last executing test programs: 8m53.822219018s ago: executing program 3 (id=4): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, 0xffffffffffffffff, 0x180}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xffffffff, 0x8, 0x3eb2, 0x5, 0x0, [{0x77, 0x0, 0x8, '\x00', 0xc}, {0x8, 0x0, 0x7, '\x00', 0x9}, {0x7, 0x1, 0xc, '\x00', 0xd4}, {0x95, 0x6, 0x3, '\x00', 0xff}, {0xc4, 0xa, 0x1, '\x00', 0x4}, {0x4f, 0x4, 0x1, '\x00', 0x8}, {0xfb, 0x7, 0x75, '\x00', 0x2}, {0x7, 0x10, 0xfc, '\x00', 0x2}, {0x12, 0x4, 0xf, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0x7}, {0x5, 0x0, 0x8, '\x00', 0x9}, {0x9, 0xd, 0x5, '\x00', 0x6}, {0x4, 0x8, 0x4, '\x00', 0x2}, {0xa, 0x53, 0x5, '\x00', 0x19}, {0x4, 0xfa, 0x1, '\x00', 0x6}, {0x5, 0x0, 0x4, '\x00', 0x9}, {0x3b, 0xc, 0x6, '\x00', 0x7}, {0x4, 0x8d, 0x80, '\x00', 0x7}, {0x3, 0x9, 0x28, '\x00', 0x1}, {0x7c, 0x5, 0x3d, '\x00', 0x5}, {0x0, 0x6, 0xfd, '\x00', 0x9}, {0x8f, 0x8, 0x7, '\x00', 0x9}, {0xa9, 0x10, 0xe, '\x00', 0x4}, {0x46, 0x4, 0x1, '\x00', 0x8}]}}) unshare(0x6a040000) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$USBDEVFS_IOCTL(r3, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0}) 8m52.417907581s ago: executing program 3 (id=6): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$video4linux(0x0, 0x5, 0x1801) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010101}]}, &(0x7f0000000240)=0x10) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) 8m35.824383257s ago: executing program 32 (id=6): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$video4linux(0x0, 0x5, 0x1801) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010101}]}, &(0x7f0000000240)=0x10) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) 8m20.251751411s ago: executing program 2 (id=48): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000700)=""/147, &(0x7f00000007c0)=0x93) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x26000884}, 0x12) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000040)={0xa, {0x8000, 0x2e7, 0x4c6e, 0x2e6}}) 8m18.866123173s ago: executing program 2 (id=49): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000019080), 0x103920) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x40000) ioctl$I2C_PEC(r2, 