last executing test programs: 11.190519419s ago: executing program 0 (id=546): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x9, r5, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100c5dc2f"], 0xdd12}], 0x1}, 0x20040890) 9.858418121s ago: executing program 0 (id=550): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 8.6256598s ago: executing program 1 (id=551): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235222bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856a24cedd963c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75474939c664ff1849f8fbc403959f9c2de4b235261aba126be33a1762054cf2fad7dfc679c611c046f5764cfd3b84268cf21e9b8cd374866e2d55c4bfdd180a43e4fae7f5ddab3469cda8da12808566a285524ac700c24595dcd5c7784b30a4baafe80e10cecfe2393ecc927520408071c6901003dd15417429bfa90a54f501dd193865ebbb27e85c50605c45115595b04c410c2b2d6ef11e53872cba8091c88311d00c175bcf0a780265fe60228a640a746847d0138dc9f673fac8658d57ebaab4212bdcb1625a73bbda3c4a6e4282480077305b6afa3ebbcd525e588bf55760e556f1211a02cfe2e533ce915d86d62374332773744fcc8fdaf51812edd747c93b23bbe70d"], 0x1, 0x553a, &(0x7f0000006040)="$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") open(0x0, 0x14b27e, 0x6) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c15}], 0x1, 0x5a00, 0x0, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x100000002, 0x0, 0x1}) 8.548941732s ago: executing program 3 (id=552): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x2) 8.348084049s ago: executing program 3 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 6.489704777s ago: executing program 0 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xcf, 0x0, &(0x7f0000000400)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fchown(r4, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) lseek(r4, 0x80000000008, 0x1) 6.457718768s ago: executing program 2 (id=555): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="df4acc3fd066", 0x6}, {&(0x7f0000000200)="e650", 0x2}], 0x2}}], 0x1, 0x4001c00) 6.225673565s ago: executing program 2 (id=556): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 6.108526329s ago: executing program 3 (id=557): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c}) close(r2) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000040)=0x4a, 0x4) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) 4.78935368s ago: executing program 1 (id=558): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000004c0)=0xffffff7f, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000bc0)='D', 0x1}], 0x1}}], 0x1, 0x2090) 4.78874877s ago: executing program 0 (id=559): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4011}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = getpid() r6 = openat(r0, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0)=r5, 0x12) close(r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)=ANY=[], 0x0, 0x26}, 0x28) 4.701924443s ago: executing program 2 (id=560): socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4011}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 4.513182939s ago: executing program 3 (id=561): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x40305828, 0x0) write$FUSE_WRITE(r3, 0x0, 0x0) close(0x3) syz_open_dev$cec(0x0, 0x0, 0x2241) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000002100)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000000100)={&(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x29, 0x10001, 0x12510da1, 0xff, 0xe, 0x40001, 0x56, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x7}}, 0x30) openat$kvm(0xffffff9c, 0x0, 0x101000, 0x0) close(0x4) r5 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendto$unix(r5, 0x0, 0x0, 0x800, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x1, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) 3.912956378s ago: executing program 1 (id=562): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000002480)=""/4101, 0x1005) 3.379953624s ago: executing program 0 (id=563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) capset(0x0, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(0x0, r0) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, 0x0) 3.325933956s ago: executing program 2 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x34, r1, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x4800) 3.249198588s ago: executing program 1 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) 2.134726933s ago: executing program 0 (id=566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @loopback, 0x100}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={0x0, 0x58}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000001c0)=[{{0x0, 0x1}, {0x3, 0x1}}, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x38) 2.030094917s ago: executing program 3 (id=567): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x183, &(0x7f0000000500)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x115) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x4) epoll_create(0xffff) 2.019205417s ago: executing program 2 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) inotify_init1(0x800) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0xc8c0) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}], 0x2) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x151c, &(0x7f0000000d80)="$eJzs3AuYT9X6OPD1rrU2QxPfJrkM613v5psGiyTJJSGRJEmS5JaQNEmSkBhySxqSkOskuQwhuUxj0rjfL7knTY40SRKSW7L+z5Tz9zu/zvn1O//T/3ieM+/nefZjvfZ+3+/a8+5nf/dezzPzXc9R9VrUr9OMiMS/BH77J0kIESOEGCaEKCiECIQQleMqxwkYK/IpSPrXPoT9uR5OvdozYFcT9z934/7nbtz/3I37n7tx/3M37n/uxv3P3bj/jOVm2+cUu4633Lv9u9b/4U+5Wtmfi7///4Nkl5/81cbyN/T6J1K4/7kb9z934/7nbtz/3I37n7tx///DBULUvjzM+3d2c/9zN+4/Y7nZv3GtGS6vEl/1NW/ermxX+/pjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaCHEX8dXe16MMcYYY4wxxhj78/i8V3sGjDHGGGOMMcYY+/8PhBRKaBGIPCKviBH5RH5xjYgV14oCoqCIiOtEnLheFBI3iMKiiCgqiol4UVyUEEagsIJEKEqKUiIqbhSlxU0iQZQRZUU54UR5UUHcLCqKW0QlcauoLG4TVcTtoqqoJqqLGuIOUVPcKWqJ2qKOuEvUFXeLeqK+uEc0EPeKhuI+0UjcLxqLB0QT8aBoKh4SzcTDorl4RLQQj4qW4jHRSrQWbURb0e7/Kf8l0Ve8LPqJ/iJJDBADxStikBgshoihYph4VQwXr4kR4nWRLEaKUeINMVq8KcaIt8RYMU6MF2+LCWKimCQmiyliqkgR74hp4l0xXbwnZoiZYpaYLVLFHDFXvC/mifligfhALBQfikVisVgiloo08ZFIF8tEhvhYLBefiEyxQqwUq8RqsUasFevEerFBbBSbxGaxRWwV28R28anYIXaKXWK32CP2in3iM7FffC4OiC9Elvjyn8w/+9/ye4EAARIkaNCQB/JADMRAfsgPsRALBaAARCACcRAHhaAQFIbCUBSKQjzEQwkoAQgIBAQloSREIQqloTQkQAKUhbLgwEEFqAAV4RaoBJWgMlSGKlAFqkI1qAY1oAbUhJpQC2pBHagDdaEu1IN6cA/cA/dCQ2gIjaARNIbG0ASaQFNoCs2gGTSH5tACWkBLaAmtoBW0gTbQDtpBe2gPHaADdIJO0Bk6QxfoAomQCF2hK3SDbtAdukMP6AE9oSf0gt7QG16Cl+BleBn6Q105AAbCQBgEg2AIDIWh8CoMh9fgNXgdkmEkjII34A14E8bAGRgL42A8jIeaciJMgslAciqkQApMg2kwHabDDJgJM2E2pMIcmAtzYR7Mh/nwASyED+FDWAyLYSmkQRqkwzLIgAxYDmchE1bASlgFq2ENrIZ1sB7WwUbYBBthC2yBbbANPoVPYSfshN2wG/bCXvgMPoPP4XNIhizIgoNwEA7BITgMhyEbsuEIHIGjcBSOwTE4DsfhBJyEU3ASTsNpOANn4RycgwtwAS7CC/HfNN9bZkOykDm01DKPzCNjZIzML/PLWBkrC8gCMiIjMk7GyUKykCwsC8uisqiMl/GyhCwhUaIkGcqSsqSMyqgsLUvLBJkgy8qy0kknK8gKsqKsKCvJSrKyvE1WkbfLqrKa7OhqyBqypuzkasnaso6sI+vKu2U9WV/Wlw1kA9lQNpSNZCPZWDaWTeSDsqkcAEPgYZnTmRZyJLSUo6CVbC3byLbyTXhctpdjoIPsKDvJJ+U4GAtdZHuXKJ+RXeUk6Cafk5PhedlDToWe8kXZS/aWfeRLsq/s4PrluXwLlLNhkBwsh8ihch7cLXM6Vk++LpPlSDlKviGXwptyjHxLjpXj5Hj5tpwgJ8pJcrKcIqfKFPmOnCbfldPle3KGnClnydkyVc6Rc+X7cp6cLxfID+RC+aFcJBfLJXKpTJMfyXS5TGbIj+Vy+YnMlCvkSrlKrpZr5Fq5Tq6XG+RGuUlullvkVrlNbpefyh1yp9wld8s9cq/cJz+T++Xn8oD8QmbJL+VB+Rd5SH4lD8uvZbb8Rh6R38qj8jt5TH4vj8sf5Al5Up6SP8rT8id5Rp6V5+R5eUH+LC/KX+Ql6aVQoKRSSqtA5VF5VYzKp/Kra1SsulYVUAVVRF2n4tT1qpC6QRVWRVRRVUzFq+KqhDIKlVWkQlVSlVJRdaMqrW5SCaqMKqvKKafKqwrqZlVR3aIqqVtVZXWbqqJuV1VVNVVd1VB3qJrqTlVL1VZ11F2qrrpb1VP11T2qgbpXNVT3qUbqftVYPaCaqAdVU/WQaqYeVs3VI6qFelS1VI+pVqq1aqPaqnbqcdVePaE6qI6qk3pSdVZPqS7qaZWonlFd1bOqm3pOdVfPqx7qBdVTvah6qd6qj/pFXVJe9VP9VZIaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypZjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WUxT8dv0kvaumq/fUDDVTzVKzVaqao4ZcrrTgf8yfqlLUO+pd9fv8Eb9++ja1XX2qdqidapfarfaovWqf2qf2q/3qgDqgslSWOqgOqkPqkDqsDqtsla2OqCPqqDqqjqlj6rg6rk6ok+q8+lGdVj+pM+qsOqvOqwvqgrp4+WcgNGipldY60Hl0Xh2j8+n8+hodq6/VBXRBHdHX6Th9vS6kb9CFdRFdVBfT8bq4LqGNRm016VCX1KV0VN+oS+ubdIIuo8vqctrp8rqCvvlfzv+j+bXT7XR73V530B10J91Jd9addRfdRSfqRN1Vd9XddDfdXXfXPXQP3VP31L10L91H99F9dV/dT/fTSTpJD9Sv6EF6sB6ih+ph+lU9XA/XI/QInayT9Sg9So/Wo/UYPUaP1WP1eD1eT9AT9CQ9SU/RU3SKTtHT9DQ9XU/XM/QMPUvP0qk6Vc/Vc/U8PU8v0Av0Qr1QS71IL9FLdJpO0+k6XWfoDL1cL9eZeoVeoVfpVXqNXqPX6XV6g96gN+lNeoveojP1dr1d79A79C69S+/Re/Q+vU/v1/v1AX1AZ+ksfVAf1If0IX1YH9bZOlsf0Uf0UX1UH9PH9HF9XJ/QJ/QpfUqf1qf1GX1GX75ixUV9UV/Sl3Ie+wIZyEAHOsgT5Aligpggf5A/iA1igwJBgSASRIK4IC4oFNwQFA6KBEWDYkF8UDxIEibAwAYUhEHJoFQQDW4MSgc3BQlBmaBsUC5wQfmgQnBzUDG4JagU3BpUDm4LqgS3B1WDakH1oEZwR1AzuDOoFdQO6gR3BXWDu4N6Qf3gnqBBcG/QMLgvaBTcHzQOHgiaBA8GTYOHgmbBw0Hz4JGgRfBo0DJ4LGgVtA7aBG2Ddn9qfe/PFHnC9TP9TZIZYAaaV8wgM9gMMUPNMPOqGW5eMyPM6ybZjDSjzBtmtHnTjDFvmbFmnBlv3jYTzEQzyUw2U8xUk2LeMdPMu2a6ec/MMDPNLDPbpJo5Zq5538wz880C84FZaD40i8xis8QsNWnmI5NulpkM87FZbj4xmWaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wq2me3mU7PD7DS7zG6zx+w1+8xnZr/53BwwX5gs86U5aP5iDpmvzGHztck235gj5ltz1HxnjpnvzXHzgzlhTppT5kdz2vxkzpiz5pw5by6Yn81F84u5ZHzOw33O1ztq1JgH82AMxmB+zI+xGIsFsABGMIJxGIeFsBAWxsJYFItiPMZjCSyBOQgJS2JJjGIUS2NpTMAELItl0aHDClgBK2JFrISVsDJWxipYBatiVayO1fEOvAPvxDuxNtbGu/AuvBvvxvpYHxtgA2yIDbERNsLG2BibYBNsik2xGTbD5tgcW2ALbIktsRW2wjbYBtthO2yP7bEDdsBO2Ak7Y2fsgl0wEROxK3bFbtgNu2N37IE9sCf2xF7YC/tgH+yLfbEf9sMkTMKBOBAH4SAcgkNwGA7D