbf6967f11764e07364d7df322f4adc5ce7580aedf86acc645e79a5d27b33e51bf51d46ba1cdb7aefffdaa7f75f656ae7876d38527636a12318c5f6bee1ca08dd6c9f93dfa3a0e31f419f0bf6351533f7aa2a04112aecbb8c2c8eaa08fa9150efd9f7d1b7ff6cb9256e913c204e3403a059d8f98a9d2"}, {0xdd, 0xcb, "18d454618982e93df95088d701dc05cb372e45b82d3d2c01f068ed3b71d22ad0e6027213bdee897b8c662666e491508802f116011e570dcc372821bafb99e9fd132c0e86a7c267fc7f7450eb7fef5061681a85bb3aaa45193a6e062cca85f299cc84424de30c14536466d7d41f17055a46086c76ea3ab2c46ebf20b263e16f8898528fe2c089b1abce52637f218d4f6714c39ed084f46c7ce926efc99a88d8511bb2db23d53bb2900d2f401ec16d762d7a282b01530da19ab0749916d62442cb4ded090ec611366dd25c5e"}, {0xdd, 0x9e, "588b65fdf24d503269d90f7735f46f88fc040472316b9faa46219ebf5f78bf0cca8243a0884b83c20ac2d976cfd77b3160e2567d593255587285c91b8d58903609930250e73faf808a6933a117b6b79078fe181a8ab8d5c9a51c76426fe04f2d5706a1edadbd8d7c0c0f7c71f7e16408e557dca06afbd8987ef022e3c7621719010cea31955360a9e3b4090394303ba82a33885bbc23bda8b4179818743f"}, {0xdd, 0x83, "3fb24082213d58b7bfaa2009ee61ef694d85dd496c1042258bfb7c081240c8e0903dd8a1ae47410e4262e33540b6c4582141f789d9de030babd1e4e53b7dae003ccee7eabd82b227f7046694cd0e012d9b7ab75f9bea5f3bcd69a8da4b9f43109a9f093142ec43eecd1951349c50b2fe9ac4f5aa8f47b5ee5f6f8e89ab4376bf4a81f8"}, {0xdd, 0xec, "6578bba14c9ee5248652b11da1c73b8ad5825b9745179d8f29315e8cd5f3508803d0e9594f43f0c3a36795f36d3f04df3d565363719c52c5e98492efd77edb0b144348bcb8551eac07ef1ff1427d57d29c79ac8c97f0eeacf65fcf6a9ea54d3b139e1b80bb8c99da39a619e03e921ed64ae6dc0592db950c40746162ce13ea61eaaaa5808654e512ef7e1c422453400fc6d44325d186ee7fb2786c3f9bde68c31e0e5cb31d3703ab29c5f4bd4c5f4871ae3e8db6b2ceb42f0725c13bc6b3c384231c451ad710afc06f47cdc11135cdca96068b5ddb3ab3e4135c74a4e62d49d69d24a98d895b3e2d0fcba9ec"}, {0xdd, 0x71, "cc9eeebd207dd156299f19135d62c62f83b432d7865f5823331bc7dbfc5c1c6b61caf585ebe26b5f539bb3cdd948a31a482b6f32cf315beec2d1f47f4b96e3b961bf71a345b7b1a83d1b2ecd92e5bb8f37491665cb98650bdbc1ed890420421e865235e1071c30142a768933bf7a8d0119"}, {0xdd, 0xfb, "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"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x66c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) 4m27.568129219s ago: executing program 2 (id=327): r0 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/\x1a\xa2\x92)?\x12', 0xfffffffffffffffe) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x2, 0x7}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x9, &(0x7f0000000d40)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x84}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r3) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x4080}], 0x5d, 0xfffffffa) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x24}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f00000000c0)) 4m25.833363954s ago: executing program 2 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x80000000000003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1e}}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) write(r5, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000808) r6 = socket(0xa, 0x3, 0x87) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendto(r6, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) 4m24.011928401s ago: executing program 2 (id=331): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x101002, 0x104) write(r0, &(0x7f0000000180)='100', 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x6, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x82) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x5, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x401, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x1c0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x5, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x0, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x3, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) 4m7.664694378s ago: executing program 34 (id=331): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x101002, 0x104) write(r0, &(0x7f0000000180)='100', 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x6, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x82) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x5, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x401, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x1c0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x5, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x0, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x3, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) 3m25.78905974s ago: executing program 5 (id=393): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x2f6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0xd, 0x20, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x31435641}) 3m22.715910432s ago: executing program 5 (id=397): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x8a42) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x4, 0x7583) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}]}]}}}}}}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) syz_io_uring_setup(0x7ac5, &(0x7f00000000c0)={0x0, 0x2929, 0x4, 0x0, 0x25e}, 0x0, &(0x7f00000001c0), &(0x7f0000000440)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 3m20.69268202s ago: executing program 5 (id=399): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000800)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_remount}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x2000) r5 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000002c0)='rxrpc_s\x00', 0x0, 0x0, 0xfffffffffffffffe) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m19.656786038s ago: executing program 5 (id=401): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040014}, 0x8010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = dup2(r2, r2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x200008, &(0x7f00000001c0)=ANY=[@ANYRES16=r8, @ANYRES32, @ANYRESDEC=r8], 0x2, 0x395, &(0x7f0000000340)="$eJzs3c9rm3UYAPCn2fpT2/Qggor4ZTcvoa3/wIpsIBaUusjcQXxn0xmaNSUJlQzRHQSv/gfeh0dvgvgP9KB3b9568bjDWCS/uqTLtmrXvg4/Hyjvk3yfJ/1+E/LyXMJzeP372zvbzdJ21orC5RSFiCjcj1juRX1Tg2uhF8/EqLvxdvH6H29+9MmN99c3Nq5spnR1/do7aymlpbd++fKrHy/92nrp45+Wfp6Ng+VPD/9a+/Pg1YPXDh9e+6LaTNVm2q23UpZu1uut7GatkraqzZ1SSh/WKlmzkqq7zUpjbH27Vt/ba6dsd2txYa9RaTZTtttOO5V2atVTq9FO2a2suptKpVJaXAiepXxvczNb78dzT8m7fF4b4gw0GutZ9zs8+9hK+V4uGwIAcnXa/n/mRP3/jcJI/z8XT+z/p0P//1xMnyxttP//1y/Cf1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcL/TKXY6neLw2hn+SHjwOOftccYe+/yP/eW9P87WyA/35iJq3+2X98v9a399fTuqUYtKrEQxHnRvC0P9+Op7G1dWUs9yLN7+pld/6beI8oXx+tUoxvLk+tV+fTqqj+51OhZG69fis3hlcv3axPqZWPlhpL4Uxfj986hHLbZ6t7dH9V+vpvTuBxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8P5TS0BvRn3u/X46Yj/3B/P7So4Tl8fn4/fqj+forUYwHk+fzr0ycz38xXr+Y79kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKjZvrOT1WqVxnkFw5n/vWdmhsGTq6b66XePLc3HePLss17nlEHhH1XNDw45Yelhp9PpBbe+fe5bnTvfj/I0wXREPCWnM3gDT/+/Xo6I0WcujOfMRsSZnnSpGxTyf8NPHEwNgjzuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCvo+nf3QdTee8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvDTbd3ayWq3SOMMg7zMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8SP4OAAD//+JUCsg=") bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8080, 0x83) ioctl$FITRIM(r9, 0xc0185879, &(0x7f00000005c0)={0x0, 0x1ffffff, 0xa1e}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r10 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r10, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) 3m18.70005174s ago: executing program 5 (id=402): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000001240)='./file0\x00', 0x2, &(0x7f0000000000)=ANY=[], 0x1, 0x120c, &(0x7f0000003680)="$eJzs3M9rHGUYB/DHtDE1NT/UWm1B+qIXBRmaHLwoSJAUpAtK2witIEzNRJeMu8vOElgRoyev/gfexaM3QbzpJRcv/gPecvHYgzjSXftjyx4i6o4Nn89lH973/cIzu8vAu+w7h699+dHuTpXt5IOYe+T1mOtFpFspUszFHZ/FS6/++NNzV6/fuLzRam1eSenSxrW1V1JKyxe+f/eTb57/YXD6nW+Xv1uIg9X3Dn9b//Xg7MG5wz+ufdiuUrtKne4g5elmtzvIb5ZF2m5Xu1lKb5dFXhWp3amK/sT8Ttnt9YYp72wvLfb6RVWlvDNMu8UwDbpp0B+m/IO83UlZlqWlxeCIvvplyuDW17fquo6o6/l4NOq6rh+LxTgdj8dSLMdKrMYT8WQ8FWfi6Tgbz8SzcW60qoH+AQAAAAAAAAAAAAAAAAAA4Bj7R+f/LzTcPAAAAAAAAAAAAAAAAAAAABwTV6/fuLzRam1eSelURPnF3tbe1vh1PL+xE+0oo4iLsRK/x+j0/9i4vvRma/NiGlmNz8v9v/L7e1snJvNro8cJTM2vjfNpMr8Qi/fn12MlzkzPr0/Nn4oXX7gvn8VK/Px+dKOM7bidvZf/dC2lN95qPZA/P1oHAAAAx0GW7pq6f8+yafPzd/N/4/eBB/bXJ+P8yQYvnJFq+PFuXpZFv/HiTkfjkf2ImGkbCxHR/Jsw42L+/9HGv1HcvuGMR05MfJEab+xhLZq7JzE79z70o61/+b9uCAAAAAAAAAAAgCOZxd8Jm75GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8FQAA//92TcwG") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) close(r2) write(0xffffffffffffffff, &(0x7f00000001c0)='4\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r6, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) 3m18.408184286s ago: executing program 5 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x21, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x110, 0x70, 0x0, &(0x7f0000000180)) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) r13 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r13, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_G_AUDIO(r13, 0x80345621, &(0x7f0000000640)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) syz_open_procfs(r0, &(0x7f0000000100)='net/psched\x00') 3m16.011194178s ago: executing program 35 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x21, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x110, 0x70, 0x0, &(0x7f0000000180)) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) r13 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r13, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_G_AUDIO(r13, 0x80345621, &(0x7f0000000640)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) syz_open_procfs(r0, &(0x7f0000000100)='net/psched\x00') 2m16.563714008s ago: executing program 6 (id=466): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x1, 0xfe9e, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x2c3d, 0x8, 0x2, 0x225}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) io_uring_enter(r1, 0x1ae0, 0xfeffffdc, 0x17, 0x0, 0x0) listen(r0, 0xda90) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000240001800b0001007470726f7879000014000280080003400000001408000140000000000900010073797a30"], 0xf8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r6, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/50, 0x32}], 0x1, 0x8000, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r6, &(0x7f00000002c0)='./file0\x00') read$char_usb(r6, &(0x7f0000000580)=""/177, 0xb1) fdatasync(r3) chmod(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x57eeb83c9526c7ac) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0xb3}, &(0x7f0000000400)=0x8) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000008) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listns(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES64=r2, @ANYRES16, @ANYBLOB="0a00060008021100000000000500180110000000080022016d020000050018010e4600000a000600ffffffffffff00000a0006000802110000"], 0x58}, 0x1, 0x0, 0x0, 0x48090}, 0x44880) socket$inet(0x2, 0x3, 0x9) 2m13.863895953s ago: executing program 6 (id=469): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)=0x5) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x1}}, 0x30) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./nfsd\x00', 0x910) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) pipe2$9p(&(0x7f0000000240), 0x84000) r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) mknodat(r5, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r6, &(0x7f0000000380)='-', 0x1) 2m12.460748652s ago: executing program 6 (id=472): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = epoll_create1(0x80000) r3 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) epoll_pwait2(r2, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r4, &(0x7f0000000700)=""/55, 0x37) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r1, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x125182, 0x2, 0x23}, 0x18) r5 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) r7 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) flock(r7, 0x6) socket$nl_route(0x10, 0x3, 0x0) 2m10.204759607s ago: executing program 6 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x42, 0x8814) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008811) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0xfffffffd, 0x9, 0x100a, 0x7, 0x8, 0x2, 0x3}}) shmctl$IPC_RMID(0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f00000001c0)={[{@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@i_version}, {@min_batch_time={'min_batch_time', 0x3d, 0xda}}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x82) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) ioctl$FITRIM(r5, 0xc0185879, 0x0) prlimit64(r0, 0xb, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x2c7, &(0x7f0000002b80)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r6, &(0x7f0000000840)={0x2020}, 0x2020) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x80010, 0xffffffffffffffff, 0x3000) 2m8.720667411s ago: executing program 6 (id=477): socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000011000/0x2000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000016000/0x1000)=nil, &(0x7f0000000100)}, 0x68) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = io_uring_setup(0x5940, &(0x7f0000000440)={0x0, 0x800000, 0x400, 0x2, 0x12a}) syz_open_dev$dri(&(0x7f0000000000), 0x1000000000000000, 0x410000) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x5, 0x7, 0x4, 0x8, 0x16, "ad82f944bd8da7c5"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r1) ioctl$TCFLSH(r5, 0x400455c8, 0x2) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 2m4.074913754s ago: executing program 6 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, &(0x7f00000000c0)={0x1, "810556c721100f00"}}) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) r3 = fsopen(&(0x7f0000000000)='pstore\x00', 0x1) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/16, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r5 = open$dir(&(0x7f0000000140)='./gadget/dummy_udc\x00', 0x54000, 0x148) r6 = openat(r5, &(0x7f0000000600)='./gadget/dummy_udc\x00', 0xc802, 0x104) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003600)={0xffffffffffffffff}) ioctl$sock_ifreq(r7, 0x8971, &(0x7f0000003f40)={'veth1_to_team\x00', @ifru_names='vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1fc) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) sendmmsg(r6, &(0x7f0000002b80)=[{{&(0x7f0000000080)=@caif, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000440)}, {&(0x7f0000000640)}, {&(0x7f0000000740)}, {&(0x7f0000000840)="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", 0x1000}], 0x4}}, {{&(0x7f0000001940)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x80, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB], 0x178}}], 0x2, 0x44000) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) 2m1.933800374s ago: executing program 36 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, &(0x7f00000000c0)={0x1, "810556c721100f00"}}) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) r3 = fsopen(&(0x7f0000000000)='pstore\x00', 0x1) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/16, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r5 = open$dir(&(0x7f0000000140)='./gadget/dummy_udc\x00', 0x54000, 0x148) r6 = openat(r5, &(0x7f0000000600)='./gadget/dummy_udc\x00', 0xc802, 0x104) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003600)={0xffffffffffffffff}) ioctl$sock_ifreq(r7, 0x8971, &(0x7f0000003f40)={'veth1_to_team\x00', @ifru_names='vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1fc) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) sendmmsg(r6, &(0x7f0000002b80)=[{{&(0x7f0000000080)=@caif, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000440)}, {&(0x7f0000000640)}, {&(0x7f0000000740)}, {&(0x7f0000000840)="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", 0x1000}], 0x4}}, {{&(0x7f0000001940)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x80, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB], 0x178}}], 0x2, 0x44000) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) 41.113225923s ago: executing program 7 (id=563): mkdirat(0xffffffffffffff9c, 0x0, 0x4) r0 = syz_open_dev$sg(&(0x7f0000002440), 0x0, 0x141000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62", 0x55, 0xfffffffffffffffe) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000340)=0xc291) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1e5) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 37.391324207s ago: executing program 7 (id=569): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x2f6) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0xd, 0x20, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x31435641}) 35.43978169s ago: executing program 7 (id=572): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000140), &(0x7f0000000180)=0x4) write(r4, &(0x7f0000000400)='p:lygroup/myevent ./dummy:0x2', 0x1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00", @ANYRES16=r2, @ANYBLOB="95e81c56b0c66eed25bebda6bb7d6f0579e9be7fc1d3415e372e90873f8c0ec583088faf27205301bcc953f7877985f275f5696efe769853d32963ab68f463", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000004c0)={0x4, 0xa5, &(0x7f0000000400)="2072871afeed7ef366b116932ec3edd94c2c93389a7c88e3df51d56cb0079f5b969d472c97a4c5e530c2dce0975dae4c751c8a86a2702d505ea96b19cbd08b9fcacbc4740255be90e15b2bbe8da850fbca97ef4d241ec54fb5fb50bb84d8a032c1eb47d8b481928352ad4e7bc74771ad53b76148caaca5dbdc6c9e76f85be9c6ffbcb8de534a0c20658fb9974633321dc2e94cc07391db9d435442c7af91903d64b91294b7"}) landlock_create_ruleset(&(0x7f0000000340)={0x4fd591a0f54e709c, 0x2, 0x3, 0x5, 0x8}, 0x30, 0x3) r6 = getpid() add_key(&(0x7f0000000540)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) 31.848410236s ago: executing program 7 (id=575): socket$inet_icmp(0x2, 0x2, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file1\x00'}) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000e00)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000300)="76a7c6415bec6e0dbcb81df45134bc6449f697abe1e6727d38c13002955a349344eef1f452809b3936526d139c9374935865bcaae8cf0e00d0ee027ab1391e4e9d6a2072d9787cf392503716374c192993a9931bbbbac70a3ff9e961dc0b5a5d5b3497baae3f791cfb85c66bdaec992625b678a22456ec4d81ed16fcc9b54f22fd33cbbcc681c2634e03fae94cd794ebe2299da7b75f15ff336cf7d2591457cfbcaf47806636179ac922bd15cc94946e5ab5a1cdb2df50af2155a8e5719fb5", 0xbf}, {0x0}, {&(0x7f0000000440)="fa47dc2a426565738410210dcd8f0393844d766780e7f4b5948cdd635c430b08da8df85013d4d4a6f3f148b3f7d7fe642b17026ff9cc399d05cc424006b87c0b8f6f42196fed7e25b7f96bc3006692", 