0x708, 0x4) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x40) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000002640)="6f5a23ca9253adc27c386a1026d21bd821233caf4182af1eef6ccb1ea03f14ae8f4dac0cec6be952ff9ffa8f2a7685a3fc94b9428c92ae5dec204087cd6d5d613c52d6d5fbe0fe0bbc95cdd6c81d66626af764bb006deda64edd24739f960d615824034374cf5d4a0e1c3ea6532215807f05bb209e0c24e02f05055d3654279020921a0e1246e3905b3f5c071f28185ba3565abc014fa6561925d5744c00d1", 0x9f}, {0x0}, {&(0x7f0000001840)="1e93a28a2a0b1a744b0762788717137aeb4d6da91c67cbe5e94269e858dc183d3097e97cba7849e6fa04d9d95ac1", 0x2e}, {&(0x7f0000001900)="ad6c5e85d1ff9812693ebd505c3d62b20f1f11a60833e69401d3080f75c5a6495e3f9cc544aae187d1a9", 0x2a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002bc0)="3562dbe57ffe110e218257b0f968530d0d52e222662e25d69ef919d31f7914573dc33990d01f64a3e2f80bf15a7d99c4ac36d1d7be0c8ac2e6a678f8a1e353177cb942b02c99677cfd389a24f68b7e57c12a09eeb3ac3bb8d3c27b80c2f10cf4756df527a69e95990af486bd74e076592e82cb984eee1f6f0cce2c4f01", 0x7d}, {&(0x7f0000000280)="8c626566cbbf97c24210aa2d2ddf7cd08e103df6b18e41173a401fe322e32b4a3b7824103033dca4640586ee78c81fc51121084256727408814828c48d5ae76502176704d38f48bede4d5cbd4d21d4a48d0ac0698140b8b880bcbebbc1149abde3b0bd", 0x63}], 0x2}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002d40)="4b5f0c572a972b67d868a8b826c237a1ebe0024e78220571378ecda54d4fe9287340005f374b992da13843ce9e0e45639d0181aedb7fad51f183e2c91bdc2a66763894e8675134a9c59d8e385b7f271d50b440edda57b921b11edc256e2cdafb52b64cd4246196ade6e64aba6b03d32e6fd02ad37bd7163a05c77f277173fd937a706efbf470928e26e826e6b6bfd1bb4d1ca06914974e074789c964baf3cbd9d6cad77934b251c0d19ecdbd656d11a18a5d91db913f3eaaf9b1186ac997592c3b583ac33df13f9fac119c98155594a58ec54048719fff3d7f5715e22eda87cb", 0xe0}, {&(0x7f0000002e80)="39b410b8a8386ec66d33c2472e7a64a32f5dd709e713d8d86009011bfad4df627705a55b545a4c65addc2bba1ef017e198f4bb499a16e3a276e682ace12f2526287161b898859ace70c25734902996659508ac4855350da032d127dea3075cd4", 0x60}, {&(0x7f0000002f00)="411efa271d61be30533280ca9b9f925ca0c815af4f3cf2c0b0e38a15137cc71903e2d98d0d088904f2e0607432cc84b5a12849d68049d96509c983874ef8fe4180ca4ea81cc36d13300c2e8fbad38534d9a9fd0111e367a69699d01c2f206fbd47e193dbfd3cae91e9fa6005b42bcd92969d4eb3f49eaaa4796d1b6fea8fe0c4316cb9faf0cfc072db20be383b8a0b7bb3a318f77b0c6229ab597b89a7fb55cc808581962aaad1cf", 