4TgcR+AITMZkHIWjcDSOxjE4BsfiOByPb+MEnIiTcDJOwamYgik4DafhdJyOM3AGzsJZmIqpOBfn4jychwtwAS7EhbgIF+ESXIJpmIbpmI4ZmIHLcTlmYiauxJW4GlcXXItrcT2ux424ETfjZtyKW3E7bscduAN34S7cg3twH+7D/bgfD+ABzMIsPIgH8RAewsN4GLMxG4/gETyKR/EYHsPjeBxP4Ak8hafwNJ7GM3gGz+E5vIA/40X8BS+hxxgrRX57jY2119oCtqCNsflsThwIIXLioraYjbfFbQlrbGFb5G9itNYm2DK2rC1nnS1vK9ibfxdXtdVsdVvD3mFr2jttrd/FDey9tqG9zzay99v69p6/iRvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZton7Fd7bO/i9PtMrvebrAb7Sa7335uz9nz9qj9zl6wP9t+tr8dZl+1w+1rdoR93Sbbkb+Lx9u37QQ70U6yk+0UO/V38Sw726baOXaufd/Os/N/F6fZj+xCm2EX2cV2iV36a5wzpwz7sV1uP7GZdoVdaVfZ1XaNXWvX/d+5rrJb7Fa7ze6zn9kddqfdZXfbPXbvr3HOeRywX9gs+6U9Yr+1h+xX9rA9ZrPtN7/GOed3zH5vj9sf7Al70p6yP9rT9id7xp799fxzzv1H+4u9ZL0VBCRJkaaA8lBeiqF8lJ+uoVi6lgpQQYrQdRRH11MhuoEKUxEqSsUonopTCTKEZIkopJJUiqJ0I5WmmyiBylBZKkeOylMFupkq0i1UiW6lynQbVaHbqSpVi61ONegOqkl3Ui2qTXXoLqrrPdWj+nQPNaB7qSHdR43ofmpMD1ATepCa0kPUjB6m5vQItaBHqSU9Rq2oNbWhttSOHqf29AR1oI7UiZ6kzvQUdaGnKZGeoa70LHWj56g7PU896AXqSS9SL+pNfegl6ksvUz/qT0k0gAbSKzSIBtMQGkrD6FUaTq/RCHqdkmkkjaI3aDS9SWPoLRpL42g8vU0TaCJNosk0haZSCr1D0+hdmk7v0QyaSbNoNqXSHJpL79M8mk8L6ANaSB/SIlpMS2gppdFHlE7LKIM+puX0CWXSClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttOntIN20i7aTXtoL+2jz2g/fU4H6AvKoi/pIP2FDtFXdJi+pmz6ho7Qt3SUvqNj9D0dpx/oBJ2kU/Qjnaaf6AydpXN0ni7Qz3SRfqFL5EmEEMpQhToMwjxh3jAmzBfmD68JY8NrwwJhwTASXhfGhdeHhcIbwsJhkbBoWCyMD4uHJUITYmhDCsOwZFgqjIY3hqXDm8KEsExYNiwXurB8WCG8OawY3hJWCm8NK4e3hVXC28OqYbXw0ftrhHeENcM7w1ph7bBOeFdYN7w7rBfWD+8JG4T3hg3D+8JG4f1hpfCBsEn4YNg0fChsFj4cNg8fCVuEj4Ytw8fCVmHrsE3YNmwXPh62D58IO4Qdw07hk2Hn8KmwS5hz93om7Bo++w/2Px0mhr/tTwoHhAPDV8JXQu/vU0uiS6Np0Y+i6dFl0Yzox9Hl0U+imdEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a3RbVHv6+cVDpx0ymkXuDwur4tx+Vx+d42Ldde6Aq6gi7jrXJy73hVyN7jCrogr6oq5eFfclXDGobOOXOhKulIu6m50pd1NLsGVcWVdOedceVfBtXXtXDvX3j3hOriOrpN70j3pnnJPuafd0+4Z19U967q551x397zr4V5wL7gXXS/X2/VxL7m+7mXX73x/l+SS3EA30A1yg9wQN8QNc8PccDfcjXAjXLJLdqPcKDfajXZj3Bg31o114914N8FNcJPcJDfFTXEpLsVNc9PcdDfdzXAz3Cw3y6W6VDfXzXXz3Dy3wC1wCxMWukVukVvilrg0l+bSXbrLcBluuVvuMl2mW+lWutVutVvr1rr1br3b6Da6zW6z2+q2uu1uu9vhdrhdbpfb4/a4fW6f2+/2uwPugMtyWe6gO+gOuUPusPvaZbtv3BH3rTvqvnPH3PfuuPvBnXAn3Sn3ozvtfnJn3Fl3zp13F9zP7qL7xV1y3qVE3olMi7wbmR55LzIjMjMyKzI7khqZE5kbeT8yLzI/siDyQWRh5MPIosjiyJLI0kha5KNIemRZJCPycWR55JNIZmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf6Mv7W/yCb6ML+vLeefL+wr+Zl/R3+Ir+Vt9ZX+br+Jv91V9NV/dP+Zb+da+jW/r2/nHfXv/hO/gO/pO/knf2T/lu/infaJ/xnf1z/pu/jnf3T/ve/gXfE//ou/le/s+/iXf17/s+/n+PskP8AP9K36QH+yH+KF+mH/VD/ev+RH+dZ/sR/pR/g0/2r/px/i3/Fg/zo/3b/sJfqKf5Cf7KX6qT/Hv+Gn+XT/dv+dn+Jl+lp/tU/0cP9e/7+f5+X6B/8Av9B/6RX6xX+KX+jT/kU/3y3yG/9gv95/4TL/Cr/Sr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Hb/qd/hd/pdfrff4/f6ff4zv99/7g/4L3yW/9If9H/xh/xX/rD/2mf7b/wR/60/6r/zx/z3/rj/wZ/wJ/0p/6M/7X/yZ/xZf86f9xf8z/6i/8Vf4t9ZY4wxxhj7X1F/sH/A3/m/PEIIeXk8UAhx7c5i2f+95ubCv40Hy/jOkZy3rv49H/7rVrduUlLS5WMzlQhKLRZCRP62/l/jFaKTeEokio6i4t+d32DZ+wL9Qf3obULk/y85MeJKfKX+Lf+g/uNPjk+vEp6L+x/qLxYiodSVnHziSnylfqV/UL9I+z+Yf76vUoTo8F9yYsWV+Er9CuIJ8axI/JsjGWOMMcYYY4yx3wyW1bv/0ftzzvt5vL6Sk1dcif/o/ZwxxhhjjDHGGGNX3/O9+zz9eGJix+7/uwFcXhf457L6SPFPHMwDHvDgqg+u9p2JMcYYY4wx9me78tB/tWfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXv+OPyd2tc+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9r+TwAAAP//S4IttQ==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) read(r3, &(0x7f0000002400)=""/4096, 0x1000) dup(0xffffffffffffffff) 1.92869606s ago: executing program 1 (id=569): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0xfffffffffffffe04, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x6, &(0x7f0000000480), 0x0, 0x8000e5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x40000002, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x801, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x400, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x3, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x62, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0x40, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) 929.585001ms ago: executing program 3 (id=570): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) r9 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 315.06439ms ago: executing program 1 (id=571): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x40) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 0s ago: executing program 2 (id=572): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586", 0xd, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="400001", @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 80.986662][ T5761] cgroup: Unknown subsys name 'net' [ 81.126321][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.801641][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.808914][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.817113][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.826836][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.835597][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.843815][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.844698][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.859652][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.859797][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.874841][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.887685][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.894940][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.902861][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.908196][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.922685][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.927548][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.936863][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.939124][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.946158][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.958416][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.965441][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.977832][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.990206][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.008297][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.018467][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.446251][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 86.537404][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.679738][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.688096][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.695554][ T5773] bridge_slave_0: entered allmulticast mode [ 86.703849][ T5773] bridge_slave_0: entered promiscuous mode [ 86.746148][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.753536][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.761576][ T5774] bridge_slave_0: entered allmulticast mode [ 86.768815][ T5774] bridge_slave_0: entered promiscuous mode [ 86.776933][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.784373][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.791816][ T5773] bridge_slave_1: entered allmulticast mode [ 86.799011][ T5773] bridge_slave_1: entered promiscuous mode [ 86.806539][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 86.830996][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.843765][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.851141][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.859220][ T5774] bridge_slave_1: entered allmulticast mode [ 86.866317][ T5774] bridge_slave_1: entered promiscuous mode [ 86.907295][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.957339][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.023012][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.035823][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.061465][ T5773] team0: Port device team_slave_0 added [ 87.070827][ T5773] team0: Port device team_slave_1 added [ 87.165607][ T5774] team0: Port device team_slave_0 added [ 87.229451][ T5774] team0: Port device team_slave_1 added [ 87.235692][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.243234][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.255053][ T5772] bridge_slave_0: entered allmulticast mode [ 87.262568][ T5772] bridge_slave_0: entered promiscuous mode [ 87.271578][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.278839][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.286123][ T5772] bridge_slave_1: entered allmulticast mode [ 87.293586][ T5772] bridge_slave_1: entered promiscuous mode [ 87.302624][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.309759][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.336403][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.350303][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.357310][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.383463][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.395078][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.402386][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.409889][ T5775] bridge_slave_0: entered allmulticast mode [ 87.417332][ T5775] bridge_slave_0: entered promiscuous mode [ 87.492242][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.499838][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.507085][ T5775] bridge_slave_1: entered allmulticast mode [ 87.514810][ T5775] bridge_slave_1: entered promiscuous mode [ 