0x4f}, {&(0x7f0000000540)="72b38e6e087bfb74a366b4ac40d688eb9400a3d455bdc8b788b73556acac3e5ee0c5d413c93bdf4a93da5b39657b1ea61c707b3ee80bef0e90eccfe680d6a7fb28f4a7083093709f1344d830840e6339d601af9566911d5dae54ba2b13ed6d886bf2d4a3575579cb0a10490808e3079e901ac7682f41e9dac3823e74dc08fc7e1dd46d03c80b52c502a80a2816d5255f2ae39d7d343844e1c17ee4388ef0671ddf60bcbd286b38ee1dd021cd728c4cf51072a1c4f3bae0d2944232ad57817c2326494c4de9a5111440ba220439fdbfd6", 0xd0}, {&(0x7f0000000640)="56d7ae012a2fbf03dedab3f58e7e1d9e02b8282a935d5a5be5766f7a10f59745c1fd556bda3d6d9d50e4074e4a4b0913f668e0fc3a9c0a511391f710c568613ecaf648f4b2580e6f21c7579ce0c50ba86a15b0aa37c5456f534bfee0fac32abb6cbfaa2251c7cb9b8c3cfbd5523a605e6d323a8b8a47c73f3cf91d691c8f815963b219627f9fe333dbab36478188746ccf083f0a995141a5f2424a3a87b2ff9c67be130f41d64a093369e4ef61fcec4e5f23dd8062f6be0805e0b7f596a5428be6a5ed623e1283952025df8a74812716683afaba06440f82df22dbc7fb09c28a5965dfca4eed50", 0xe7}, {&(0x7f0000000740)="a1a4c4cc21e94459f1f86d5e64f0c22316109180feee1b9c8561c4620fcbe9ab9d75a97d8f459e14de24da1e24fdd4a9ff3b586a134a4410d592088eed7c898322eda927c10ead7f4175bb98b69f9fdf4f2a758d6e7869ecf01d47699954a61545872ce948337f8ad5d115b4517b2aa1e49531d9df7d1009a2f2ebbc1c6eb77715e36abcf6f409c5766492ce831797cc6a176ca94ddd92e934f74d472dd1b1e2eddccf1df061dfad8d05e6549073b23322dc822c48c18dd1f793508797529e80", 0xc0}, {&(0x7f0000000840)="888b0bd1772a376a12ec114fc6a589db87b31d8a4c4bbb79168c7583ebb41a2f8819617630bd7dfa5758685afe3b96cd8f6433eedd65e1afdeabd55e365845fca66a31be8b35512b2d33b47babd341f8bea234e5ff84c7fa6d62870ace8b26a00e0ac75946fbc37ee2f5a0a3bf57b3ed3cc7df9c15283cb57dfef2622a5b6008d67932604bebb4c98d52d6b7ed450e201b027573c2db581e7b0131d76a6ed35266ec4590153f20e281b504911992", 0xae}, {&(0x7f0000000900)="3062b2cfdb98a53a9cff4c47a193dd31870a7aaf7ef44a759fb4d22f1f681fe5", 0x20}], 0x8, &(0x7f0000000d00)=[@rights={{0x28, 0x1, 0x1, [r1, r2, r1, r1, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r3}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r1, r4, r2, r2, r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0, r5, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0xe0, 0x20004044}, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r6 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r6, 0x0, 0x0, 0x1000f4) sendfile(r6, r6, 0x0, 0x40000000800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r7, 0x100000000000011, 0x2000, 0x2f93) 29.118628939s ago: executing program 7 (id=578): io_uring_setup(0x3eaa, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x21, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="d826191df96cd0a05681a3bc8e61d697cbabd3f52dbd9284cfb9228ce0d4957539c9f722e5e9d677a4077f3a7a6a9e87c1fc23b3b83827f73bc31c4c5d9a4ae8b31b29b7036268c39ac8f9d9de8724abc80f946cdb187af4a097853ecf97ce0926fe214a227b3bfc820b3ce44bf33c6a1e048b0fe8b4c778ea17860868238f5e5979c69eb7dfc067a67393e8ca70b5ac4e767727686adc63778f3236a6be9959f2f1440f09f16ec7850a682ec9e8799d155fd055a4df92a4872b5577e8fb75c3f501baa9bb283f4eb9be5e0b36e49dbac1c98393d988eecbc57d37b882c211c86610cd898ead3f3e3b135337a27c48614cc0d8827c30bf", 0xf7}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa8300, 0x0) r7 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) socket$phonet_pipe(0x23, 0x5, 0x2) 25.970238585s ago: executing program 7 (id=581): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r4, &(0x7f00000000c0), 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000140)={0x1, 0x7, 0x1, 0x200000000000005, 0x401, 0x0, 0x200000003, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x4}) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000200)={0x2, [[0xfffffffc, 0xfff7ffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdfb, 0xffffffff, 0xffffffff, 0x7, 0xffffffff, 0xffffffff, 0xff]], '\x00', [{0xd, 0xd, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x5, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0xff, 0x400, 0x0, 0x0, 0x1}, {0x0, 0x1002, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0xf, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x4, 0xf4241, 0x0, 0x0, 0x1}]}) 22.923726874s ago: executing program 8 (id=584): socket(0x29, 0xa, 0x1cb) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010040", 0x7) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) close(r3) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, 0x0) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x80302, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000000)={0x55, 0x6, 0x6, 0x873e, 0x200}) write(r5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 22.838605249s ago: executing program 3 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x1000, @local, 0x8}, 0x1c) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x501081) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000600)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xfc, 0x234, &(0x7f0000000640)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x8800000) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, 0x0, 0x0) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r3, 0x9, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x1b, 0x4, "0b4c40e1806d4a9804f7f43a57e295a7f817434e1713669c690c8d6f9f73cd150af25399e9320841d5b30255d22e1d4e3b8b192dd653cc7d5870b55ec39935ed", "77ba366dfa7b510284caf3943b6d1bd09d1eea390df11897e1fe06813d90e20d663e9b14c905510757524fde510afa9b7b8e7ffad592238ef27cff828a15f24d", "85393d3223999534cfa41d9fae8ece955985424ba4588fe28e095a304c03c5a6", [0x4, 0x90]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f00000004c0)}], 0x1) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14001d001000010000000000000000000200000a44000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084140000001100010000000000000000000200000a"], 0x6c}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22012}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @multicast}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x58}}, 0x8000) 18.685829387s ago: executing program 3 (id=590): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x2f6) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0xd, 0x20, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x31435641}) 17.44021898s ago: executing program 1 (id=592): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x80000000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(0x0, 0x280000000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x280000000000, 0x3, 0x0) r2 = shmget(0x0, 0x280000000000, 0x3a0, &(0x7f0000000000/0x1000000)=nil) shmat(r2, 0x0, 0x0) 16.714618779s ago: executing program 8 (id=593): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x17b) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000140), &(0x7f0000000180)=0x4) write(r4, &(0x7f0000000400)='p:lygroup/myevent ./dummy:0x2', 0x1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00", @ANYRES16=r2, @ANYBLOB="95e81c56b0c66eed25bebda6bb7d6f0579e9be7fc1d3415e372e90873f8c0ec583088faf27205301bcc953f7877985f275f5696efe769853d32963ab68f463", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000004c0)={0x4, 0xa5, &(0x7f0000000400)="2072871afeed7ef366b116932ec3edd94c2c93389a7c88e3df51d56cb0079f5b969d472c97a4c5e530c2dce0975dae4c751c8a86a2702d505ea96b19cbd08b9fcacbc4740255be90e15b2bbe8da850fbca97ef4d241ec54fb5fb50bb84d8a032c1eb47d8b481928352ad4e7bc74771ad53b76148caaca5dbdc6c9e76f85be9c6ffbcb8de534a0c20658fb9974633321dc2e94cc07391db9d435442c7af91903d64b91294b7"}) landlock_create_ruleset(&(0x7f0000000340)={0x4fd591a0f54e709c, 0x2, 0x3, 0x5, 0x8}, 0x30, 0x3) r6 = getpid() add_key(&(0x7f0000000540)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) 15.542664882s ago: executing program 8 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", '\x00', "72392a24199b5903"}, 0x28) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000010018120000", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a3200000000140000001100"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 15.540355828s ago: executing program 3 (id=595): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pI4 \x00', 0x2000000}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, 0x0, 0x0, 0xffffffff00000000}, 0x20) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000040)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xc4) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1db) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000680)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0xa, 0x2000, 0x1, 0xfffe, 0x4, 0x2, 0x0, 0xff, 0x0, 0xc, 0x20000000, 0x7882, 0x0, 0x1, 0x1, 0x6, [0x0, 0x80000000]}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) writev(r8, &(0x7f00000005c0)=[{&(0x7f0000000240)="edec4c3ba59c631a246feb084a50ac6e072246d91e4cacb00bcbf40a014ad8d1faea2c5695aabc5130bfd91abd1f078fbf661a8c91b75dde683536e4697fdc", 0x3f}], 0x1) recvfrom(r6, 0x0, 0x0, 0x40000160, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r9, 0xc0046686, &(0x7f00000001c0)={0x1, 0x2e, "1c3acd12dd797c7cd4a853da3e3daf8fb14ceec35321810450f3ad96e3e45f5e53879682df4ab798de77e073d700"}) syz_ublk_setup_queues(r12, r11, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdbf2, 0x4000, 0x2, 0x111}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x235}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r10, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r12, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r14, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0xeeee8000, 0x4a, &(0x7f0000000280)=""/74}]}) syz_ublk_setup_queues(r2, r11, &(0x7f0000000200)={0x0, 0x1462, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x100, 0x3, 0x31c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x3, 0x2000008, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x0, 0x90, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x1000, 0x2, 0x40021a, 0x0, r13}}], 0x4, 0x0, 0x0) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="440100001000010000000000000000000a010100000000000000000000000000ac1e01010000000000000000000000000000008959a438b859004e23000002000000870000003f7606cc55eac44ac352879ccce1cbe9967be9a2749049a6900c03d8af61f7714b8ef2208266eff1bbdecf4269af381d78d3c60a09d6e5e163957b7905a4cb04b853a1c50af0fb3dcacce02cdca4cfcfc139d5e8d9dd08bffcd130fee5d201ed5beca1767b3ed2e40fd9baaf70dfb8be4556628dd2e482902f93f6bb9b5be90d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x10) 13.693198123s ago: executing program 8 (id=597): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e20, @empty}}) setsockopt$sock_int(r4, 0x1, 0x6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) setns(0xc9, 0x0) 11.64548211s ago: executing program 8 (id=598): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x17b) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000140), &(0x7f0000000180)=0x4) write(r4, &(0x7f0000000400)='p:lygroup/myevent ./dummy:0x2', 0x1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00", @ANYRES16=r2, @ANYBLOB="95e81c56b0c66eed25bebda6bb7d6f0579e9be7fc1d3415e372e90873f8c0ec583088faf27205301bcc953f7877985f275f5696efe769853d32963ab68f463", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000004c0)={0x4, 0xa5, &(0x7f0000000400)="2072871afeed7ef366b116932ec3edd94c2c93389a7c88e3df51d56cb0079f5b969d472c97a4c5e530c2dce0975dae4c751c8a86a2702d505ea96b19cbd08b9fcacbc4740255be90e15b2bbe8da850fbca97ef4d241ec54fb5fb50bb84d8a032c1eb47d8b481928352ad4e7bc74771ad53b76148caaca5dbdc6c9e76f85be9c6ffbcb8de534a0c20658fb9974633321dc2e94cc07391db9d435442c7af91903d64b91294b7"}) landlock_create_ruleset(&(0x7f0000000340)={0x4fd591a0f54e709c, 0x2, 0x3, 0x5, 0x8}, 0x30, 0x3) r6 = getpid() add_key(&(0x7f0000000540)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) 11.300293928s ago: executing program 3 (id=599): socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_clone3(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x1d, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000280), 0x4, 0x40) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000600)=0x1) 10.49394036s ago: executing program 9 (id=600): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000001700000018010000202064250000000000202020edf39cc00d78a18bba21997939c21af8ff00000000bfa100000000000007010000f8ffffb70300000200000085000000170000009500"/109], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x14, 0x0, &(0x7f00000005c0)="f6f4e9a1d78a0500fc0400"/20, 0x0, 0xa1b, 0x0, 0x31, 0x0, &(0x7f0000000500)="d1d8781b964c16a1e6ac685d2e9902f71280d318c2d67ac216a67d8f8a01c27383434a6590fa00e3efb905b71d4b943c76", 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000001c0), 0x4) r5 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e1406", 0x1b}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000406010100000000000000000200000805000100f3ff0000"], 0x1c}}, 0x20004000) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0xfffbfffe, 0x3, 0x3}, 0x10) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000020000000000300012800b00010065727370616e000020000280040012000600180009002000050016000200000005", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0xe90}, 0x20044841) sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r5, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x148a}, 0x20048800) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) 10.038487138s ago: executing program 37 (id=581): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r4, &(0x7f00000000c0), 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000140)={0x1, 0x7, 0x1, 0x200000000000005, 0x401, 0x0, 0x200000003, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x4}) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000200)={0x2, [[0xfffffffc, 0xfff7ffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdfb, 0xffffffff, 0xffffffff, 0x7, 0xffffffff, 0xffffffff, 0xff]], '\x00', [{0xd, 0xd, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x5, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0xff, 0x400, 0x0, 0x0, 0x1}, {0x0, 0x1002, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0xf, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x4, 0xf4241, 0x0, 0x0, 0x1}]}) 9.717942381s ago: executing program 3 (id=602): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) pause() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc010) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$KVM_VCPU(&(0x7f0000122000/0x4000)=nil, 0x0, 0x3000002, 0x4010, r6, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000600)={0x8, 0x41}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x840000000002, 0x3, 0xff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 9.575154104s ago: executing program 1 (id=603): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x2f6) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0xd, 0x20, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x31435641}) 7.962356781s ago: executing program 3 (id=605): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setrlimit(0xe, &(0x7f0000000340)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x9, 0x0, @loopback, 0x20}, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0xffffffffffffffff, 0x99d}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000600)={0x10, 0x30, 0xfa00, {&(0x7f0000000680), 0x0, {0xa, 0x4e23, 0x228, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x3}}}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) r6 = fcntl$getown(r4, 0x9) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000040)={r6, 0x0, 0x6}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x80}, &(0x7f0000000280)=0x8) syz_open_dev$vivid(&(0x7f0000000480), 0x0, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5, 0x2, 0xa, 0x4, 0xe}, &(0x7f0000000500)=0x98) 6.906009226s ago: executing program 1 (id=606): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x82b, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bind(0xffffffffffffffff, &(0x7f0000000140)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x44) read(0xffffffffffffffff, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r1, 0x0, 0x1060) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280)=0x6534, 0x4) sendmmsg(r5, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/129, 0x81}], 0x2}, 0x84}], 0x1, 0x2000, 0x0) ioctl$FITHAW(r5, 0xc0045878) dup(r4) sched_setaffinity(0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000001c40)=0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r6, 0x40047451, 0x0) 6.903997662s ago: executing program 9 (id=607): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x1c, 0x66, 0x0, 0xf, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x4003, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x101000}) 6.456578412s ago: executing program 9 (id=608): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x17b) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000140), &(0x7f0000000180)=0x4) write(r4, &(0x7f0000000400)='p:lygroup/myevent ./dummy:0x2', 0x1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00", @ANYRES16=r2, @ANYBLOB="95e81c56b0c66eed25bebda6bb7d6f0579e9be7fc1d3415e372e90873f8c0ec583088faf27205301bcc953f7877985f275f5696efe769853d32963ab68f463", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000004c0)={0x4, 0xa5, &(0x7f0000000400)="2072871afeed7ef366b116932ec3edd94c2c93389a7c88e3df51d56cb0079f5b969d472c97a4c5e530c2dce0975dae4c751c8a86a2702d505ea96b19cbd08b9fcacbc4740255be90e15b2bbe8da850fbca97ef4d241ec54fb5fb50bb84d8a032c1eb47d8b481928352ad4e7bc74771ad53b76148caaca5dbdc6c9e76f85be9c6ffbcb8de534a0c20658fb9974633321dc2e94cc07391db9d435442c7af91903d64b91294b7"}) landlock_create_ruleset(&(0x7f0000000340)={0x4fd591a0f54e709c, 0x2, 0x3, 0x5, 0x8}, 0x30, 0x3) r6 = getpid() add_key(&(0x7f0000000540)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) 4.092162999s ago: executing program 9 (id=609): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') mount$bind(0x0, 0x0, 0x0, 0x2001091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) preadv(r2, &(0x7f00000001c0), 0x0, 0x33, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) symlinkat(&(0x7f0000000080)='./file0\x00', r6, &(0x7f0000000100)='./file0\x00') ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3e, 0x2006, 0x8, 0x0, 0x5}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) recvmsg$inet_nvme(r6, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)}, 0x141) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000055f000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000240)="64f30fc733640f01c966b9c202000066b80070000066ba000000000f300f3066b8090000000f23d00f21f86635000000060f23f866b8000000000f23c00f21f8663500000a000f23f8b810000f00d81d39020f28240f01ca", 0x58}], 0x1, 0x0, &(0x7f0000000300)=[@cr0={0x0, 0x18}], 0x1) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 4.008370964s ago: executing program 1 (id=610): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x2f6) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0xd, 0x20, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x31435641}) 3.093230483s ago: executing program 1 (id=611): socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_clone3(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x1d, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xffffffff, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000600)=0x1) 2.711843447s ago: executing program 9 (id=612): socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_clone3(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x1d, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xffffffff, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000600)=0x1) 2.05599179s ago: executing program 8 (id=613): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x10800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getitimer(0x1, &(0x7f0000000040)) r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@userptr={0x10, 0x6, 0x4, 0x0, 0x0, {}, {0x1}, 0x1, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0xc, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x3, 0x89d2, 0xc, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x7fffffff, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0x2, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0xb, 0x47, 0x60f6, 0xffffffff, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3, 0x1], [0x7, 0x407, 0x8004, 0x6, 0xffffffff, 0x100, 0x80000001, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x9, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x5, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x1000, 0x7ff, 0x125, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x7, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0x0, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x1000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x49, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x7, 0x1, 0x4, 0x4, 0x5, {0x77359400}, {0x1, 0x8, 0x65, 0xcf, 0x13, 0xff, "d4024221"}, 0x5, 0x4, {0x0}, 0x80000001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 438.707901ms ago: executing program 9 (id=614): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setrlimit(0xe, &(0x7f0000000340)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000580)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x9, 0x0, @loopback, 0x20}, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r4, 0x99d}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000600)={0x10, 0x30, 0xfa00, {&(0x7f0000000680), 0x0, {0xa, 0x4e23, 0x228, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x3}, r4}}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) r7 = fcntl$getown(r5, 0x9) ioctl$BINDER_FREEZE(r6, 0x400c620e, &(0x7f0000000040)={r7, 0x0, 0x6}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x80}, &(0x7f0000000280)=0x8) syz_open_dev$vivid(&(0x7f0000000480), 0x0, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r8, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5, 0x2, 0xa, 0x4, 0xe}, &(0x7f0000000500)=0x98) 0s ago: executing program 1 (id=615): socket$kcm(0x11, 0x200000000000003, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) kernel console output (not intermixed with test programs): 112145][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.112206][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.142382][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.142451][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.335732][ T7210] loop3: detected capacity change from 0 to 1024 [ 277.730222][ T7216] netlink: 168 bytes leftover after parsing attributes in process `syz.3.213'. [ 277.754214][ T7216] hfsplus: bad catalog file entry [ 279.947046][ T1218] hfsplus: bad catalog file entry [ 280.670240][ T7228] input: syz1 as /devices/virtual/input/input8 [ 282.772225][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.775531][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.776912][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.799453][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.807021][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.177640][ T7259] Cannot find add_set index 0 as target [ 284.892412][ T5623] Bluetooth: hci1: command tx timeout [ 286.292389][ T7277] loop1: detected capacity change from 0 to 512 [ 286.385759][ T33] audit: type=1326 audit(1791396880.083:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fbb9e199 code=0x7ffc0000 [ 286.386433][ T33] audit: type=1326 audit(1791396880.083:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fbb9e199 code=0x7ffc0000 [ 286.409696][ T7277] EXT4-fs: Mount option(s) incompatible with ext2 [ 286.443770][ T33] audit: type=1326 audit(1791396880.123:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f15fbb9e199 code=0x7ffc0000 [ 286.443835][ T33] audit: type=1326 audit(1791396880.123:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fbb9e199 code=0x7ffc0000 [ 286.443899][ T33] audit: type=1326 audit(1791396880.123:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fbb9e199 code=0x7ffc0000 [ 286.443936][ T33] audit: type=1326 audit(1791396880.143:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f15fbb9e199 code=0x7ffc0000 [ 286.507673][ T33] audit: type=1326 audit(1791396880.203:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fbb9e199 code=0x7ffc0000 [ 286.507718][ T33] audit: type=1326 audit(1791396880.203:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fbb9e199 code=0x7ffc0000 [ 286.617634][ T7277] loop1: detected capacity change from 0 to 256 [ 286.725237][ T7280] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 286.725332][ T7280] FAT-fs (loop1): Filesystem has been set read-only [ 286.728493][ T7280] UBIFS error (pid: 7280): cannot open "ubi0", error -19 [ 286.987252][ T5798] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 287.007975][ T5623] Bluetooth: hci1: command tx timeout [ 287.143581][ T5798] usb 4-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 287.150802][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.150825][ T5798] usb 4-1: Product: syz [ 287.150838][ T5798] usb 4-1: Manufacturer: syz [ 287.150850][ T5798] usb 4-1: SerialNumber: syz [ 287.171984][ T5798] usb 4-1: USB2VGA dongle found at address 3 [ 287.208166][ T5798] usb 4-1: Allocated 8 output buffers [ 287.818408][ T33] audit: type=1326 audit(1791396881.513:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15fbb9e199 code=0x7ffc0000 [ 287.820965][ T33] audit: type=1326 audit(1791396881.523:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fbb9e199 code=0x7ffc0000 [ 289.926680][ T5623] Bluetooth: hci1: command tx timeout [ 290.373076][ T6971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 290.454024][ T5798] usb 4-1: Failed to early initialize device [ 290.594354][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.225'. [ 290.860050][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.924409][ T5798] usb 4-1: USB disconnect, device number 3 [ 291.937431][ T5623] Bluetooth: hci1: command tx timeout [ 292.124113][ T6971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.165465][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.223952][ T6971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.248924][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.252022][ T6971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.294587][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.390741][ T7189] udevd[7189]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 292.527535][ T7327] loop3: detected capacity change from 0 to 32768 [ 292.701632][ T7327] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 292.739903][ T7327] XFS (loop3): Ending clean mount [ 292.763938][ T7327] XFS (loop3): Quotacheck needed: Please wait. [ 293.480259][ T7327] XFS (loop3): Quotacheck: Done. [ 293.897236][ T7353] netlink: 112 bytes leftover after parsing attributes in process `syz.3.228'. [ 293.917958][ T7353] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 293.949732][ T33] kauditd_printk_skb: 11 callbacks suppressed [ 293.949774][ T33] audit: type=1800 audit(1791396887.553:57): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.228" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=-22 [ 295.590855][ T5615] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.448071][ T6971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.530474][ T6971] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.559842][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.559950][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.586945][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.587053][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.654129][ T7374] loop1: detected capacity change from 0 to 32768 [ 297.710891][ T7374] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 298.628436][ T7388] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.847973][ T5923] bridge_slave_1: left allmulticast mode [ 298.848002][ T5923] bridge_slave_1: left promiscuous mode [ 298.848218][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.882917][ T5923] bridge_slave_0: left allmulticast mode [ 298.882945][ T5923] bridge_slave_0: left promiscuous mode [ 298.886090][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.536943][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.558871][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.570167][ T5923] bond0 (unregistering): Released all slaves [ 299.878261][ T5612] ocfs2: Unmounting device (7,1) on (node local) [ 300.045265][ T5923] hsr_slave_0: left promiscuous mode [ 300.048678][ T5923] hsr_slave_1: left promiscuous mode [ 300.065737][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.078826][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.674922][ T5623] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 300.676896][ T7409] overlayfs: failed to resolve './bus': -2 [ 300.778391][ T7406] ceph: No mds server is up or the cluster is laggy [ 300.814735][ T5614] libceph: connect (1)[c::]:6789 error -101 [ 300.860746][ T5614] libceph: mon0 (1)[c::]:6789 connect error [ 301.116315][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.145208][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.159262][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.179524][ T5614] libceph: connect (1)[c::]:6789 error -101 [ 301.181008][ T5614] libceph: mon0 (1)[c::]:6789 connect error [ 301.191709][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.204252][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.333092][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 302.394794][ T5623] Bluetooth: hci4: unexpected event for opcode 0x200a [ 302.398074][ T7422] TCP: TCP_TX_DELAY enabled [ 302.456670][ T5923] team0 (unregistering): Port device team_slave_1 removed [ 302.562648][ T5923] team0 (unregistering): Port device team_slave_0 removed [ 303.612440][ T5623] Bluetooth: hci5: command tx timeout [ 304.633769][ T7423] bridge_slave_1: left allmulticast mode [ 304.633793][ T7423] bridge_slave_1: left promiscuous mode [ 304.637088][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.687093][ T7423] bridge_slave_0: left allmulticast mode [ 304.687121][ T7423] bridge_slave_0: left promiscuous mode [ 304.687423][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.028287][ T7435] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5610] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[7435] [ 305.064315][ T7435] loop2: detected capacity change from 0 to 164 [ 305.572110][ T7435] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 305.687639][ T5623] Bluetooth: hci5: command tx timeout [ 306.132275][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.132439][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.132597][ T7248] bridge_slave_0: entered allmulticast mode [ 306.134604][ T7248] bridge_slave_0: entered promiscuous mode [ 306.165347][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.165441][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.165622][ T7248] bridge_slave_1: entered allmulticast mode [ 306.168169][ T7248] bridge_slave_1: entered promiscuous mode [ 306.434861][ T7248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.553753][ T7248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.767441][ T5623] Bluetooth: hci5: command tx timeout [ 308.153557][ T7248] team0: Port device team_slave_0 added [ 308.477485][ T7248] team0: Port device team_slave_1 added [ 308.902600][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.902843][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.902883][ T7248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.244358][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.244429][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.244833][ T7248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.736026][ T7458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.736166][ T7458] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 309.857701][ T5625] Bluetooth: hci5: command tx timeout [ 310.737676][ T7458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 310.737960][ T7458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 310.738090][ T7458] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 310.742397][ T7458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 310.742532][ T7458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 310.754904][ T7458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 310.764683][ T7458] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 310.764829][ T7458] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 310.775575][ T7458] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 310.799256][ T5625] Bluetooth: hci0: sending frame failed (-49) [ 310.803363][ T5623] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 310.974091][ T7473] loop2: detected capacity change from 0 to 256 [ 310.986878][ T7473] exfat: Deprecated parameter 'namecase' [ 310.986911][ T7473] exfat: Deprecated parameter 'utf8' [ 310.986977][ T7473] exfat: Deprecated parameter 'namecase' [ 310.991671][ T7473] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 310.999606][ T7473] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 311.172726][ T7248] hsr_slave_0: entered promiscuous mode [ 311.173851][ T7248] hsr_slave_1: entered promiscuous mode [ 311.174539][ T7248] debugfs: 'hsr0' already exists in 'hsr' [ 311.174556][ T7248] Cannot create hsr debugfs directory [ 311.542014][ T7482] loop1: detected capacity change from 0 to 2048 [ 311.582665][ T7482] NILFS (loop1): invalid segment: Magic number mismatch [ 311.582692][ T7482] NILFS (loop1): trying rollback from an earlier position [ 311.664010][ T7482] NILFS (loop1): recovery complete [ 311.701333][ T7485] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.264970][ T7486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.395700][ T7489] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 312.807552][ T5623] Bluetooth: hci5: command 0x0c1a tx timeout [ 312.807606][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.807677][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 312.807707][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 312.807731][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 314.299207][ T7504] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[7505] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[7504] [ 315.337664][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 315.337705][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 315.337753][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 315.337774][ T5623] Bluetooth: hci5: command 0x0c1a tx timeout [ 316.942613][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 316.995776][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 317.569664][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 317.569900][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.608383][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.610385][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.017912][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 322.176330][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.176431][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.176594][ T7411] bridge_slave_0: entered allmulticast mode [ 322.310648][ T7411] bridge_slave_0: entered promiscuous mode [ 322.347694][ T33] audit: type=1326 audit(1791396916.003:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7557 comm="syz.2.264" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb33d19e199 code=0x0 [ 322.642785][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.651696][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.661139][ T7411] bridge_slave_1: entered allmulticast mode [ 322.737806][ T7411] bridge_slave_1: entered promiscuous mode [ 323.130185][ T7411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.144607][ T7411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.383874][ T7567] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 323.783985][ T7411] team0: Port device team_slave_0 added [ 323.802954][ T7411] team0: Port device team_slave_1 added [ 325.282551][ T5923] bridge_slave_1: left allmulticast mode [ 325.282577][ T5923] bridge_slave_1: left promiscuous mode [ 325.282820][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.312333][ T5923] bridge_slave_0: left allmulticast mode [ 325.312361][ T5923] bridge_slave_0: left promiscuous mode [ 325.313543][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.644229][ T7575] loop1: detected capacity change from 0 to 128 [ 326.442627][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.446269][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.475609][ T5923] bond0 (unregistering): Released all slaves [ 326.517706][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.517723][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.517742][ T7411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.592565][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.592582][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.592606][ T7411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.784598][ T7411] hsr_slave_0: entered promiscuous mode [ 326.785655][ T7411] hsr_slave_1: entered promiscuous mode [ 326.803945][ T7411] debugfs: 'hsr0' already exists in 'hsr' [ 326.803969][ T7411] Cannot create hsr debugfs directory [ 326.837857][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 326.884856][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 326.891848][ T5923] hsr_slave_0: left promiscuous mode [ 326.898881][ T5923] hsr_slave_1: left promiscuous mode [ 326.899993][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.907839][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.322940][ T5923] team0 (unregistering): Port device team_slave_1 removed [ 330.347126][ T5923] team0 (unregistering): Port device team_slave_0 removed [ 330.372456][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 333.500685][ T7616] loop2: detected capacity change from 0 to 1764 [ 335.460359][ T7248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 335.610884][ T7248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.615264][ T7248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 335.716381][ T7625] loop1: detected capacity change from 0 to 512 [ 335.724376][ T7625] ext4: Bad value for 'journal' [ 336.144210][ T7248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.345099][ T7248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.387893][ T7248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.444942][ T7248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.458970][ T7248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.604500][ T7248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.729941][ T7248] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.824303][ T7654] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 338.824303][ T7654] [ 338.824338][ T7654] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 338.824732][ T7654] CIFS mount error: No usable UNC path provided in device string! [ 338.824732][ T7654] [ 338.825075][ T7654] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 340.568124][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.568228][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.743830][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.743948][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.215915][ T7411] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 341.233696][ T7411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.236154][ T7411] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 341.265868][ T7411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.266917][ T7411] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 341.305920][ T7411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.325927][ T7411] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 341.364659][ T7411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 341.763585][ T7411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.799368][ T7411] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.818581][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.818682][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.865886][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.865991][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.233350][ T7710] loop2: detected capacity change from 0 to 128 [ 343.251386][ T7710] EXT4-fs (loop2): Test dummy encryption mode enabled [ 343.270878][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.279429][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.290766][ T5798] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 343.308582][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.329151][ T7710] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.330163][ T7710] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 343.332934][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.333670][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.587448][ T5798] usb 2-1: Using ep0 maxpacket: 16 [ 343.588164][ T5798] usb 2-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 343.595226][ T5798] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 343.595251][ T5798] usb 2-1: config 4 has no interface number 0 [ 343.595290][ T5798] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 343.595312][ T5798] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 343.595333][ T5798] usb 2-1: config 4 interface 9 has no altsetting 0 [ 343.659552][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.659577][ T5798] usb 2-1: Product: syz [ 343.659590][ T5798] usb 2-1: Manufacturer: syz [ 343.659602][ T5798] usb 2-1: SerialNumber: syz [ 344.301980][ T7706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.302120][ T7706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.417167][ T5798] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 344.772409][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.378485][ T54] Bluetooth: hci0: command tx timeout [ 346.462842][ T45] usb 2-1: Failed to submit usb control message: -110 [ 346.462879][ T45] usb 2-1: unable to send the bmi data to the device: -110 [ 346.462921][ T45] usb 2-1: unable to get target info from device [ 346.462953][ T45] usb 2-1: could not get target info (-110) [ 346.463277][ T45] usb 2-1: could not probe fw (-110) [ 346.494703][ T5732] usb 2-1: USB disconnect, device number 2 [ 346.817886][ T7749] loop1: detected capacity change from 0 to 512 [ 348.418793][ T7753] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 348.418824][ T7753] FAT-fs (loop1): Filesystem has been set read-only [ 348.419294][ T7753] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 348.507558][ T54] Bluetooth: hci0: command tx timeout [ 350.326909][ T7411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.567505][ T54] Bluetooth: hci0: command tx timeout [ 352.669871][ T54] Bluetooth: hci0: command tx timeout [ 353.146174][ T7804] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 354.714261][ T63] bridge_slave_1: left allmulticast mode [ 354.716438][ T63] bridge_slave_1: left promiscuous mode [ 354.758645][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.802192][ T63] bridge_slave_0: left allmulticast mode [ 354.802218][ T63] bridge_slave_0: left promiscuous mode [ 354.802446][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.199358][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 356.567095][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.601560][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.609939][ T63] bond0 (unregistering): Released all slaves [ 357.055369][ T54] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 359.616565][ T63] hsr_slave_0: left promiscuous mode [ 359.633154][ T63] hsr_slave_1: left promiscuous mode [ 359.634730][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.650683][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.934317][ T7872] loop2: detected capacity change from 0 to 128 [ 359.935232][ T7872] EXT4-fs: Ignoring removed mblk_io_submit option [ 359.956295][ T7872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 359.956444][ T7872] System zones: 1-3, 19-19, 35-36 [ 359.980846][ T7872] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 359.981381][ T7872] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 360.024539][ T7872] syz.2.304 (pid 7872) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 360.914951][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.171030][ T63] team0 (unregistering): Port device team_slave_1 removed [ 361.192230][ T63] team0 (unregistering): Port device team_slave_0 removed [ 361.592836][ T7894] overlayfs: missing 'lowerdir' [ 362.175796][ T5798] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 362.265056][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.279205][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.318202][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.318330][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.318509][ T7714] bridge_slave_0: entered allmulticast mode [ 362.323204][ T7714] bridge_slave_0: entered promiscuous mode [ 362.332088][ T7714] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.333926][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.334103][ T7714] bridge_slave_1: entered allmulticast mode [ 362.337853][ T7714] bridge_slave_1: entered promiscuous mode [ 362.409244][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.422878][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.437207][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.438216][ T5798] usb 3-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 362.442756][ T5798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.442852][ T5798] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 362.442930][ T5798] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.442954][ T5798] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.443015][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.562044][ T5798] usb 3-1: config 0 descriptor?? [ 362.607172][ T7714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.640493][ T7714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.700133][ T7714] team0: Port device team_slave_0 added [ 362.703405][ T7714] team0: Port device team_slave_1 added [ 362.748080][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.748124][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.748146][ T7714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.750447][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.750460][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.750481][ T7714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.782156][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 363.338650][ T7714] hsr_slave_0: entered promiscuous mode [ 363.344266][ T7714] hsr_slave_1: entered promiscuous mode [ 363.348298][ T7714] debugfs: 'hsr0' already exists in 'hsr' [ 363.348342][ T7714] Cannot create hsr debugfs directory [ 363.583320][ T5798] usbhid 3-1:0.0: can't add hid device: -71 [ 363.583429][ T5798] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 363.606686][ T5798] usb 3-1: USB disconnect, device number 4 [ 364.571272][ T54] Bluetooth: hci1: command tx timeout [ 364.607170][ T7936] loop3: detected capacity change from 0 to 128 [ 364.813504][ T7937] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 364.813504][ T7937] [ 364.813652][ T7937] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 364.815009][ T7937] CIFS: Attempting to mount //172.20.20.170/share [ 364.866349][ T7936] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.923153][ T7936] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.400964][ T7937] CIFS: VFS: Error connecting to socket. Aborting operation. [ 365.401144][ T7937] CIFS: VFS: cifs_mount failed w/return code = -4 [ 365.961931][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 366.721517][ T54] Bluetooth: hci1: command tx timeout [ 367.138045][ T7958] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 368.727606][ T54] Bluetooth: hci1: command tx timeout [ 368.900833][ T5615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.092047][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 370.098812][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 370.100290][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 371.044306][ T54] Bluetooth: hci1: command tx timeout [ 372.124796][ T7995] CacheFiles: Failed to register: -95 [ 375.407942][ T8007] loop2: detected capacity change from 0 to 1024 [ 375.459050][ T8007] kAFS: No cell specified [ 375.491488][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 375.527235][ T63] bridge_slave_1: left allmulticast mode [ 375.527712][ T63] bridge_slave_1: left promiscuous mode [ 375.527937][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.542577][ T63] bridge_slave_0: left allmulticast mode [ 375.542601][ T63] bridge_slave_0: left promiscuous mode [ 375.546448][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.652379][ T8007] loop2: detected capacity change from 0 to 1024 [ 376.039212][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.043031][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.061833][ T63] bond0 (unregistering): Released all slaves [ 376.180535][ T8016] loop3: detected capacity change from 0 to 512 [ 376.181609][ T8016] ext4: Unknown parameter 'smackfsroot' [ 376.407540][ T8016] loop3: detected capacity change from 0 to 32768 [ 376.412071][ T8016] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.321 (8016) [ 376.437374][ T8016] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 376.437559][ T8016] BTRFS info (device loop3): using sha256 checksum algorithm [ 376.480945][ T63] hsr_slave_0: left promiscuous mode [ 376.485688][ T63] hsr_slave_1: left promiscuous mode [ 376.486574][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.511014][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.634191][ T8016] BTRFS info (device loop3): enabling ssd optimizations [ 376.634220][ T8016] BTRFS info (device loop3): disabling tree log [ 376.634306][ T8016] BTRFS info (device loop3): turning on async discard [ 376.634323][ T8016] BTRFS info (device loop3): enabling free space tree [ 376.961487][ T8034] BTRFS info (device loop3): balance: start -d -m [ 376.975219][ T8034] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 377.033878][ T8034] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 377.144612][ T8034] BTRFS info (device loop3): balance: canceled [ 377.236159][ T63] team0 (unregistering): Port device team_slave_1 removed [ 377.263394][ T63] team0 (unregistering): Port device team_slave_0 removed [ 377.538300][ T5615] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 377.817561][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.819246][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.819446][ T7899] bridge_slave_0: entered allmulticast mode [ 377.824729][ T7899] bridge_slave_0: entered promiscuous mode [ 377.829831][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.831314][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.831460][ T7899] bridge_slave_1: entered allmulticast mode [ 377.833594][ T7899] bridge_slave_1: entered promiscuous mode [ 377.959579][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.972006][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.150168][ T7899] team0: Port device team_slave_0 added [ 378.178878][ T7899] team0: Port device team_slave_1 added [ 378.269660][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.269678][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.269715][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.271867][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.271889][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.271911][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.342058][ T7899] hsr_slave_0: entered promiscuous mode [ 378.343058][ T7899] hsr_slave_1: entered promiscuous mode [ 378.343770][ T7899] debugfs: 'hsr0' already exists in 'hsr' [ 378.343789][ T7899] Cannot create hsr debugfs directory [ 378.444168][ T7714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.449358][ T7714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.457260][ T7714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.464705][ T7714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.465587][ T7714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.473118][ T7714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.481457][ T7714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 378.486064][ T7714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.652018][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.652097][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.796104][ T7714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.827036][ T7714] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.839860][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.839950][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.856064][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.856182][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.925123][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 379.578746][ T7899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 379.584874][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.586037][ T7899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 379.612207][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.613459][ T7899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 379.636147][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.637222][ T7899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 379.656899][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.800803][ T7899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.840513][ T7899] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.873004][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.873106][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.901213][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.901304][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.986324][ T7714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.526199][ T7714] veth0_vlan: entered promiscuous mode [ 380.549393][ T7714] veth1_vlan: entered promiscuous mode [ 380.621387][ T7714] veth0_macvtap: entered promiscuous mode [ 380.633692][ T7714] veth1_macvtap: entered promiscuous mode [ 380.685915][ T7714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.702688][ T7714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.818476][ T163] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.819313][ T1218] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.901458][ T5922] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.901702][ T5922] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.989642][ T7899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.994726][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.994746][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.068275][ T5922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.068295][ T5922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.453216][ T7899] veth0_vlan: entered promiscuous mode [ 384.509007][ T7899] veth1_vlan: entered promiscuous mode [ 384.683950][ T33] audit: type=1800 audit(1791396978.373:59): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.328" name=08 dev="sda1" ino=2058 res=0 errno=-22 [ 385.444934][ T7899] veth0_macvtap: entered promiscuous mode [ 385.515889][ T7899] veth1_macvtap: entered promiscuous mode [ 385.619830][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.674080][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.877004][ T54] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 387.307486][ T8178] ceph: No mds server is up or the cluster is laggy [ 387.337029][ T8182] overlayfs: failed to resolve './bus': -2 [ 387.478422][ T1218] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.478602][ T1218] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.478689][ T1218] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.478852][ T1218] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.641998][ T5614] libceph: connect (1)[c::]:6789 error -101 [ 387.669887][ T5614] libceph: mon0 (1)[c::]:6789 connect error [ 388.435263][ T8176] loop3: detected capacity change from 0 to 8192 [ 388.557893][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.557914][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.628361][ T8188] loop6: detected capacity change from 0 to 128 [ 388.767894][ T8188] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 388.767976][ T8188] hpfs: filesystem error: improperly stopped [ 388.767991][ T8188] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 388.768005][ T8188] hpfs: You really