0xa8}, {&(0x7f0000002fc0)="ae7f2b05827f11", 0x7}], 0x4}}, {{0x0, 0x0, &(0x7f0000007700)=[{&(0x7f0000007540)="60c138", 0x3}, {&(0x7f0000007640)="dcc31f", 0x3}], 0x2}}, {{0x0, 0x0, &(0x7f0000008040)}}], 0x5, 0x8080) 8m18.456193485s ago: executing program 0 (id=52): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) personality(0x619641b6fb4b8591) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4880) ptrace(0x10, r3) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$eJzs3Au4TtXWOPAx5pxLm8Sb5D7HHIs3uUySJJeERJIkSZJbQpIkSUhscktCEnJPcg/JLST3+y33JDmSJAkJSeb/0anPOadzTuf8zzmf7zl7/J5nPXuOvd4x3rH22Hu/a6397Pfr9gMr161SsTYzw78E//ghFQBSAKAPAGQGgAgASmQpkQVwCKTXmPqvPYn493pgyuXuQFxOMv+0Teaftsn80zaZf9om80/bZP5pm8w/bZP5C5GWbZma82rZ0u72z9z/z/D3dv7u/X+Q+///58jr/3+RQ0VGfb6uyLUd/okUmX/aJvNP22T+aZvMP22T+adtMv//chFAhb+zW+aftsn8hUjLLvf9Z9ku73a5v/+EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQNZ8MlBgB+XV/uvoQQQgghhBBCCPHvE6740yjd5WtECCGEEEIIIYQQ/0EICjQYiCAdXAEpkB4ywJWQEa6CTJAZEnA1ZIFrICtcC9kgO+SAnJALckMesEDggCGGvJAPknAd5IfroQAUhEJQGDwUgaJwAxSDG6E43AQl4GYoCbdAKSgNZaAs3Arl4DYoDxWgItwOleAOqAxV4E6oCndBNbgbqsM9UAPuhZpwH9SC+6E2PAB14EGoCw9BPXgY6kMDaAiNoPH/V/7z0BlegC7QFVKhG3SHF6EH9IRe0Bv6wEvQF16GfvAK9IcBMBBehUHwGgyG12EIDIVh8AYMhxEwEkbBaBgDY+FNGAdvwXh4GybARJgEk2EKTIVp8A5MhxkwE96FWfAezIY5MBfmwXx4HxbAQlgEH8Bi+BCWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAR7AVtsF22AE7YRfsho9hD3wCe+FT2Aef/WV+5r+ff+Yv8jsgIKBChQYNpsN0mIIpmAEzYEbMiJkwEyYwgVkwC2bFrJgNs2EOzIG5MBfmwTxISMjImBfzYhKTmB/zYwEsgIWwEHr0WBSLYjG8EYtjcSyBJbAklsRSWBpLY1ksi+WwHJbH8lgRK2IlrISVsTLeiXfiXVgNq2F1rI41sAbWxJpYC2thbayNdbAO1sW6WA/rYX2sjw2xITbGxtgEm2BTbIrNsTm2wBbYEltiK2yFrbE1tkHEttgW22E7bI/tsQN2xI74PD6PL+AL2BUrqW7YHbtjD+yBvbA39saXsC++jC/jK9gfB+BAfBVfxddwMJ7GITgUh+EwLKdG4EgchazG4Fgci+NwHI7H8TgBJ+JEnIxTcCpOw2k4HWfgDHwXZ+F7+B7OwTk4D+fjfFyAC3ERLsLFeAaX4FJchstxBa7EFbga1+BqXIfrcR1uxI24GTfjR/gRbsNtuAN34C7chR/jx/gJfoL9cR/uw/24Hw/gATyIB/EQHsLDeBiP4BE8ikfxGB7D43gCT+IJPIWn8DSewbN4Fs/hOTyPz+b6ss6ugmv7g7rIKKPSqXQqRaWoDCqDyqgyqkwqk0qohMqisqisKqvKprKpHCqHyqVyqTwqjyJFilWs8qq8KqmSKr/KrwqoAqqQKqS88