87.547966][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.555025][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.581374][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.595714][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.610823][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.643462][ T5773] hsr_slave_0: entered promiscuous mode [ 87.650817][ T5773] hsr_slave_1: entered promiscuous mode [ 87.672247][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.680355][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.708150][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.768573][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.834260][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.874687][ T5774] hsr_slave_0: entered promiscuous mode [ 87.881799][ T5774] hsr_slave_1: entered promiscuous mode [ 87.892987][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.901657][ T5774] Cannot create hsr debugfs directory [ 87.916420][ T5772] team0: Port device team_slave_0 added [ 87.958089][ T5772] team0: Port device team_slave_1 added [ 88.011875][ T5775] team0: Port device team_slave_0 added [ 88.019076][ T5785] Bluetooth: hci0: command tx timeout [ 88.019096][ T5779] Bluetooth: hci2: command tx timeout [ 88.028049][ T5785] Bluetooth: hci1: command tx timeout [ 88.060193][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.067216][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.094832][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.105625][ T5785] Bluetooth: hci3: command tx timeout [ 88.125911][ T5775] team0: Port device team_slave_1 added [ 88.151168][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.158258][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.184614][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.260286][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.267320][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.293361][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.306570][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.313857][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.339994][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.466199][ T5772] hsr_slave_0: entered promiscuous mode [ 88.476076][ T5772] hsr_slave_1: entered promiscuous mode [ 88.482654][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.490517][ T5772] Cannot create hsr debugfs directory [ 88.523498][ T5775] hsr_slave_0: entered promiscuous mode [ 88.530537][ T5775] hsr_slave_1: entered promiscuous mode [ 88.536919][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.545184][ T5775] Cannot create hsr debugfs directory [ 88.713870][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.740130][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.751391][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.762526][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.910456][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.941573][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.958151][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.990789][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.069492][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.080831][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.091075][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.123049][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.206787][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.240571][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.254157][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.265073][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.390115][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.415256][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.451230][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.479874][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.502014][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.509485][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.542982][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.550179][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.563718][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.570962][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.586725][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.593972][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.636885][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.698828][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.749614][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.756836][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.769664][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.776827][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.799144][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.934607][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.989506][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.996740][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.024771][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.032061][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.064015][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.103050][ T5785] Bluetooth: hci2: command tx timeout [ 90.110839][ T5779] Bluetooth: hci1: command tx timeout [ 90.113403][ T5784] Bluetooth: hci0: command tx timeout [ 90.178192][ T5785] Bluetooth: hci3: command tx timeout [ 90.435927][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.567243][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.606043][ T5773] veth0_vlan: entered promiscuous mode [ 90.655005][ T5773] veth1_vlan: entered promiscuous mode [ 90.670187][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.716930][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.762295][ T5774] veth0_vlan: entered promiscuous mode [ 90.798308][ T5774] veth1_vlan: entered promiscuous mode [ 90.837099][ T5775] veth0_vlan: entered promiscuous mode [ 90.849121][ T5773] veth0_macvtap: entered promiscuous mode [ 90.865056][ T5773] veth1_macvtap: entered promiscuous mode [ 90.890784][ T5775] veth1_vlan: entered promiscuous mode [ 90.920208][ T5772] veth0_vlan: entered promiscuous mode [ 90.944462][ T5774] veth0_macvtap: entered promiscuous mode [ 90.965169][ T5774] veth1_macvtap: entered promiscuous mode [ 90.984131][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.999384][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.009412][ T5772] veth1_vlan: entered promiscuous mode [ 91.039712][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.050155][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.060600][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.069686][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.105245][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.116261][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.128287][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.175548][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.189532][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.205189][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.221205][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.230283][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.240324][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.249524][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.283127][ T5775] veth0_macvtap: entered promiscuous mode [ 91.327230][ T5772] veth0_macvtap: entered promiscuous mode [ 91.340989][ T5775] veth1_macvtap: entered promiscuous mode [ 91.349851][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.374968][ T5772] veth1_macvtap: entered promiscuous mode [ 91.389594][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.456488][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.470767][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.481646][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.492750][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.506019][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.523322][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.534485][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.546207][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.558212][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.571245][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.585240][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.600960][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.613084][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.625881][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.636206][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.647194][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.660197][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.677237][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.687815][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.704120][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.713262][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.722598][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.731841][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.776854][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.799639][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.814792][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.825549][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.836631][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.850620][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.863618][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.879623][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.892000][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.904844][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.908280][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.923692][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.932756][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.104393][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.116762][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.178471][ T5785] Bluetooth: hci2: command tx timeout [ 92.183970][ T5785] Bluetooth: hci0: command tx timeout [ 92.190847][ T5784] Bluetooth: hci1: command tx timeout [ 92.210270][ T9] cfg80211: failed to load regulatory.db [ 92.258165][ T5785] Bluetooth: hci3: command tx timeout [ 92.293706][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.304124][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.317081][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.326800][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.500051][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.524910][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.553965][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.594252][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.628797][ T5848] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.326036][ T5858] syz.2.3[5858]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.388181][ T5858] loop2: detected capacity change from 0 to 512 [ 93.405983][ T5858] ======================================================= [ 93.405983][ T5858] WARNING: The mand mount option has been deprecated and [ 93.405983][ T5858] and is ignored by this kernel. Remove the mand [ 93.405983][ T5858] option from the mount to silence this warning. [ 93.405983][ T5858] ======================================================= [ 94.485689][ T5785] Bluetooth: hci2: command tx timeout [ 94.491256][ T5785] Bluetooth: hci0: command tx timeout [ 94.496680][ T5785] Bluetooth: hci1: command tx timeout [ 94.502793][ T5785] Bluetooth: hci3: command tx timeout [ 94.776083][ T5863] loop3: detected capacity change from 0 to 256 [ 94.917572][ C0] sched: RT throttling activated [ 95.053973][ T5863] FAT-fs (loop3): Directory bread(block 64) failed [ 95.344154][ T5863] FAT-fs (loop3): Directory bread(block 65) failed [ 95.930495][ T5863] FAT-fs (loop3): Directory bread(block 66) failed [ 95.937128][ T5863] FAT-fs (loop3): Directory bread(block 67) failed [ 96.157923][ T5863] FAT-fs (loop3): Directory bread(block 68) failed [ 96.164548][ T5863] FAT-fs (loop3): Directory bread(block 69) failed [ 96.205351][ T5863] FAT-fs (loop3): Directory bread(block 70) failed [ 96.213407][ T5863] FAT-fs (loop3): Directory bread(block 71) failed [ 96.220374][ T5863] FAT-fs (loop3): Directory bread(block 72) failed [ 96.226995][ T5863] FAT-fs (loop3): Directory bread(block 73) failed [ 97.720289][ T5842] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 97.951937][ T5842] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 97.977912][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.993718][ T5842] usb 2-1: Product: syz [ 98.001119][ T5842] usb 2-1: Manufacturer: syz [ 98.005803][ T5842] usb 2-1: SerialNumber: syz [ 98.538897][ T5776] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.580615][ T5842] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 98.609956][ T5842] usb 2-1: USB disconnect, device number 2 [ 98.659815][ T5842] usblp0: removed [ 98.751027][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 98.764044][ T5776] usb 1-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 98.780658][ T5776] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.794917][ T5776] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.804360][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.812557][ T5776] usb 1-1: Product: syz [ 98.816778][ T5776] usb 1-1: Manufacturer: syz [ 98.824277][ T5776] usb 1-1: SerialNumber: syz [ 99.091939][ T5776] usb 1-1: 0:2 : does not exist [ 99.117375][ T5776] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 101.435618][ T5918] loop1: detected capacity change from 0 to 512 [ 101.934190][ T5776] usb 1-1: USB disconnect, device number 2 [ 104.577027][ T5944] loop0: detected capacity change from 0 to 512 [ 106.163787][ T5952] 9pnet_fd: Insufficient options for proto=fd [ 107.754744][ T5960] loop0: detected capacity change from 0 to 4096 [ 107.778751][ T5960] EXT4-fs: inline encryption not supported [ 107.808697][ T5960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.826093][ T5960] EXT4-fs (loop0): Test dummy encryption mode enabled [ 107.887607][ T5960] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 107.907163][ T5960] System zones: 0-5 [ 107.938979][ T5960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.047800][ T5967] loop1: detected capacity change from 0 to 4096 [ 108.055333][ T5967] EXT4-fs: inline encryption not supported [ 108.194895][ T5967] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.242237][ T5967] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.303130][ T5967] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 108.341131][ T5967] System zones: 0-5 [ 108.370812][ T5967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.324807][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.649347][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.177807][ T5776] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.388740][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 115.396624][ T5776] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.522383][ T6000] loop3: detected capacity change from 0 to 512 [ 116.555380][ T5998] loop0: detected capacity change from 0 to 4096 [ 116.619637][ T5998] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.693717][ T5998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.755385][ T5998] EXT4-fs (loop0): Test dummy encryption mode enabled [ 116.771401][ T6004] loop1: detected capacity change from 0 to 512 [ 116.856331][ T5998] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 116.912432][ T5998] System zones: 0-5 [ 116.919110][ T5776] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.929749][ T5776] usb 2-1: string descriptor 0 read error: -71 [ 116.936106][ T5776] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 116.945321][ T5776] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 118.811279][ T5998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.868793][ T5776] usb 2-1: can't set config #4, error -71 [ 118.901094][ T5776] usb 2-1: USB disconnect, device number 3 [ 118.991027][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.122785][ T6017] 9pnet_fd: Insufficient options for proto=fd [ 119.458937][ T6027] 9pnet_fd: Insufficient options for proto=fd [ 119.655545][ T6031] tipc: Started in network mode [ 119.671299][ T6031] tipc: Node identity 9a2722008e6, cluster identity 4711 [ 119.689324][ T6031] tipc: Enabled bearer , priority 0 [ 119.809798][ T6031] syzkaller0: entered promiscuous mode [ 119.815524][ T6031] syzkaller0: entered allmulticast mode [ 119.826043][ T6031] tipc: Resetting bearer [ 119.846445][ T6029] tipc: Resetting bearer [ 119.860568][ T6014] loop3: detected capacity change from 0 to 40427 [ 119.881429][ T6014] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 119.919763][ T6014] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.950211][ T6014] F2FS-fs (loop3): invalid crc value [ 119.997843][ T6014] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.227660][ T6014] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 120.290230][ T6014] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.639512][ T6029] tipc: Disabling bearer [ 123.651223][ T5776] tipc: Node number set to 340206080 [ 125.297135][ T6121] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 125.327831][ T6121] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 125.392652][ T6121] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 125.757805][ T5886] IPVS: starting estimator thread 0... [ 125.811031][ T6137] ip6gre1: entered promiscuous mode [ 125.820901][ T6137] ip6gre1: entered allmulticast mode [ 125.883125][ T6138] IPVS: using max 21 ests per chain, 50400 per kthread [ 126.043757][ T6141] team0: entered promiscuous mode [ 126.052173][ T6141] team_slave_0: entered promiscuous mode [ 126.060973][ T6141] team_slave_1: entered promiscuous mode [ 126.133130][ T6144] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 126.152553][ T6126] loop0: detected capacity change from 0 to 32768 [ 126.218875][ T6126] loop0: p1 p2 p3 < p5 p6 p7 > [ 126.265086][ T6126] loop0: p2 size 16775168 extends beyond EOD, truncated [ 126.298671][ T6126] loop0: p5 start 4294970168 is beyond EOD, truncated [ 126.903041][ T28] audit: type=1326 audit(1781377369.892:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 126.931100][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 126.942429][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 126.954754][ T5792] udevd[5792]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 126.966717][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 126.976744][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 126.996407][ T28] audit: type=1326 audit(1781377369.892:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 127.107721][ T28] audit: type=1326 audit(1781377369.892:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 127.187673][ T28] audit: type=1326 audit(1781377369.892:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 127.283001][ T6180] netlink: 'syz.1.109': attribute type 34 has an invalid length. [ 127.299782][ T28] audit: type=1326 audit(1781377369.902:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 127.407716][ T28] audit: type=1326 audit(1781377369.972:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 127.494820][ T28] audit: type=1326 audit(1781377369.972:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5fe79cbc2 code=0x7ffc0000 [ 127.545575][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 127.576771][ T28] audit: type=1326 audit(1781377369.972:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff5fe79cc57 code=0x7ffc0000 [ 127.606069][ T6186] program syz.2.112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.615702][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.629281][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.639774][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.650799][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.651686][ T28] audit: type=1326 audit(1781377369.972:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff5fe759b51 code=0x7ffc0000 [ 127.664423][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.702456][ T28] audit: type=1326 audit(1781377369.972:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff5fe79dc49 code=0x7ffc0000 [ 127.729163][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.739497][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.751173][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.412624][ T6217] overlayfs: overlapping lowerdir path [ 129.750967][ T6256] Zero length message leads to an empty skb [ 129.939294][ T6260] loop2: detected capacity change from 0 to 16 [ 129.991858][ T6260] erofs: (device loop2): mounted with root inode @ nid 36. [ 132.945667][ T6361] loop3: detected capacity change from 0 to 256 [ 132.956728][ T6361] exfat: Deprecated parameter 'utf8' [ 133.094214][ T6361] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 133.118610][ T6363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'. [ 133.140894][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.157990][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.243779][ T6365] process 'syz.0.188' launched './file2' with NULL argv: empty string added [ 133.624937][ T6372] loop2: detected capacity change from 0 to 4096 [ 133.644476][ T6372] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 133.858070][ T6372] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 133.902201][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 134.129508][ T5772] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 138.085288][ T6417] loop3: detected capacity change from 0 to 512 [ 138.133802][ T6417] EXT4-fs: Ignoring removed i_version option [ 138.139995][ T6417] EXT4-fs: Ignoring removed nobh option [ 138.147342][ T6417] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 138.163045][ T6417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.710431][ T6417] EXT4-fs (loop3): 1 truncate cleaned up [ 138.746601][ T6417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.328766][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 139.328805][ T28] audit: type=1800 audit(1781377382.182:41): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.208" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 139.744990][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.329803][ T6446] xt_hashlimit: max too large, truncated to 1048576 [ 143.628009][ T5886] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 143.840753][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.868328][ T5886] usb 3-1: not running at top speed; connect to a high speed hub [ 143.878958][ T5886] usb 3-1: config 1 has an invalid interface number: 174 but max is 0 [ 143.912420][ T5886] usb 3-1: config 1 has no interface number 0 [ 143.921653][ T5886] usb 3-1: config 1 interface 174 has no altsetting 0 [ 143.940697][ T5886] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=ab.98 [ 143.960447][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.987860][ T5886] usb 3-1: Product: syz [ 143.992254][ T5886] usb 3-1: Manufacturer: syz [ 143.996910][ T5886] usb 3-1: SerialNumber: syz [ 144.217288][ T6469] syz.1.217 uses obsolete (PF_INET,SOCK_PACKET) [ 144.275676][ T5886] option 3-1:1.174: GSM modem (1-port) converter detected [ 144.543525][ T5886] usb 3-1: USB disconnect, device number 2 [ 144.843499][ T5886] option 3-1:1.174: device disconnected [ 149.017721][ T28] audit: type=1326 audit(1781377392.002:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.0.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf79ce59 code=0x7ffc0000 [ 149.087795][ T28] audit: type=1326 audit(1781377392.002:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.0.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf79ce59 code=0x7ffc0000 [ 149.118169][ T5818] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.364275][ T28] audit: type=1326 audit(1781377392.012:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.0.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f06cf79ce59 code=0x7ffc0000 [ 150.400977][ T28] audit: type=1326 audit(1781377392.012:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.0.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf79ce59 code=0x7ffc0000 [ 150.408075][ T5886] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.486486][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 150.496390][ T5818] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 150.499581][ T28] audit: type=1326 audit(1781377392.012:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.0.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf79ce59 code=0x7ffc0000 [ 150.507693][ T5818] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 150.559907][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 150.570417][ T5818] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 150.586293][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 150.610553][ T5818] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.629571][ T5886] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.763391][ T5886] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 150.779077][ T5818] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.788440][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.807761][ T5886] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.857680][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.893974][ T5886] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 150.933686][ T5886] usb 4-1: invalid MIDI out EP 0 [ 151.038580][ T5818] usb 3-1: GET_CAPABILITIES returned 0 [ 151.049373][ T5818] usbtmc 3-1:16.0: can't read capabilities [ 151.258630][ T6508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.288394][ T6508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.155022][ T5886] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 152.170109][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 152.257822][ T6508] usbtmc 3-1:16.0: Unable to send data, error -71 [ 152.279835][ T5818] usb 3-1: USB disconnect, device number 3 [ 152.422389][ T5846] usb 4-1: USB disconnect, device number 2 [ 152.874924][ T6541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.242'. [ 152.934770][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'. [ 156.359179][ T6560] loop2: detected capacity change from 0 to 1024 [ 156.380761][ T6560] EXT4-fs: Ignoring removed bh option [ 156.440505][ T6560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.473607][ T6560] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 156.673452][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.147621][ T23] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 158.261772][ T6587] overlayfs: overlapping lowerdir path [ 158.518471][ T6589] netlink: 72 bytes leftover after parsing attributes in process `syz.0.262'. [ 158.530635][ T23] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 158.558229][ T23] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 158.569458][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.579109][ T23] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 158.588672][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.616214][ T23] usb 3-1: config 0 descriptor?? [ 159.297691][ T5842] usb 3-1: USB disconnect, device number 4 [ 161.368220][ T28] audit: type=1326 audit(1781377403.022:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.3.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 161.512400][ T28] audit: type=1326 audit(1781377403.062:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.3.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 161.557685][ T28] audit: type=1326 audit(1781377403.102:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.3.