don't want any checks? You are crazy... [ 388.768018][ T8188] hpfs: Code page index out of array [ 388.768025][ T8188] hpfs: code page support is disabled [ 388.775725][ T8188] hpfs: hpfs_map_4sectors(): unaligned read [ 388.776112][ T8188] hpfs: hpfs_map_4sectors(): unaligned read [ 388.776154][ T8188] hpfs: filesystem error: unable to find root dir [ 389.809780][ T8197] hpfs: hpfs_map_4sectors(): unaligned read [ 389.931729][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 389.931816][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 389.933981][ T54] Bluetooth: hci3: hardware error 0x00 [ 390.956224][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.956278][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.391650][ T8197] hpfs: hpfs_map_sector(): read error [ 391.414054][ T8188] hpfs: hpfs_map_4sectors(): unaligned read [ 392.344938][ T8212] loop6: detected capacity change from 0 to 16 [ 392.960069][ T33] audit: type=1804 audit(1791396986.663:60): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.330" name="/newroot/96/file0/file0" dev="loop3" ino=119 res=1 errno=0 [ 393.157991][ T8212] erofs (device loop6): mounted with root inode @ nid 36. [ 393.209135][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 393.456845][ T8216] erofs (device loop6): invalid h_shared_count 83 @ nid 46 [ 393.456930][ T8216] erofs (device loop6): invalid h_shared_count 83 @ nid 46 [ 393.457196][ T8216] overlayfs: failed to get redirect (-117) [ 394.791141][ T8221] loop1: detected capacity change from 0 to 128 [ 394.803931][ T8221] EXT4-fs (loop1): Test dummy encryption mode enabled [ 394.832304][ T8221] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 394.853326][ T8221] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 397.960019][ T8222] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 400.199711][ T5612] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 400.530819][ T33] audit: type=1326 audit(1791396994.233:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.343" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5d19e199 code=0x7ffc0000 [ 400.560655][ T33] audit: type=1326 audit(1791396994.233:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.343" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5d19e199 code=0x7ffc0000 [ 400.602207][ T33] audit: type=1326 audit(1791396994.303:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.343" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6b5d19e199 code=0x7ffc0000 [ 400.607487][ T33] audit: type=1326 audit(1791396994.303:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.343" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5d19e199 code=0x7ffc0000 [ 400.628855][ T8244] overlayfs: failed to resolve './file2': -2 [ 400.635190][ T33] audit: type=1326 audit(1791396994.313:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.343" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5d19e199 code=0x7ffc0000 [ 400.662961][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 401.269067][ T8254] Failed to get privilege flags for destination (handle=0x2:0x0) [ 404.072109][ T8262] kAFS: unable to lookup cell 'ÿ' [ 404.733653][ T8279] loop3: detected capacity change from 0 to 32768 [ 404.785805][ T8279] (syz.3.349,8279,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 404.786453][ T8279] (syz.3.349,8279,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 405.489053][ T8282] infiniband syz0: set down [ 405.489680][ T8282] infiniband syz0: added veth1_to_bridge [ 405.561460][ T8287] netlink: 336 bytes leftover after parsing attributes in process `syz.5.348'. [ 405.667546][ T8282] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 405.667609][ T8282] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 405.667677][ T8282] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 405.778204][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.799500][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.800659][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.849783][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.850529][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.875144][ T8282] RDS/IB: syz0: added [ 405.875740][ T8282] smc: adding ib device syz0 with port count 1 [ 405.876030][ T8282] smc: ib device syz0 port 1 has no pnetid [ 406.594144][ T8279] (syz.3.349,8279,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 406.614477][ T8279] JBD2: Ignoring recovery information on journal [ 406.695249][ T8279] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 406.883274][ T8300] JFS: discard option not supported on device [ 406.887728][ T8300] Mount JFS Failure: -5 [ 406.887812][ T8300] jfs_mount failed w/return code = -5 [ 407.623977][ T8279] ocfs2: Unmounting device (7,3) on (node local) [ 407.737942][ T8306] loop5: detected capacity change from 0 to 256 [ 408.940128][ T8312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.352'. [ 408.944564][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 409.846977][ T5625] Bluetooth: hci5: command tx timeout [ 410.351557][ T8251] tipc: Resetting bearer [ 410.901236][ T8251] tipc: Disabling bearer [ 411.639138][ T8325] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 411.847689][ T5625] Bluetooth: hci5: command tx timeout [ 413.711163][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.357'. [ 413.927430][ T5625] Bluetooth: hci5: command tx timeout [ 414.414278][ T8344] befs: (nbd6): unable to read superblock [ 416.008391][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.362'. [ 416.021791][ T5625] Bluetooth: hci5: command tx timeout [ 419.551088][ T8367] netlink: 55 bytes leftover after parsing attributes in process `syz.5.364'. [ 419.757723][ T8368] loop5: detected capacity change from 0 to 1024 [ 421.226843][ T8376] 9p: Bad value for 'rfdno' [ 425.521328][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.521555][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.521712][ T8280] bridge_slave_0: entered allmulticast mode [ 425.524293][ T8280] bridge_slave_0: entered promiscuous mode [ 425.562982][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.563057][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.563171][ T8280] bridge_slave_1: entered allmulticast mode [ 425.588733][ T8280] bridge_slave_1: entered promiscuous mode [ 426.243888][ T8415] loop6: detected capacity change from 0 to 512 [ 426.250696][ T8415] EXT4-fs: Ignoring removed bh option [ 426.251159][ T8415] EXT4-fs: quotafile must be on filesystem root [ 426.325388][ T8415] loop6: detected capacity change from 0 to 512 [ 428.903850][ T8415] EXT4-fs: error -4 creating inode table initialization thread [ 428.904178][ T8415] EXT4-fs (loop6): mount failed [ 428.994855][ T8280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.034850][ T8280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.899876][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 430.821675][ T5704] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 431.094087][ T5704] usb 7-1: Using ep0 maxpacket: 32 [ 431.121514][ T5704] usb 7-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 431.164411][ T5704] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.164474][ T5704] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.164567][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.600771][ T5704] usb 7-1: config 0 descriptor?? [ 431.661724][ T8280] team0: Port device team_slave_0 added [ 431.884276][ T5704] usb 7-1: USB disconnect, device number 2 [ 432.144403][ T8421] hsr_slave_0: left promiscuous mode [ 432.427450][ T8421] hsr_slave_1: left promiscuous mode [ 432.561491][ T8435] syzkaller0: entered promiscuous mode [ 432.561515][ T8435] syzkaller0: entered allmulticast mode [ 432.597916][ T8280] team0: Port device team_slave_1 added [ 432.785649][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.785665][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.785687][ T8280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.832680][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.832696][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.832720][ T8280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.989515][ T8280] hsr_slave_0: entered promiscuous mode [ 434.012679][ T8280] hsr_slave_1: entered promiscuous mode [ 434.021715][ T8280] debugfs: 'hsr0' already exists in 'hsr' [ 434.021739][ T8280] Cannot create hsr debugfs directory [ 434.452986][ T8464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.499006][ T8464] serio: Serial port ttyS3 [ 438.650410][ T8496] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 438.924169][ T33] audit: type=1800 audit(1791397032.593:66): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.384" name="syzkaller0" dev="sda1" ino=2061 res=0 errno=-22 [ 440.036199][ T8280] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 440.062138][ T8280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.064363][ T8280] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 440.094016][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.094070][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.118641][ T8280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.120191][ T8280] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 440.121630][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.385'. [ 440.155924][ T8280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.164512][ T8280] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 440.178217][ T8280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.788664][ T8522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 442.313716][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 443.211003][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.388'. [ 445.017936][ T5895] IPVS: stopping estimator thread 0... [ 445.504396][ T5895] IPVS: starting estimator thread 0... [ 445.648175][ T8556] IPVS: using max 36 ests per chain, 86400 per kthread [ 447.431989][ T8280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.988438][ T8583] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 447.988484][ T8583] CIFS mount error: No usable UNC path provided in device string! [ 447.988484][ T8583] [ 447.988518][ T8583] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 448.421379][ T8280] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.577999][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.578071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.583028][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.583140][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.330365][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.397'. [ 450.763125][ T8596] loop5: detected capacity change from 0 to 256 [ 450.764908][ T8596] exfat: Deprecated parameter 'utf8' [ 450.765012][ T8596] exfat: Deprecated parameter 'namecase' [ 450.891721][ T8596] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 451.773212][ T8601] Bluetooth: MGMT ver 1.23 [ 452.135974][ T8613] fuse-io-uring is disabled by module parameter [ 452.313014][ T8613] loop5: detected capacity change from 0 to 512 [ 452.705275][ T7899] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 452.705327][ T7899] FAT-fs (loop5): Filesystem has been set read-only [ 452.705620][ T7899] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 452.904827][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.507043][ T33] audit: type=1326 audit(1791397049.203:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f931eb9e199 code=0x0 [ 455.546700][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 456.913115][ T8658] loop3: detected capacity change from 0 to 8 [ 457.132926][ T8660] loop6: detected capacity change from 0 to 1024 [ 457.140719][ T8660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 457.141071][ T8660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 457.150225][ T8660] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 457.775381][ T8660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.931410][ T8280] veth0_vlan: entered promiscuous mode [ 458.955894][ T8658] SQUASHFS error: zlib decompression failed, data probably corrupt [ 458.955917][ T8658] SQUASHFS error: Failed to read block 0x9b: -5 [ 458.955925][ T8658] SQUASHFS error: Unable to read metadata cache entry [99] [ 458.955961][ T8658] SQUASHFS error: Unable to read inode 0x127 [ 459.014697][ T8280] veth1_vlan: entered promiscuous mode [ 459.205944][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 459.225786][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 459.237227][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 459.247516][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 459.262351][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.315781][ T8280] veth0_macvtap: entered promiscuous mode [ 459.355218][ T8280] veth1_macvtap: entered promiscuous mode [ 459.429284][ T7714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.507065][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.560259][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.755868][ T135] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.757022][ T135] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.809272][ T135] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.812466][ T135] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.371932][ T5625] Bluetooth: hci1: command tx timeout [ 461.786365][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.786400][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.240002][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.240024][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.447727][ T5625] Bluetooth: hci1: command tx timeout [ 463.878985][ T3108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 464.327356][ T3108] usb 4-1: Using ep0 maxpacket: 8 [ 464.448319][ T3108] usb 4-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.40 [ 464.618923][ T3108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.618978][ T3108] usb 4-1: Product: syz [ 464.618991][ T3108] usb 4-1: Manufacturer: syz [ 464.619003][ T3108] usb 4-1: SerialNumber: syz [ 465.538651][ T5625] Bluetooth: hci1: command tx timeout [ 466.261354][ T3108] usb 4-1: can't set config #1, error -71 [ 466.265403][ T3108] usb 4-1: USB disconnect, device number 4 [ 466.430371][ T8710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.603309][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.613584][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.626891][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.635095][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.635771][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.024988][ T54] Bluetooth: hci1: command tx timeout [ 468.728849][ T54] Bluetooth: hci2: command tx timeout [ 469.815084][ T4208] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.834573][ T54] Bluetooth: hci2: command tx timeout [ 471.617108][ T4208] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.041754][ T54] Bluetooth: hci2: command tx timeout [ 473.446667][ T4208] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.583413][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.583615][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.583825][ T8667] bridge_slave_0: entered allmulticast mode [ 473.610591][ T8667] bridge_slave_0: entered promiscuous mode [ 473.621901][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.622108][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.622302][ T8667] bridge_slave_1: entered allmulticast mode [ 473.624033][ T8667] bridge_slave_1: entered promiscuous mode [ 473.787373][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 473.814632][ T4208] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.891081][ T8667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.900998][ T8667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.938634][ T5838] usb 4-1: New USB device found: idVendor=056a, idProduct=00b3, bcdDevice=0.00 [ 473.941790][ T5838] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 473.941833][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 473.941858][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 473.941919][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.993796][ T5838] usb 4-1: config 0 descriptor?? [ 474.061720][ T8667] team0: Port device team_slave_0 added [ 474.065958][ T8667] team0: Port device team_slave_1 added [ 474.128086][ T33] audit: type=1326 audit(1791397067.833:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.424" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f16f9e199 code=0x7ffc0000 [ 474.134016][ T33] audit: type=1326 audit(1791397067.833:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.424" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f16f9e199 code=0x7ffc0000 [ 474.134134][ T33] audit: type=1326 audit(1791397067.833:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.424" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f5f16f9e199 code=0x7ffc0000 [ 474.134303][ T33] audit: type=1326 audit(1791397067.833:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.424" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f16f9e199 code=0x7ffc0000 [ 474.163754][ T33] audit: type=1326 audit(1791397067.843:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.424" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f16f5e9ce code=0x7ffc0000 [ 474.190037][ T33] audit: type=1326 audit(1791397067.843:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.424" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f16f9e199 code=0x7ffc0000 [ 474.190176][ T33] audit: type=1326 audit(1791397067.843:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.424" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f16f9e199 code=0x7ffc0000 [ 474.190374][ T33] audit: type=1326 audit(1791397067.843:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.424" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f16f9e199 code=0x7ffc0000 [ 474.190529][ T33] audit: type=1326 audit(1791397067.843:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.424" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f16f9e199 code=0x7ffc0000 [ 474.190736][ T33] audit: type=1326 audit(1791397067.843:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.424" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5f16f9e199 code=0x7ffc0000 [ 474.886176][ T8764] loop3: detected capacity change from 0 to 512 [ 475.042953][ T8764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.043063][ T8764] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.050326][ T54] Bluetooth: hci2: command tx timeout [ 475.118768][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.131598][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.131627][ T8667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.188328][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.6.425'. [ 475.271126][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.271142][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.271166][ T8667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.624126][ T8667] hsr_slave_0: entered promiscuous mode [ 475.634107][ T8667] hsr_slave_1: entered promiscuous mode [ 475.646622][ T8667] debugfs: 'hsr0' already exists in 'hsr' [ 475.646647][ T8667] Cannot create hsr debugfs directory [ 475.791009][ T4208] bridge_slave_1: left allmulticast mode [ 475.791050][ T4208] bridge_slave_1: left promiscuous mode [ 475.791259][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.857101][ T8786] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5615] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8786] [ 475.976387][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.978675][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.004771][ T4208] bridge_slave_0: left allmulticast mode [ 476.005512][ T4208] bridge_slave_0: left promiscuous mode [ 476.028625][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.684983][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.701801][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.703536][ T4208] bond0 (unregistering): Released all slaves [ 477.543117][ T5838] usbhid 4-1:0.0: can't add hid device: -71 [ 477.543244][ T5838] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 477.553727][ T5838] usb 4-1: USB disconnect, device number 5 [ 478.235024][ T8808] loop6: detected capacity change from 0 to 512 [ 478.237335][ T8808] ext4: Bad value for 'journal' [ 478.239968][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.713248][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 480.694540][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.694837][ T8819] loop3: detected capacity change from 0 to 1024 [ 480.696446][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.696601][ T8711] bridge_slave_0: entered allmulticast mode [ 480.734724][ T8711] bridge_slave_0: entered promiscuous mode [ 480.743806][ T8819] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 480.764394][ T8819] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 480.778578][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.778750][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.778942][ T8711] bridge_slave_1: entered allmulticast mode [ 480.813047][ T8711] bridge_slave_1: entered promiscuous mode [ 480.820962][ T8819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.034862][ T8829] loop6: detected capacity change from 0 to 8192 [ 481.530987][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.918391][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.920965][ T8830] null_blk: disk nullb1 created [ 482.952265][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.092456][ T4208] hsr_slave_0: left promiscuous mode [ 483.138090][ T4208] hsr_slave_1: left promiscuous mode [ 483.213236][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.213408][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.307899][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.308018][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.784340][ T33] kauditd_printk_skb: 12 callbacks suppressed [ 483.784360][ T33] audit: type=1804 audit(1791397077.483:90): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.432" name="/newroot/27/file0/file0" dev="loop6" ino=131 res=1 errno=0 [ 484.007605][ T4208] veth1_macvtap: left promiscuous mode [ 484.007644][ T4208] veth0_macvtap: left promiscuous mode [ 484.007723][ T4208] veth1_vlan: left promiscuous mode [ 484.007763][ T4208] veth0_vlan: left promiscuous mode [ 484.058760][ T8835] loop3: detected capacity change from 0 to 8 [ 484.153487][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.434'. [ 484.759297][ T8842] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 484.798425][ T8842] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 484.832560][ T8842] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 487.326657][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 487.360451][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 488.239387][ T8859] loop6: detected capacity change from 0 to 16 [ 488.282066][ T8859] erofs (device loop6): mounted with root inode @ nid 36. [ 488.285589][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 488.303722][ T8711] team0: Port device team_slave_0 added [ 488.307213][ T8711] team0: Port device team_slave_1 added [ 488.841836][ T8863] erofs (device loop6): invalid h_shared_count 83 @ nid 46 [ 488.841927][ T8863] erofs (device loop6): invalid h_shared_count 83 @ nid 46 [ 488.841946][ T8863] overlayfs: failed to get redirect (-117) [ 489.843916][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.843934][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.843957][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.072232][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.072253][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.072278][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.590861][ T8711] hsr_slave_0: entered promiscuous mode [ 491.592038][ T8711] hsr_slave_1: entered promiscuous mode [ 491.592876][ T8711] debugfs: 'hsr0' already exists in 'hsr' [ 491.592896][ T8711] Cannot create hsr debugfs directory [ 492.468584][ T8667] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 492.521679][ T8667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.723154][ T8667] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 492.750861][ T8667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.826974][ T8667] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 492.870668][ T8667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 492.871627][ T8667] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 492.894227][ T8667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 492.958804][ T2265] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 493.107308][ T2265] usb 2-1: Using ep0 maxpacket: 32 [ 493.108405][ T2265] usb 2-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 493.271263][ T2265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.880319][ T2265] usb 2-1: config 0 descriptor?? [ 494.028044][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 494.158738][ T2265] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 494.193095][ T2265] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 494.195229][ T2265] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 494.195315][ T2265] usb 2-1: media controller created [ 494.253192][ T2265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.856899][ T8890] gadgetfs: bound to dummy_udc driver [ 495.111993][ T5838] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 495.112753][ C1] gadgetfs: connected [ 495.121726][ T5838] gadgetfs: disconnected [ 495.168411][ T2265] az6027: usb out operation failed. (-71) [ 495.170225][ T2265] az6027: usb out operation failed. (-71) [ 495.170244][ T2265] stb0899_attach: Driver disabled by Kconfig [ 495.170253][ T2265] az6027: no front-end attached [ 495.170253][ T2265] [ 495.174454][ T2265] az6027: usb out operation failed. (-71) [ 495.174473][ T2265] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 495.219241][ T2265] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 495.256178][ T2265] dvb-usb: schedule remote query interval to 400 msecs. [ 495.256204][ T2265] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 495.286194][ T2265] usb 2-1: USB disconnect, device number 3 [ 496.396842][ T2265] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 499.383254][ T8947] loop3: detected capacity change from 0 to 512 [ 499.391344][ T8947] EXT4-fs (loop3): Unsupported encryption level 190 [ 500.042923][ T8667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.073173][ T8667] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.261868][ T8953] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 501.009856][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.009959][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.163950][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.164031][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.542566][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.542643][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.547891][ T8711] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 506.685858][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.719065][ T8711] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 506.766592][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.784150][ T8711] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 506.803071][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.804297][ T8711] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 506.846860][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.525904][ T9000] No such timeout policy "syz1" [ 507.815343][ T54] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 508.904563][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.316172][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.358438][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.358536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.426159][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.426295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.956853][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.189495][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 513.744539][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.462'. [ 513.744567][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.462'. [ 513.744707][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.462'. [ 513.757480][ T5720] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 513.920277][ T5720] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 513.921250][ T5720] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 513.921273][ T5720] usb 2-1: config 0 has no interface number 0 [ 513.921309][ T5720] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 513.921334][ T5720] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 513.921366][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.930730][ T5720] usb 2-1: config 0 descriptor?? [ 513.970914][ T5720] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 514.284154][ T8667] veth0_vlan: entered promiscuous mode [ 514.312320][ T9061] iowarrior 2-1:0.1: Error -90 while submitting URB [ 514.352072][ T8667] veth1_vlan: entered promiscuous mode [ 514.764061][ T8667] veth0_macvtap: entered promiscuous mode [ 514.769987][ T8667] veth1_macvtap: entered promiscuous mode [ 514.790424][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.796149][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.910559][ T5838] usb 2-1: USB disconnect, device number 4 [ 514.939865][ T163] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.941107][ T163] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.000237][ T1218] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.000416][ T1218] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.604729][ T9101] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 516.710543][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.341721][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 519.414175][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 519.430937][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 519.471733][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 519.514088][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.833249][ T8711] veth0_vlan: entered promiscuous mode [ 520.856683][ T8711] veth1_vlan: entered promiscuous mode [ 521.404662][ T45] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.462170][ T8711] veth0_macvtap: entered promiscuous mode [ 521.480763][ T8711] veth1_macvtap: entered promiscuous mode [ 521.504234][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.521774][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.623427][ T1218] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.626872][ T1218] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.645196][ T8417] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.716799][ T5895] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.769217][ T9172] loop6: detected capacity change from 0 to 1024 [ 521.773239][ T9172] EXT4-fs: Ignoring removed i_version option [ 522.022302][ T9172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.210205][ T54] Bluetooth: hci5: command tx timeout [ 523.281468][ T7714] EXT4-fs error (device loop6): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /41/file0/lost+found: bad entry in directory: directory entry overrun - offset=792, inode=0, rec_len=1024, size=1024 fake=0 [ 523.362226][ T7714] VFS: Lookup of '.' in ext4 loop6 would have caused loop [ 523.362453][ T7714] VFS: Lookup of '.' in ext4 loop6 would have caused loop [ 524.257424][ T54] Bluetooth: hci5: command tx timeout [ 526.126881][ T45] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.327414][ T54] Bluetooth: hci5: command tx timeout [ 526.412222][ T7714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.450483][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 526.455803][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.471518][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.487059][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.496732][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 527.333682][ T45] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.408519][ T5625] Bluetooth: hci5: command tx timeout [ 528.652045][ T5625] Bluetooth: hci0: command tx timeout [ 528.657071][ T45] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.942400][ T9229] xt_hashlimit: size too large, truncated to 1048576 [ 530.523306][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.542644][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.555362][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.570293][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.594975][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.730713][ T5625] Bluetooth: hci0: command tx timeout [ 531.789998][ T9259] 9pnet_virtio: no channels available for device syz [ 532.090983][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 532.734127][ T5625] Bluetooth: hci1: command tx timeout [ 532.812247][ T5625] Bluetooth: hci0: command tx timeout [ 533.273835][ T9263] netlink: 84 bytes leftover after parsing attributes in process `syz.1.490'. [ 534.675934][ T45] bridge_slave_1: left allmulticast mode [ 534.675963][ T45] bridge_slave_1: left promiscuous mode [ 534.676219][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.739270][ T45] bridge_slave_0: left allmulticast mode [ 534.739289][ T45] bridge_slave_0: left promiscuous mode [ 534.739436][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.810784][ T5625] Bluetooth: hci1: command tx timeout [ 534.887467][ T5625] Bluetooth: hci0: command tx timeout [ 535.161706][ T9277] sd 0:0:1:0: PR command failed: 1026 [ 535.162010][ T9277] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 535.162285][ T9277] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 536.629677][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.704060][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.709467][ T45] bond0 (unregistering): Released all slaves [ 536.888280][ T5625] Bluetooth: hci1: command tx timeout [ 537.041864][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'. [ 537.984061][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.984167][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.984319][ T9130] bridge_slave_0: entered allmulticast mode [ 537.985983][ T9130] bridge_slave_0: entered promiscuous mode [ 538.030457][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.032202][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.032373][ T9130] bridge_slave_1: entered allmulticast mode [ 538.065434][ T9130] bridge_slave_1: entered promiscuous mode [ 538.480544][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 538.967610][ T5625] Bluetooth: hci1: command tx timeout [ 539.006448][ T9130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.006865][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.495'. [ 539.136040][ T45] hsr_slave_0: left promiscuous mode [ 539.147993][ T45] hsr_slave_1: left promiscuous mode [ 539.150610][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.150630][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.156230][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.156259][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.241604][ T45] veth1_macvtap: left promiscuous mode [ 539.241645][ T45] veth0_macvtap: left promiscuous mode [ 539.241834][ T45] veth1_vlan: left promiscuous mode [ 539.241901][ T45] veth0_vlan: left promiscuous mode [ 542.145336][ T45] team0 (unregistering): Port device team_slave_1 removed [ 542.162890][ T45] team0 (unregistering): Port device team_slave_0 removed [ 542.614833][ T9130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.761677][ T9130] team0: Port device team_slave_0 added [ 542.796935][ T9130] team0: Port device team_slave_1 added [ 542.981984][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.982003][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.982027][ T9130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.036948][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.036964][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.036987][ T9130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.449689][ T9130] hsr_slave_0: entered promiscuous mode [ 543.451534][ T9130] hsr_slave_1: entered promiscuous mode [ 543.453263][ T9130] debugfs: 'hsr0' already exists in 'hsr' [ 543.453282][ T9130] Cannot create hsr debugfs directory [ 544.581584][ T9358] loop3: detected capacity change from 0 to 32768 [ 544.582900][ T9358] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 544.591731][ T9358] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.503 (9358) [ 544.634118][ T9358] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 544.634153][ T9358] BTRFS info (device loop3): using crc32c checksum algorithm [ 544.758837][ T9358] BTRFS info (device loop3): rebuilding free space tree [ 544.886690][ T9358] BTRFS info (device loop3): disabling free space tree [ 544.886755][ T9358] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 544.886768][ T9358] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 544.908812][ T9358] BTRFS info (device loop3): enabling ssd optimizations [ 544.908834][ T9358] BTRFS info (device loop3): turning on async discard [ 544.908842][ T9358] BTRFS info (device loop3): force clearing of disk cache [ 544.908929][ T9358] BTRFS info (device loop3): use zstd compression, level 3 [ 547.393569][ T45] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.935193][ T5615] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 547.986237][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 547.992146][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.992253][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.992419][ T9207] bridge_slave_0: entered allmulticast mode [ 548.002611][ T9207] bridge_slave_0: entered promiscuous mode [ 548.012102][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 548.564232][ T45] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.617820][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.617971][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.618152][ T9207] bridge_slave_1: entered allmulticast mode [ 548.623208][ T9207] bridge_slave_1: entered promiscuous mode [ 549.552481][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.742878][ T45] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.770684][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.868657][ T9401] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 550.000626][ T9207] team0: Port device team_slave_0 added [ 550.074055][ T45] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.256113][ T9207] team0: Port device team_slave_1 added [ 551.048195][ T9420] JFS: discard option not supported on device [ 551.049590][ T9420] Mount JFS Failure: -5 [ 551.049648][ T9420] jfs_mount failed w/return code = -5 [ 552.142394][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.142435][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.142460][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.244715][ T9433] CIFS mount error: No usable UNC path provided in device string! [ 552.244715][ T9433] [ 552.244757][ T9433] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 552.524009][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 552.602168][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.602225][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.604861][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.802507][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.802710][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.803716][ T9245] bridge_slave_0: entered allmulticast mode [ 552.806430][ T9245] bridge_slave_0: entered promiscuous mode [ 552.916166][ T9207] hsr_slave_0: entered promiscuous mode [ 552.920681][ T9207] hsr_slave_1: entered promiscuous mode [ 552.921600][ T9207] debugfs: 'hsr0' already exists in 'hsr' [ 552.921624][ T9207] Cannot create hsr debugfs directory [ 552.922372][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.922489][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.922677][ T9245] bridge_slave_1: entered allmulticast mode [ 552.926991][ T9245] bridge_slave_1: entered promiscuous mode [ 553.078222][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.085300][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.036020][ T9245] team0: Port device team_slave_0 added [ 554.076786][ T9245] team0: Port device team_slave_1 added [ 554.099939][ T45] bridge_slave_1: left allmulticast mode [ 554.099957][ T45] bridge_slave_1: left promiscuous mode [ 554.100111][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.104262][ T45] bridge_slave_0: left allmulticast mode [ 554.104278][ T45] bridge_slave_0: left promiscuous mode [ 554.104416][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.353982][ T9461] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 555.617726][ T9463] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 555.617779][ T9463] CIFS mount error: No usable UNC path provided in device string! [ 555.617779][ T9463] [ 555.617852][ T9463] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 555.988469][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.044878][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.047091][ T45] bond0 (unregistering): Released all slaves [ 556.192047][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.192064][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.192084][ T9245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.197341][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.197366][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.197388][ T9245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.012946][ T9478] netlink: 336 bytes leftover after parsing attributes in process `syz.3.520'. [ 559.112348][ T9245] hsr_slave_0: entered promiscuous mode [ 559.115030][ T9245] hsr_slave_1: entered promiscuous mode [ 559.119534][ T9245] debugfs: 'hsr0' already exists in 'hsr' [ 559.119557][ T9245] Cannot create hsr debugfs directory [ 561.449623][ T2265] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 561.607586][ T2265] usb 2-1: Using ep0 maxpacket: 16 [ 561.608982][ T2265] usb 2-1: New USB device found: idVendor=060b, idProduct=500a, bcdDevice=0.00 [ 561.610178][ T2265] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.610205][ T2265] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.610226][ T2265] usb 2-1: config 0 interface 0 has no altsetting 0 [ 561.610258][ T2265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.630967][ T2265] usb 2-1: config 0 descriptor?? [ 561.908302][ T45] hsr_slave_0: left promiscuous mode [ 561.909310][ T45] hsr_slave_1: left promiscuous mode [ 561.910311][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.910331][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.913643][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.913661][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.945932][ T45] veth1_macvtap: left promiscuous mode [ 561.945976][ T45] veth0_macvtap: left promiscuous mode [ 561.946092][ T45] veth1_vlan: left promiscuous mode [ 561.946155][ T45] veth0_vlan: left promiscuous mode [ 562.441639][ T45] team0 (unregistering): Port device team_slave_1 removed [ 562.468545][ T45] team0 (unregistering): Port device team_slave_0 removed [ 563.000481][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.000587][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.154054][ T2265] usbhid 2-1:0.0: can't add hid device: -71 [ 563.154162][ T2265] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 563.185506][ T2265] usb 2-1: USB disconnect, device number 5 [ 563.366101][ T9130] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 563.476708][ T9130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 563.573186][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 564.780742][ T9130] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 564.959768][ T9130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.080011][ T9130] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 565.112061][ T9130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.186294][ T9130] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 565.215074][ T9130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.372290][ T9130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.419611][ T9130] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.446759][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.446862][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.489646][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.489746][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.164721][ T9555] 0x000000000000-0x000000020000 : "" [ 570.122824][ T9555] ftl_cs: FTL header not found. [ 570.491171][ T9207] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 570.506471][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.511663][ T9207] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 570.535245][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.550573][ T9207] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 570.564185][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.565056][ T9207] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 570.598456][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.004884][ T9245] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 571.014754][ T9245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 571.020819][ T9245] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 571.034520][ T9245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.037040][ T9245] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 571.046119][ T9245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.078515][ T9245] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 571.091484][ T9245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.331997][ T9207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.350407][ T9130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.461586][ T9207] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.493877][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.493979][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.519219][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.519337][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.593549][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.695853][ T9245] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.729431][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.729501][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.790578][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.792723][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.808845][ T9626] netlink: 336 bytes leftover after parsing attributes in process `syz.1.532'. [ 573.555725][ T9130] veth0_vlan: entered promiscuous mode [ 573.615584][ T9130] veth1_vlan: entered promiscuous mode [ 574.928147][ T9130] veth0_macvtap: entered promiscuous mode [ 574.951912][ T9130] veth1_macvtap: entered promiscuous mode [ 575.183601][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.390744][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.876907][ T5817] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.891138][ T5895] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.924104][ T45] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.080716][ T45] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.355671][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.355691][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.099289][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 578.107829][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 578.124854][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 578.141000][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 578.143193][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 578.235646][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.279157][ T9207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.247959][ T5625] Bluetooth: hci2: command tx timeout [ 580.966892][ T9245] veth0_vlan: entered promiscuous mode [ 581.556375][ T9713] loop3: detected capacity change from 0 to 4096 [ 581.645950][ T1172] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.672583][ T9713] ntfs3(loop3): ino=19, mi_enum_attr [ 581.672651][ T9713] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 581.675364][ T9245] veth1_vlan: entered promiscuous mode [ 582.044350][ T1172] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.122803][ T9245] veth0_macvtap: entered promiscuous mode [ 582.152554][ T9245] veth1_macvtap: entered promiscuous mode [ 582.329232][ T5625] Bluetooth: hci2: command tx timeout [ 582.446312][ T1172] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.973278][ T1172] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.407801][ T5625] Bluetooth: hci2: command tx timeout [ 584.526197][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.110511][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.490560][ T5625] Bluetooth: hci2: command tx timeout [ 586.939364][ T1218] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.939704][ T1218] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.942083][ T1218] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.942583][ T1218] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.840389][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.862212][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.866959][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.904200][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.915845][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 590.574992][ T1172] bridge_slave_1: left allmulticast mode [ 590.575019][ T1172] bridge_slave_1: left promiscuous mode [ 590.575281][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.638033][ T1172] bridge_slave_0: left allmulticast mode [ 590.638063][ T1172] bridge_slave_0: left promiscuous mode [ 590.646074][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.618655][ T33] audit: type=1800 audit(1791397185.303:91): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.552" name="syzkaller0" dev="sda1" ino=2061 res=0 errno=-22 [ 592.420443][ T5625] Bluetooth: hci5: command tx timeout [ 592.578472][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.590523][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.605990][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.614422][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.615120][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.861981][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.864799][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.866488][ T1172] bond0 (unregistering): Released all slaves [ 593.223669][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 593.984796][ T1172] hsr_slave_0: left promiscuous mode [ 593.988120][ T1172] hsr_slave_1: left promiscuous mode [ 593.999240][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.999286][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.000324][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.000341][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.060480][ T1172] veth1_macvtap: left promiscuous mode [ 594.060519][ T1172] veth0_macvtap: left promiscuous mode [ 594.060641][ T1172] veth1_vlan: left promiscuous mode [ 594.060705][ T1172] veth0_vlan: left promiscuous mode [ 594.478161][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 594.485606][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 594.497280][ T5625] Bluetooth: hci5: command tx timeout [ 594.665641][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 594.747761][ T5625] Bluetooth: hci0: command tx timeout [ 594.925381][ T9672] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.925507][ T9672] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.925702][ T9672] bridge_slave_0: entered allmulticast mode [ 594.931793][ T9672] bridge_slave_0: entered promiscuous mode [ 594.947599][ T9672] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.947737][ T9672] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.947907][ T9672] bridge_slave_1: entered allmulticast mode [ 594.949873][ T9672] bridge_slave_1: entered promiscuous mode [ 595.138876][ T9672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.152235][ T9672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.304066][ T9672] team0: Port device team_slave_0 added [ 595.348807][ T9672] team0: Port device team_slave_1 added [ 595.485903][ T9672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.485920][ T9672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.485944][ T9672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.499123][ T9672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.499139][ T9672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.499186][ T9672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.654525][ T1172] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.682997][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 595.794022][ T1172] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.818643][ T9672] hsr_slave_0: entered promiscuous mode [ 595.819705][ T9672] hsr_slave_1: entered promiscuous mode [ 595.820162][ T9672] debugfs: 'hsr0' already exists in 'hsr' [ 595.820180][ T9672] Cannot create hsr debugfs directory [ 595.930137][ T9765] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.930624][ T9765] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.931192][ T9765] bridge_slave_0: entered allmulticast mode [ 595.933227][ T9765] bridge_slave_0: entered promiscuous mode [ 596.006373][ T1172] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.047934][ T9765] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.048156][ T9765] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.048318][ T9765] bridge_slave_1: entered allmulticast mode [ 596.051429][ T9765] bridge_slave_1: entered promiscuous mode [ 596.159817][ T1172] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.220677][ T9765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.274390][ T9765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.450628][ T9765] team0: Port device team_slave_0 added [ 596.480477][ T9765] team0: Port device team_slave_1 added [ 596.577868][ T5625] Bluetooth: hci5: command tx timeout [ 596.655870][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 596.689135][ T9765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.689152][ T9765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.689175][ T9765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.794802][ T9765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.794819][ T9765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.794841][ T9765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.817569][ T5625] Bluetooth: hci0: command tx timeout [ 597.115451][ T9765] hsr_slave_0: entered promiscuous mode [ 597.116314][ T9765] hsr_slave_1: entered promiscuous mode [ 597.128882][ T9765] debugfs: 'hsr0' already exists in 'hsr' [ 597.128900][ T9765] Cannot create hsr debugfs directory [ 597.147042][ T9785] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.147141][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.147441][ T9785] bridge_slave_0: entered allmulticast mode [ 597.150051][ T9785] bridge_slave_0: entered promiscuous mode [ 597.236351][ T9785] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.236569][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.236716][ T9785] bridge_slave_1: entered allmulticast mode [ 597.240164][ T9785] bridge_slave_1: entered promiscuous mode [ 597.342912][ T9785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.358767][ T9785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.475732][ T9785] team0: Port device team_slave_0 added [ 597.485063][ T9785] team0: Port device team_slave_1 added [ 597.689300][ T9785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.689316][ T9785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.689336][ T9785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.793200][ T9785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.793214][ T9785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.793233][ T9785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.985965][ T9785] hsr_slave_0: entered promiscuous mode [ 597.986889][ T9785] hsr_slave_1: entered promiscuous mode [ 598.007340][ T9785] debugfs: 'hsr0' already exists in 'hsr' [ 598.007363][ T9785] Cannot create hsr debugfs directory [ 598.285959][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 598.369296][ T1172] bridge_slave_1: left allmulticast mode [ 598.369318][ T1172] bridge_slave_1: left promiscuous mode [ 598.369504][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.371920][ T1172] bridge_slave_0: left allmulticast mode [ 598.371936][ T1172] bridge_slave_0: left promiscuous mode [ 598.372072][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.411602][ T1172] bridge_slave_1: left allmulticast mode [ 598.411621][ T1172] bridge_slave_1: left promiscuous mode [ 598.411762][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.413738][ T1172] bridge_slave_0: left allmulticast mode [ 598.413767][ T1172] bridge_slave_0: left promiscuous mode [ 598.413872][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.647382][ T5625] Bluetooth: hci5: command tx timeout [ 598.656297][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.673369][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.674704][ T1172] bond0 (unregistering): Released all slaves [ 598.816499][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.835460][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.836827][ T1172] bond0 (unregistering): Released all slaves [ 598.888805][ T5625] Bluetooth: hci0: command tx timeout [ 598.891720][ T9672] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 598.901411][ T9672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 598.905502][ T9672] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 598.928781][ T9672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.007903][ T9672] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 599.050843][ T9672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 599.051667][ T9672] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 599.054898][ T9672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.646559][ T9672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.752467][ T9672] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.765021][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.765124][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.790628][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.790736][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.065323][ T1172] hsr_slave_0: left promiscuous mode [ 600.066098][ T1172] hsr_slave_1: left promiscuous mode [ 600.067042][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.067061][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.072396][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.072416][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.122572][ T1172] hsr_slave_0: left promiscuous mode [ 600.123525][ T1172] hsr_slave_1: left promiscuous mode [ 600.124681][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.125542][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.189918][ T1172] veth1_macvtap: left promiscuous mode [ 600.189957][ T1172] veth0_macvtap: left promiscuous mode [ 600.190081][ T1172] veth1_vlan: left promiscuous mode [ 600.190170][ T1172] veth0_vlan: left promiscuous mode [ 600.462660][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 600.480187][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 600.711335][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 600.737151][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 600.886005][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 600.977461][ T5625] Bluetooth: hci0: command tx timeout [ 601.271646][ T9765] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 601.340887][ T9765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 601.343354][ T9765] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 601.358771][ T9765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 601.361684][ T9765] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 601.407444][ T9765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 601.408405][ T9765] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 601.414151][ T9765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 601.892662][ T9672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.105194][ T9765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.219223][ T9765] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.245210][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.245307][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.284482][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.284609][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.640884][ T9785] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 602.667651][ T9785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.670201][ T9785] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 602.675481][ T9785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.700230][ T9785] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 602.717943][ T9785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.720733][ T9785] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 602.750289][ T9785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 602.878770][ T9672] veth0_vlan: entered promiscuous mode [ 602.908595][ T9672] veth1_vlan: entered promiscuous mode [ 603.043189][ T9672] veth0_macvtap: entered promiscuous mode [ 603.061062][ T9672] veth1_macvtap: entered promiscuous mode [ 603.078664][ T9785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.115194][ T9672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.144487][ T9785] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.151197][ T9672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.174890][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.174999][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.182416][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.182510][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.209663][ T1172] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.211313][ T1218] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.270279][ T5922] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.372165][ T1172] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.538121][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.538142][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.573925][ T9765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.616447][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.616461][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.164833][ T9997] netlink: 224 bytes leftover after parsing attributes in process `syz.1.561'. [ 606.113155][ T9765] veth0_vlan: entered promiscuous mode [ 606.128898][ T9765] veth1_vlan: entered promiscuous mode [ 606.181691][ T9765] veth0_macvtap: entered promiscuous mode [ 606.186695][ T9765] veth1_macvtap: entered promiscuous mode [ 606.221041][ T9765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.253210][ T9765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.317836][ T1218] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.318196][ T1218] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.318232][ T1218] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.318263][ T1218] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.597079][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.597101][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.640295][ T9785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.715855][ T5922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.715876][ T5922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.323028][T10042] netlink: 336 bytes leftover after parsing attributes in process `syz.8.553'. [ 610.336825][ T4208] IPVS: starting estimator thread 0... [ 610.427322][T10071] IPVS: using max 30 ests per chain, 72000 per kthread [ 611.751307][ T9785] veth0_vlan: entered promiscuous mode [ 611.802913][ T9785] veth1_vlan: entered promiscuous mode [ 611.937974][ T9785] veth0_macvtap: entered promiscuous mode [ 611.956255][ T9785] veth1_macvtap: entered promiscuous mode [ 611.984013][ T9785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.995887][ T9785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.216230][T10086] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 612.216311][T10086] netlink: 'syz.3.565': attribute type 2 has an invalid length. [ 613.221920][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.221973][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.222008][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.222043][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.060491][T10085] uprobe: syz.8.566:10085 failed to unregister, leaking uprobe [ 616.203259][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.203351][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.618124][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.618307][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.108106][ T33] audit: type=1800 audit(1791397214.803:92): pid=10139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.575" name="syzkaller0" dev="sda1" ino=2061 res=0 errno=-22 [ 621.927249][T10137] loop8: detected capacity change from 0 to 512 [ 621.938520][T10137] EXT4-fs: Ignoring removed bh option [ 621.939355][T10137] EXT4-fs: quotafile must be on filesystem root [ 622.054454][T10137] loop8: detected capacity change from 0 to 512 [ 623.273221][T10137] EXT4-fs: error -4 creating inode table initialization thread [ 623.273420][T10137] EXT4-fs (loop8): mount failed [ 624.197403][T10156] netlink: 'syz.7.578': attribute type 2 has an invalid length. [ 625.052682][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.052805][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.014481][T10164] Device name cannot be null; rc = [-22] [ 626.373517][T10165] netlink: 84 bytes leftover after parsing attributes in process `syz.8.579'. [ 626.454400][T10171] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 631.254812][T10190] Bluetooth: MGMT ver 1.23 [ 631.282638][T10187] trusted_key: encrypted_key: key user:syz not found [ 632.178593][T10207] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 637.639675][T10234] netlink: 84 bytes leftover after parsing attributes in process `syz.3.595'. [ 637.684764][T10243] loop9: detected capacity change from 0 to 128 [ 638.140886][T10253] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9785] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[10253] [ 638.920393][T10255] trusted_key: encrypted_key: key user:syz not found [ 643.985042][T10287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 644.013568][T10287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.024453][T10287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.036545][T10287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.058570][T10287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.191016][ T5625] Bluetooth: hci1: command tx timeout [ 648.332996][ T5625] Bluetooth: hci1: command tx timeout [ 650.427359][ T5625] Bluetooth: hci1: command tx timeout [ 652.363647][T10341] ================================================================== [ 652.363664][T10341] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.363696][T10341] Write of size 464 at addr ffffc90002e2ce40 by task vivid-000-vid-c/10341 [ 652.363712][T10341] [ 652.363736][T10341] CPU: 1 UID: 0 PID: 10341 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 652.363762][T10341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 652.363777][T10341] Call Trace: [ 652.363785][T10341] [ 652.363793][T10341] dump_stack_lvl+0xe8/0x150 [ 652.363813][T10341] print_address_description+0x55/0x1e0 [ 652.363833][T10341] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.363851][T10341] print_report+0x58/0x70 [ 652.363867][T10341] kasan_report+0x117/0x150 [ 652.363886][T10341] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.363908][T10341] kasan_check_range+0x264/0x2c0 [ 652.363924][T10341] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.363943][T10341] __asan_memcpy+0x40/0x70 [ 652.363960][T10341] tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.363990][T10341] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 652.364012][T10341] ? trace_sched_exit_tp+0x3a/0x130 [ 652.364041][T10341] ? __lock_acquire+0x747/0x2de0 [ 652.364066][T10341] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 652.364083][T10341] ? irqentry_exit+0x218/0x920 [ 652.364108][T10341] ? vivid_thread_vid_cap+0x48c/0x11d0 [ 652.364129][T10341] vivid_thread_vid_cap+0x922/0x11d0 [ 652.364147][T10341] ? __lock_acquire+0x747/0x2de0 [ 652.364175][T10341] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 652.364193][T10341] ? do_raw_spin_lock+0x12b/0x2f0 [ 652.364214][T10341] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 652.364233][T10341] ? __kthread_parkme+0x71/0x1f0 [ 652.364251][T10341] ? __kthread_parkme+0x199/0x1f0 [ 652.364270][T10341] kthread+0x38b/0x480 [ 652.364286][T10341] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 652.364304][T10341] ? __pfx_kthread+0x10/0x10 [ 652.364320][T10341] ret_from_fork+0x514/0xb70 [ 652.364340][T10341] ? __pfx_ret_from_fork+0x10/0x10 [ 652.364357][T10341] ? __switch_to+0xc78/0x1410 [ 652.364375][T10341] ? __pfx_kthread+0x10/0x10 [ 652.364392][T10341] ret_from_fork_asm+0x1a/0x30 [ 652.364421][T10341] [ 652.364428][T10341] [ 652.364432][T10341] The buggy address belongs to a 2-page vmalloc region starting at 0xffffc90002e2b000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 652.364466][T10341] The buggy address belongs to the physical page: [ 652.364480][T10341] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x77ea3 [ 652.364502][T10341] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 652.364529][T10341] raw: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 652.364544][T10341] raw: ffffffffffffffff 0000000000000000 00000001ffffffff 0000000000000000 [ 652.364554][T10341] page dumped because: kasan: bad access detected [ 652.364567][T10341] page_owner tracks the page as allocated [ 652.364574][T10341] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 10339, tgid 10335 (syz.8.613), ts 652058889567 [ 652.364606][T10341] post_alloc_hook+0x1f9/0x250 [ 652.364623][T10341] get_page_from_freelist+0x220f/0x2280 [ 652.364639][T10341] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 652.364655][T10341] alloc_pages_mpol+0x21e/0x390 [ 652.364670][T10341] alloc_pages_noprof+0xb1/0x2b0 [ 652.364685][T10341] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 652.364701][T10341] vmalloc_user_noprof+0xad/0xe0 [ 652.364715][T10341] vb2_vmalloc_alloc+0xef/0x360 [ 652.364730][T10341] __vb2_queue_alloc+0xa0b/0x1660 [ 652.364745][T10341] vb2_core_reqbufs+0xc3f/0x1470 [ 652.364759][T10341] __vb2_init_fileio+0x310/0x1040 [ 652.364774][T10341] vb2_core_poll+0x4b0/0x830 [ 652.364788][T10341] vb2_fop_poll+0x196/0x310 [ 652.364802][T10341] v4l2_poll+0x147/0x2c0 [ 652.364816][T10341] do_sys_poll+0x98f/0x1150 [ 652.364831][T10341] __se_sys_ppoll+0x209/0x2b0 [ 652.364845][T10341] page last free pid 10245 tgid 10245 ts 652027409054 stack trace: [ 652.364858][T10341] __free_frozen_pages+0xc97/0xd90 [ 652.364873][T10341] __mmdrop+0xbc/0x4d0 [ 652.364886][T10341] exit_mm+0x18e/0x240 [ 652.364900][T10341] do_exit+0x6a8/0x2380 [ 652.364913][T10341] do_group_exit+0x22d/0x2f0 [ 652.364927][T10341] __x64_sys_exit_group+0x3f/0x40 [ 652.364942][T10341] x64_sys_call+0x18c6/0x18d0 [ 652.364956][T10341] do_syscall_64+0x166/0x520 [ 652.364971][T10341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.364988][T10341] [ 652.364992][T10341] Memory state around the buggy address: [ 652.365002][T10341] ffffc90002e2cf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 652.365013][T10341] ffffc90002e2cf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 652.365025][T10341] >ffffc90002e2d000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 652.365034][T10341] ^ [ 652.365043][T10341] ffffc90002e2d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 652.365054][T10341] ffffc90002e2d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 652.365064][T10341] ================================================================== [ 652.389667][T10341] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 652.892863][T10341] CPU: 1 UID: 0 PID: 10341 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 652.902849][T10341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 652.912914][T10341] Call Trace: [ 652.916199][T10341] [ 652.919159][T10341] vpanic+0x26f/0x710 [ 652.923155][T10341] panic+0xc5/0xd0 [ 652.926880][T10341] ? __pfx_panic+0x10/0x10 [ 652.931305][T10341] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.936948][T10341] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.942589][T10341] check_panic_on_warn+0x89/0xb0 [ 652.947536][T10341] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.953174][T10341] end_report+0x73/0x170 [ 652.957423][T10341] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.963058][T10341] kasan_report+0x128/0x150 [ 652.967577][T10341] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.973237][T10341] kasan_check_range+0x264/0x2c0 [ 652.978202][T10341] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.983849][T10341] __asan_memcpy+0x40/0x70 [ 652.988276][T10341] tpg_fill_plane_buffer+0x1220/0x22b0 [ 652.993761][T10341] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 652.999578][T10341] ? trace_sched_exit_tp+0x3a/0x130 [ 653.004797][T10341] ? __lock_acquire+0x747/0x2de0 [ 653.009748][T10341] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 653.015909][T10341] ? irqentry_exit+0x218/0x920 [ 653.020689][T10341] ? vivid_thread_vid_cap+0x48c/0x11d0 [ 653.026166][T10341] vivid_thread_vid_cap+0x922/0x11d0 [ 653.031458][T10341] ? __lock_acquire+0x747/0x2de0 [ 653.036410][T10341] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 653.042133][T10341] ? do_raw_spin_lock+0x12b/0x2f0 [ 653.047167][T10341] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 653.052978][T10341] ? __kthread_parkme+0x71/0x1f0 [ 653.057920][T10341] ? __kthread_parkme+0x199/0x1f0 [ 653.062955][T10341] kthread+0x38b/0x480 [ 653.067029][T10341] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 653.072751][T10341] ? __pfx_kthread+0x10/0x10 [ 653.077347][T10341] ret_from_fork+0x514/0xb70 [ 653.081941][T10341] ? __pfx_ret_from_fork+0x10/0x10 [ 653.087054][T10341] ? __switch_to+0xc78/0x1410 [ 653.091731][T10341] ? __pfx_kthread+0x10/0x10 [ 653.096325][T10341] ret_from_fork_asm+0x1a/0x30 [ 653.101101][T10341] [ 653.104398][T10341] Kernel Offset: disabled [ 653.108724][T10341] Rebooting in 86400 seconds..