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 161.627641][ T28] audit: type=1326 audit(1781377403.132:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.3.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 161.686623][ T28] audit: type=1326 audit(1781377403.162:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.3.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe79ce59 code=0x7ffc0000 [ 164.090555][ T6630] loop2: detected capacity change from 0 to 512 [ 164.122035][ T6630] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.204890][ T6630] EXT4-fs (loop2): 1 truncate cleaned up [ 164.232295][ T6630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.662629][ T27] IPVS: starting estimator thread 0... [ 164.760614][ T6642] IPVS: using max 17 ests per chain, 40800 per kthread [ 165.865987][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.100309][ T6655] overlayfs: failed to clone upperpath [ 167.298970][ T6664] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 167.790888][ T6683] overlayfs: missing 'lowerdir' [ 169.557914][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 173.195868][ T6731] loop2: detected capacity change from 0 to 164 [ 176.620112][ T6734] loop3: detected capacity change from 0 to 32768 [ 176.725219][ T6734] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.040865][ T6734] XFS (loop3): Ending clean mount [ 177.114273][ T6762] loop2: detected capacity change from 0 to 512 [ 178.092568][ T5774] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.139033][ T6762] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 180.724561][ T6797] netlink: 'syz.1.325': attribute type 11 has an invalid length. [ 181.628055][ T6799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.950132][ T6797] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 182.967675][ T6797] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 183.543948][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 183.553918][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 183.561506][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.571601][ T5785] Workqueue: hci3 hci_rx_work [ 183.576341][ T5785] Call Trace: [ 183.579661][ T5785] [ 183.582621][ T5785] dump_stack_lvl+0x18c/0x250 [ 183.587328][ T5785] ? show_regs_print_info+0x20/0x20 [ 183.592699][ T5785] ? load_image+0x420/0x420 [ 183.597242][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 183.602415][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 183.607116][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 183.612362][ T5785] kobject_add_internal+0x61c/0xcc0 [ 183.617654][ T5785] kobject_add+0x164/0x240 [ 183.622191][ T5785] ? __rwlock_init+0x150/0x150 [ 183.627046][ T5785] ? kobject_init+0x1e0/0x1e0 [ 183.631797][ T5785] ? _raw_spin_unlock+0x28/0x40 [ 183.636733][ T5785] ? get_device_parent+0x366/0x390 [ 183.641920][ T5785] device_add+0x408/0xc50 [ 183.646287][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 183.651285][ T5785] le_conn_complete_evt+0xf5d/0x1540 [ 183.656608][ T5785] ? hci_event_packet+0x4cb/0x1270 [ 183.661786][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 183.668059][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 183.673732][ T5785] ? skb_pull_data+0xfb/0x200 [ 183.678448][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 183.684048][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 183.690166][ T5785] hci_event_packet+0x7ba/0x1270 [ 183.695170][ T5785] ? bis_list+0x290/0x290 [ 183.699547][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 183.704802][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 183.710045][ T5785] hci_rx_work+0x43a/0xd60 [ 183.714506][ T5785] ? process_scheduled_works+0x96f/0x15d0 [ 183.720349][ T5785] process_scheduled_works+0xa5d/0x15d0 [ 183.725961][ T5785] ? worker_attach_to_pool+0x380/0x380 [ 183.731474][ T5785] ? assign_work+0x3d2/0x5d0 [ 183.736100][ T5785] worker_thread+0xa55/0xfc0 [ 183.740742][ T5785] kthread+0x2fa/0x390 [ 183.744876][ T5785] ? pr_cont_work+0x560/0x560 [ 183.749579][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 183.754184][ T5785] ret_from_fork+0x48/0x80 [ 183.758635][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 183.763314][ T5785] ret_from_fork_asm+0x11/0x20 [ 183.768133][ T5785] [ 183.773564][ T5785] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.787687][ T5785] Bluetooth: hci3: failed to register connection device [ 185.748452][ T6858] ipt_REJECT: ECHOREPLY no longer supported. [ 186.643504][ T6864] netlink: 56 bytes leftover after parsing attributes in process `syz.0.345'. [ 188.952204][ T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 189.892162][ T787] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 189.968490][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.247185][ T787] usb 3-1: config 0 descriptor?? [ 190.483588][ T787] gspca_main: spca508-2.14.0 probing 8086:0110 [ 191.049667][ T787] gspca_spca508: reg_read err -71 [ 191.064461][ T787] gspca_spca508: reg_read err -71 [ 191.100237][ T787] gspca_spca508: reg_read err -71 [ 191.106927][ T787] gspca_spca508: reg_read err -71 [ 191.148127][ T787] gspca_spca508: reg_read err -71 [ 191.161991][ T787] gspca_spca508: reg write: error -71 [ 191.171965][ T787] spca508: probe of 3-1:0.0 failed with error -71 [ 191.195246][ T787] usb 3-1: USB disconnect, device number 5 [ 192.827221][ T6896] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.194375][ T6893] loop3: detected capacity change from 0 to 32768 [ 193.346523][ T6893] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 193.380386][ T6893] (syz.3.352,6893,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 193.455796][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 193.704469][ T6906] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 193.713455][ T6906] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 194.583229][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.592884][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.309970][ T6937] loop2: detected capacity change from 0 to 512 [ 196.565308][ T6937] EXT4-fs: Ignoring removed i_version option [ 196.600858][ T6937] EXT4-fs: Ignoring removed nobh option [ 196.646736][ T6937] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.117325][ T6937] EXT4-fs (loop2): 1 truncate cleaned up [ 197.159492][ T6937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.690816][ T28] audit: type=1800 audit(1781377440.692:52): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.366" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 197.953863][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.511922][ T6969] loop3: detected capacity change from 0 to 32768 [ 198.534173][ T6969] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.371 (6969) [ 198.601575][ T6969] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 198.615117][ T6969] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 198.628263][ T6969] BTRFS info (device loop3): enabling disk space caching [ 198.639801][ T6969] BTRFS info (device loop3): force clearing of disk cache [ 198.657925][ T6969] BTRFS info (device loop3): turning off barriers [ 198.666939][ T6969] BTRFS info (device loop3): enabling ssd optimizations [ 198.684707][ T6969] BTRFS info (device loop3): disabling disk space caching [ 198.702328][ T6969] BTRFS info (device loop3): not using ssd optimizations [ 198.804106][ T42] BTRFS warning (device loop3): checksum verify failed on logical 5267456 mirror 1 wanted 0xb8512a1d2916df35de1eb979e5409d57680a9623aa14e80f6c4e3536403d44d6 found 0x07d290f0ee7cd095decd24b6acaa757b1ed5185e7875d78e22d4c52a0a45cfa1 level 0 [ 198.828572][ T6969] BTRFS warning (device loop3): failed to read fs tree: -5 [ 198.865198][ T6969] BTRFS error (device loop3): open_ctree failed: -5 [ 199.378529][ T6997] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 200.463474][ T6997] overlayfs: failed to look up (tracing) for ino (-66) [ 200.728036][ T7001] loop2: detected capacity change from 0 to 4096 [ 200.946391][ T7001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.415618][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.674710][ T7031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.045513][ T7045] loop3: detected capacity change from 0 to 4096 [ 207.208192][ T7045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.520732][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.095618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 210.310654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 210.750568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 213.069462][ T7080] loop2: detected capacity change from 0 to 8192 [ 213.199058][ T7080] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 213.227651][ T7080] FAT-fs (loop2): Filesystem has been set read-only [ 213.512691][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 213.519090][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 213.525266][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 213.532576][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 213.741938][ T7089] loop3: detected capacity change from 0 to 2048 [ 214.456837][ T7089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.774448][ T7089] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 214.793018][ T7089] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 214.832978][ T7089] EXT4-fs (loop3): This should not happen!! Data will be lost [ 214.832978][ T7089] [ 214.843929][ T7089] EXT4-fs (loop3): Total free blocks count 0 [ 214.855102][ T7089] EXT4-fs (loop3): Free/Dirty block details [ 214.865252][ T7089] EXT4-fs (loop3): free_blocks=2415919504 [ 214.872368][ T7089] EXT4-fs (loop3): dirty_blocks=48 [ 214.877656][ T7089] EXT4-fs (loop3): Block reservation details [ 214.891359][ T7089] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 215.121191][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.189580][ T7109] ipt_REJECT: ECHOREPLY no longer supported. [ 218.384553][ T7123] warning: `syz.2.414' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 218.765569][ T7115] loop3: detected capacity change from 0 to 32768 [ 218.784814][ T7115] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.411 (7115) [ 218.815735][ T7132] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 218.993873][ T7115] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 219.005313][ T7132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.033109][ T7115] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 219.041911][ T7115] BTRFS info (device loop3): using free space tree [ 219.221306][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 219.246844][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 219.256638][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 219.267623][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 219.277256][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 219.287360][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 219.297993][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 219.308996][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 219.318877][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 219.329352][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'. [ 219.560343][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 219.709065][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 219.774702][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 219.812502][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 219.885885][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 219.895791][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 219.907131][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 219.917758][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 219.930293][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 219.939783][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 219.974177][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 219.997065][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 220.048653][ T7115] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 220.153653][ T7115] BTRFS error (device loop3): open_ctree failed: -12 [ 221.814261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 222.257953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 222.773442][ T5792] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by udevd (5792) [ 224.034217][ T5818] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 224.250762][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 224.267405][ T5818] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 224.276406][ T5818] usb 4-1: config 0 has no interface number 0 [ 224.282586][ T5818] usb 4-1: too many endpoints for config 0 interface 12 altsetting 184: 242, using maximum allowed: 30 [ 224.329551][ T5818] usb 4-1: config 0 interface 12 altsetting 184 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 224.361810][ T5818] usb 4-1: config 0 interface 12 has no altsetting 0 [ 224.387550][ T5818] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 224.400819][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.424351][ T5818] usb 4-1: Product: syz [ 224.437354][ T5818] usb 4-1: Manufacturer: syz [ 224.447938][ T5818] usb 4-1: SerialNumber: syz [ 224.491884][ T5818] usb 4-1: config 0 descriptor?? [ 224.760648][ T5818] usb-storage 4-1:0.12: USB Mass Storage device detected [ 224.791813][ T5818] usb-storage 4-1:0.12: Quirks match for vid 054c pid 002e: 1 [ 224.926999][ T5818] usb 4-1: USB disconnect, device number 3 [ 225.937732][ T7205] loop3: detected capacity change from 0 to 32768 [ 225.946993][ T7205] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.434 (7205) [ 225.971913][ T7205] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.982259][ T7205] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 225.991231][ T7205] BTRFS info (device loop3): max_inline at 0 [ 225.997349][ T7205] BTRFS info (device loop3): use zlib compression, level 3 [ 226.004622][ T7205] BTRFS info (device loop3): turning on sync discard [ 226.011419][ T7205] BTRFS info (device loop3): using free space tree [ 226.118459][ T7205] BTRFS info (device loop3): enabling ssd optimizations [ 227.275527][ T5774] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.052783][ T7250] 9pnet_virtio: no channels available for device 127.0.0.1 [ 230.131460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 230.575601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 230.882073][ T7261] netlink: 'syz.0.443': attribute type 10 has an invalid length. [ 231.488127][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.497112][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.510688][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.518003][ T7261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.526785][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.533985][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.619574][ T7261] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 231.626625][ T5822] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 231.918762][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 231.946783][ T5822] usb 3-1: device descriptor read/all, error -71 [ 235.728163][ T7293] __nla_validate_parse: 11 callbacks suppressed [ 235.728187][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 235.755523][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 237.461859][ T7302] loop3: detected capacity change from 0 to 32768 [ 237.491486][ T7302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.458 (7302) [ 237.585826][ T7308] capability: warning: `syz.0.461' uses deprecated v2 capabilities in a way that may be insecure [ 237.618181][ T7302] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.663939][ T7302] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 237.778016][ T7302] BTRFS info (device loop3): setting nodatasum [ 237.912456][ T7302] BTRFS info (device loop3): force zlib compression, level 3 [ 238.056605][ T7302] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 238.240797][ T7302] BTRFS info (device loop3): use lzo compression, level 0 [ 238.317328][ T7302] BTRFS info (device loop3): turning on flush-on-commit [ 238.364534][ T7302] BTRFS info (device loop3): enabling auto defrag [ 238.371201][ T7302] BTRFS info (device loop3): max_inline at 4096 [ 238.461148][ T7302] BTRFS info (device loop3): using free space tree [ 238.795709][ T7327] : renamed from ipvlan0 [ 239.699288][ T7302] BTRFS info (device loop3): enabling ssd optimizations [ 240.157002][ T5774] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.440923][ T5792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5792) [ 240.711882][ T7356] dummy0: entered promiscuous mode [ 240.736489][ T7356] macvlan2: entered promiscuous mode [ 240.749722][ T7356] dummy0: left promiscuous mode [ 241.149760][ T7358] loop2: detected capacity change from 0 to 32768 [ 241.221825][ T7358] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 241.457492][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 245.071524][ T7402] Process accounting resumed [ 248.894870][ T7428] loop3: detected capacity change from 0 to 64 [ 249.268031][ T7434] netlink: 14 bytes leftover after parsing attributes in process `syz.2.496'. [ 250.419884][ T7449] loop2: detected capacity change from 0 to 512 [ 250.731553][ T7453] loop3: detected capacity change from 0 to 4096 [ 250.833992][ T7449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.600447][ T28] audit: type=1800 audit(1781377491.090:53): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.503" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 251.753582][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.163735][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 252.222981][ T42] bond0: (slave bond_slave_0): interface is now down [ 252.244824][ T42] bond0: (slave bond_slave_1): interface is now down [ 252.436914][ T42] bond0: (slave bond_slave_0): interface is now down [ 252.474898][ T42] bond0: (slave bond_slave_1): interface is now down [ 252.581233][ T42] bond0: now running without any active interface! [ 255.832439][ T7508] loop3: detected capacity change from 0 to 4096 [ 255.970796][ T7508] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.122398][ T28] audit: type=1800 audit(1781377495.254:54): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.520" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 258.226567][ T7531] loop2: detected capacity change from 0 to 512 [ 258.365698][ T7531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.407971][ T7531] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.568936][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.097772][ T5842] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 260.183470][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.190630][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.309037][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 260.325553][ T5842] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 181, changing to 7 [ 260.355501][ T5842] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 260.370517][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.389499][ T5842] usb 3-1: Product: syz [ 260.404959][ T5842] usb 3-1: Manufacturer: syz [ 260.414440][ T5842] usb 3-1: SerialNumber: syz [ 260.678704][ T5842] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 260.710439][ T5842] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 260.739722][ T7553] loop3: detected capacity change from 0 to 32768 [ 260.798317][ T7553] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 260.808044][ T5842] usb 3-1: USB disconnect, device number 8 [ 260.896050][ T7553] (syz.3.536,7553,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 260.942645][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.092961][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 269.688150][ T7609] overlayfs: failed to clone upperpath [ 272.525289][ T7633] overlayfs: failed to clone lowerpath [ 272.544403][ T7628] fuse: Bad value for 'fd' [ 273.851310][ T7644] loop3: detected capacity change from 0 to 8 [ 274.990001][ T7654] loop2: detected capacity change from 0 to 256 [ 275.170288][ T7654] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.181181][ T7654] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 275.237979][ T7654] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xda9016d0, utbl_chksum : 0xe619d30d) [ 275.632368][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 275.652462][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 276.567159][ T6950] wlan1: Trigger new scan to find an IBSS to join [ 276.634994][ T6946] ------------[ cut here ]------------ [ 276.640983][ T6946] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 276.652554][ T6946] WARNING: CPU: 0 PID: 6946 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 276.662666][ T6946] Modules linked in: [ 276.666660][ T6946] CPU: 0 PID: 6946 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 276.674437][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.684585][ T6946] Workqueue: events_unbound cfg80211_wiphy_work [ 276.690962][ T6946] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 276.697286][ T6946] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 40 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 cb d6 52 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 276.717339][ T6946] RSP: 0018:ffffc9000377f380 EFLAGS: 00010246 [ 276.723504][ T6946] RAX: fec2fb0dc9af7700 RBX: 000000000000000c RCX: ffff888029f5bc00 [ 276.731559][ T6946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 276.739582][ T6946] RBP: 0000000000000084 R08: ffffc9000377ef87 R09: 1ffff920006efdf0 [ 276.747663][ T6946] R10: dffffc0000000000 R11: fffff520006efdf1 R12: 0000000000000020 [ 276.755736][ T6946] R13: dffffc0000000000 R14: ffff8880786733b8 R15: ffff8880253812a8 [ 276.763826][ T6946] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 276.772831][ T6946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.779581][ T6946] CR2: 00007ffc6689cfa0 CR3: 0000000061293000 CR4: 00000000003506f0 [ 276.787650][ T6946] Call Trace: [ 276.790982][ T6946] [ 276.793977][ T6946] rate_control_send_low+0x194/0x790 [ 276.799386][ T6946] rate_control_get_rate+0x20b/0x5d0 [ 276.804743][ T6946] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 276.810492][ T6946] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 276.816551][ T6946] ? __lock_acquire+0x1273/0x7d40 [ 276.821684][ T6946] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 276.827847][ T6946] invoke_tx_handlers_late+0xb6/0x1810 [ 276.833387][ T6946] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 276.839308][ T6946] ieee80211_tx+0x2d8/0x460 [ 276.843885][ T6946] ? ieee80211_skb_resize+0x630/0x630 [ 276.849369][ T6946] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 276.854889][ T6946] ? __bpf_trace_tasklet+0x160/0x160 [ 276.860270][ T6946] ? ieee80211_xmit+0x310/0x3f0 [ 276.865189][ T6946] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 276.871273][ T6946] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 276.877152][ T6946] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 276.883617][ T6946] ieee80211_scan_state_send_probe+0x560/0x930 [ 276.889863][ T6946] ieee80211_scan_work+0x4e9/0x1c40 [ 276.895203][ T6946] cfg80211_wiphy_work+0x225/0x260 [ 276.900390][ T6946] ? process_scheduled_works+0x96f/0x15d0 [ 276.906214][ T6946] process_scheduled_works+0xa5d/0x15d0 [ 276.911856][ T6946] ? worker_attach_to_pool+0x380/0x380 [ 276.917427][ T6946] ? assign_work+0x3d2/0x5d0 [ 276.922123][ T6946] worker_thread+0xa55/0xfc0 [ 276.926817][ T6946] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 276.932814][ T6946] kthread+0x2fa/0x390 [ 276.936974][ T6946] ? pr_cont_work+0x560/0x560 [ 276.941714][ T6946] ? kthread_blkcg+0xd0/0xd0 [ 276.946376][ T6946] ret_from_fork+0x48/0x80 [ 276.950898][ T6946] ? kthread_blkcg+0xd0/0xd0 [ 276.955546][ T6946] ret_from_fork_asm+0x11/0x20 [ 276.960427][ T6946] [ 276.963509][ T6946] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.970818][ T6946] CPU: 0 PID: 6946 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 276.978470][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.988578][ T6946] Workqueue: events_unbound cfg80211_wiphy_work [ 276.994865][ T6946] Call Trace: [ 276.998175][ T6946] [ 277.001134][ T6946] dump_stack_lvl+0x18c/0x250 [ 277.005849][ T6946] ? show_regs_print_info+0x20/0x20 [ 277.011083][ T6946] ? load_image+0x420/0x420 [ 277.015624][ T6946] panic+0x2dc/0x730 [ 277.019564][ T6946] ? bpf_jit_dump+0xd0/0xd0 [ 277.024109][ T6946] ? ret_from_fork_asm+0x11/0x20 [ 277.029080][ T6946] __warn+0x2e0/0x470 [ 277.033092][ T6946] ? __rate_control_send_low+0x635/0x880 [ 277.038761][ T6946] ? __rate_control_send_low+0x635/0x880 [ 277.044430][ T6946] report_bug+0x2be/0x4f0 [ 277.048798][ T6946] ? __rate_control_send_low+0x635/0x880 [ 277.054468][ T6946] ? __rate_control_send_low+0x635/0x880 [ 277.060140][ T6946] ? __rate_control_send_low+0x637/0x880 [ 277.065812][ T6946] handle_bug+0xcf/0x120 [ 277.070101][ T6946] exc_invalid_op+0x1a/0x50 [ 277.074632][ T6946] asm_exc_invalid_op+0x1a/0x20 [ 277.079522][ T6946] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 277.085795][ T6946] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 40 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 cb d6 52 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 277.105435][ T6946] RSP: 0018:ffffc9000377f380 EFLAGS: 00010246 [ 277.111536][ T6946] RAX: fec2fb0dc9af7700 RBX: 000000000000000c RCX: ffff888029f5bc00 [ 277.119526][ T6946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 277.127526][ T6946] RBP: 0000000000000084 R08: ffffc9000377ef87 R09: 1ffff920006efdf0 [ 277.135524][ T6946] R10: dffffc0000000000 R11: fffff520006efdf1 R12: 0000000000000020 [ 277.143523][ T6946] R13: dffffc0000000000 R14: ffff8880786733b8 R15: ffff8880253812a8 [ 277.151578][ T6946] rate_control_send_low+0x194/0x790 [ 277.156930][ T6946] rate_control_get_rate+0x20b/0x5d0 [ 277.162262][ T6946] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 277.167948][ T6946] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 277.173965][ T6946] ? __lock_acquire+0x1273/0x7d40 [ 277.179037][ T6946] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 277.185150][ T6946] invoke_tx_handlers_late+0xb6/0x1810 [ 277.190663][ T6946] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 277.196520][ T6946] ieee80211_tx+0x2d8/0x460 [ 277.201057][ T6946] ? ieee80211_skb_resize+0x630/0x630 [ 277.206481][ T6946] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 277.211973][ T6946] ? __bpf_trace_tasklet+0x160/0x160 [ 277.217288][ T6946] ? ieee80211_xmit+0x310/0x3f0 [ 277.222194][ T6946] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 277.228208][ T6946] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 277.234058][ T6946] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 277.240414][ T6946] ieee80211_scan_state_send_probe+0x560/0x930 [ 277.246619][ T6946] ieee80211_scan_work+0x4e9/0x1c40 [ 277.251900][ T6946] cfg80211_wiphy_work+0x225/0x260 [ 277.257045][ T6946] ? process_scheduled_works+0x96f/0x15d0 [ 277.262796][ T6946] process_scheduled_works+0xa5d/0x15d0 [ 277.268396][ T6946] ? worker_attach_to_pool+0x380/0x380 [ 277.273894][ T6946] ? assign_work+0x3d2/0x5d0 [ 277.278536][ T6946] worker_thread+0xa55/0xfc0 [ 277.283166][ T6946] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 277.289114][ T6946] kthread+0x2fa/0x390 [ 277.293210][ T6946] ? pr_cont_work+0x560/0x560 [ 277.297917][ T6946] ? kthread_blkcg+0xd0/0xd0 [ 277.302533][ T6946] ret_from_fork+0x48/0x80 [ 277.306985][ T6946] ? kthread_blkcg+0xd0/0xd0 [ 277.311597][ T6946] ret_from_fork_asm+0x11/0x20 [ 277.316406][ T6946] [ 277.320028][ T6946] Kernel Offset: disabled [ 277.324458][ T6946] Rebooting in 86400 seconds..