qqoKqqKqWKquCquSqibVUl1iyqlSqtmvqwqq8qp5r68qqAqqoqqkrpDVVZVVBVVVVVV1VQ1VV1VVzVUDVVT3adqqW7YCx9QFydTVw3Aemog1lcNVEPVSL2Gj6gmajA2Vc1Uc/WYGopDsKVq4lupJ1VrNRLbqKfVKHxGtVNjsL16TnVQHVUn9bzqrJr6Lr/e7lSTsYfqqXqp3mo63qEuTqyyekX1VwPUQPWqmoevqcHqdTVEDVXD1BtquBqhRqpRarQao8aqN9U49ZYar95WE9RENUlNVlPUVDVNvaOmqxlqpnpXzVLvqdlqjpqr5qn56n21QC1Ui9QHarH6UC1RS9UytVytUCvVKrVarVFr1Tq1Xm1QG9UmtVltUR+prWqb2q52qJ1ql9qtPlZ71Cdqr/pU7VOfqf3qD+qA+lwdVF+oQ+pLdVh9pY6or9VR9Y06pr5Vx9UJdVJ9p06p7xOn1Rl1Vv2gzqkf1Xn1k7qgggKNWmmtjY50On2FTtHpdQZ9pQZ9lc6kM+uEvlpn0dforPpanU1n1zl0Tp1L59Z5tNWknWYd67w6n07q63R+fb0uoAvqQrqw9rqILqpv0MX0jbq4vkmX0DfrkvoWXUqX1mV0WX2rLqdv0+V1BV1R364r6Tt0ZV1F36mr6rt0NX23rq7v0TX0vbqmvk/X0vfr2voBXUc/qOvqh3Q9/bCurxvohrqRbqwf0U30o7qpbqab68d0C/24bqmf0K30k7q1fkq30U/rtvoZ3U4/q9vr53QH3VF30j/pCzroLrqrTtXddHf9ou6he+peurfuo1/SffXLup9+RffXA/RA/aoepF/Tg/XreogeqofpN/RwPUKP1KP0aD1Gj9Vv6nH6LT1ev60n6Il6kp6sp+iputcvlWb+A/lv/ZX8fj8/+2a9RX+kt+pterveoXfqXXq33q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4PqF/0N/pU/p7fVqf0Wf0D/qcPqfP//I1AINGGW2MiUw6c4VJMelNBnOlyWiuMplMZpMwV5ss5hqT1VxrspnsJofJaXKZ3CaPsYaMM2xik9fkM0lznclvrjcFTEFTyBQ23hQxRc0N/3L+7/XX2DQ2TUwT09Q0Nc1Nc9PCtDAtTUvTyrQyrU1r08a0MW1NW9POtDPtTXvTwXQwnUwn09l0Nl1MF5NqUk1386LpYXqaXqa36WNeMn1NX9PP9DP9TX8z0Aw0g8wgM9gMNkPMEDPMDDPDzXAz0ow0o81oM9aMNePMODPejDcTzAQzyUwyU8wUM81MM9PNdDPTzDSzzCwz28w2c81cM9/MNwvMArPILDKLzWKzxCw1S81ys9ysNCvNarParDVrzXqz3mw0G80Ss8VsMVvNVrPdbDc7zU6z2+w2e8wes9fsNfvMPrPf7DcHzAFz0Bw0h8whc9gcNkfMEXPUHDXHzDFz3Bw3J81Jc8qcMqfNaXPWnDXnzDlz3pw3F8yFi6d9kYpUZCITpYvSRSlRSpQhyhBljDJGmaJMUSJKRFmiLFHW6NooW5Q9yhHljHJFuaNUsBFFLuIojvJG+aJkdF2UP7o+KhAVjApFhSMfFYmKRjdExaIbo+LRTVGJ6OaoZHRLVCoqHZWJyka3RuWi26LyUYWoYnR7VCm6I6ocVYnujKpGd0XVoruj6tE9UY3o3qhmdF9UK7o/qh09ENWJHozqRg9F9aKHo/pRg6hh1Chq/G+tH8Lp7I/6LrarTbXdbHf7ou1he9petrftY1+yfe3Ltp99xfa3A+xA+6odZF+zg+3rdogdaofZN+xwO8KOtKPsaDvGjrVv2nH2LTvevm0n2Il2kp1sp9ipdpp9x063M+xM+66dZd+zs+0cO9fOs/Pt+3aBXWgX2Q/sYvuhXWKX2mV2uV1hV9pVdrVdY9fadXa93WA32k12s91iP7Jb7Ta73e6wO+0uu9t+bPfYT+xe+6ndZz+z++0f7AH7uT1ov7CH7Jf2sP3KHrFf26P2G3vMfmuP2xP2pP3OnrLf29P2jD1rf7Dn7I/2vP3JXrDh4sn9xZd3MmQoHaWjFEqhDJSBMlJGykSZKEEJykJZKCtlpWyUjXJQDspFuSgP5aGLmJjyUl5KUpLyU34qQAWoEBUiT56KUlEqRsWoOBWnElSCSlJJKkWlqAyVoVvpVrqNbqMKVIFup9vpDrqDqlAVqkpVqRpVo+pUnWpQDapJNakW1aLaVJvqUB2qS3WpHtWj+lSfGlJDakyNqQk1oabUlJpTc2pBLagltaRW1IpaU2tqQ22oLbWldtSO2lN76kAdqBN1os7UmbpQF0qlVOpO3akH9aBe1Iv6UB/qS32pH/Wj/tSfBtJAGkSDaDANpiE0lIbRGzScRtBIGkWjaQyNpbE0jsbReBpPE2gCTaJJNIWm0DSaRtNpOs2kmTSLZtFsmk1zaS7Np/m0gBbQIlpEi2kxLaEltIyW0QpaQatoFa2hNbSO1tEG2kCbaBNtoS20lbbSdtpOO2kn7abdtIf20F7aS/toH+2n/XSADtBBOkiH6BAdpsN0hI7QUTpKx+gYHafjdJJO0ik6RafpNJ2ls3SOfqTz9BNdoEApTkEGd6XL6K5ymVxml+LSu4txBAAX4xwup8vlcrs8zrpsLvufxeScK+AKukKusPOuiCvqbvhNXMqVdmVcWXerK+duc+V/E1d1d7lq7m5X3d3jqrg7/yyu4e51Nd1DrpZ72NV2DVwd18jVjR5y9dzDrr5r4Bq6Rq6Fe9y1dE+4Vu5J19o99Zt4gVvo1ri1bp1b7/a4T9xZ94M74r5259yProvr6vq4l1xf97Lr515x/d2A38TD3BtuuBvhRrpRbrQb85t4kpvspripbpp7x013M34Tz3fvu1lukZvt5ri5bt7P8cWeFrkP3GL3oVvilrplbrlb4Va6VW71//S63G10m9xmt9t97La6bW672+F2ul0/xxePY6/71O1zn7nD7it3wH3uDrqj7pD78uf44vEddd+4Y+5bd9ydcCfdd+6U+96ddmd+Pv6Lx/6d+8ldcMEBIyvWbDjidHwFp3B6zsBXcka+ijNxZk7w1ZyFr+GsfC1n4+ycg3NyLs7NedgysWPmmPNyPk7ydZyfr+cCXJALcWH2XISL8g1cjG/k4nwTl+CbuSTfwqW4NJfhsnwrl+PbuDxX4Ip8O1cKgStzFb6Tq/JdXI3v5up8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI8f5vrcgBtyI27Mj3ATfpSbcjNuzo9xC36cW/IT3Iqf5Nb8FLfhp7ktP8Pt+Fluz89xB+7Infh57swvcBfuyqncjbvzi9yDe3Iv7s19+CXuyy9zP36F+/MAHsiv8iB+jQfz6zyEh/IwfoOH8wgeyaN4NI/hsfwmj+O3eDy/zRN4Ik/iyTyFp/I0foen8wyeye/yLH6PZ/McnsvzeD6/zwt4IS/iD3gxf8hLeCkv4+W8glfyKl7Na3gtr+P1vIE38ibezFv4I97K23g77+CdvIt388e8hz/hvfwp7+PPeD//gQ/w53yQv+BD/CUf5q/4CH/NR/kbPsbf8nE+wSf5Oz7F3/NpPsNn+Qc+xz/yef6JL3BgiDFWsY5NHMXp4ivilDh9nCG+Ms4YXxVnijPHifjqOEt8TZw1vjbOFmePc8Q541xx7jhPbGOKXcxxHOeN88XJ+Lo4f3x9XCAuGBeKC8c+LhIXjW+Ii8U3xsXjm+IS8c1xyfiWGFJLxw/dUza+NS4X3xaXjyvEFePb40rxHXHluEp8Z1w1viuuFt8dV4/viYvH98Y14/viWvH9ce34gbhO/GBcN34orhc/HNePG8QN40Zx4/iRuEn8aNw0bhY3jx+LW8SPxy3jJ+JW8ZNx6/ip392fGneLu8cvxi/GIdytfrlOTC5ILkwuSn6QXJz8MLkkuTS5LLk8uSK5MrkquTq5Jrk2uS65PrkhuTG5Kbk5GUKVK8CjV1574yOfzl/hU3x6n8Ff6TP6q3wmn9kn/NU+i7/GZ/XX+mw+u8/hc/pcPrfP460n7zz72Of1+XzSX+fz++t9AV/QF/KFvfdFfFHfyDf2jX0T/6hv6pv55v4x/5h/3D/un/BP+Cd9a/+Ub+Of9m39M76df9Y/65/zHXxH38k/7zv7F3wX39Wn+lTf3Xf3PXwP38v38n18H9/X9/X9fD/f3/f3A/1AP8gP8oP9YD/ED/HD/DA/3A/3I/1IP9qP9mP9WD/Oj/Pj/Xg/wU/wk/wkP8VP8dP8ND/dT/cz/Uw/q8AsP9vP9nP9XD/fz/cL/AK/yC/yi/1iv8Qv8cv8Mr/Cr/Cr/Cq/xq/x6/w6v8Fv8Jv8Jr/Fb/Fb/Va/3W/3O/1Ov9vv9nv8Hr/X7/X7/D6/3+/3B/wBf9B/4Q/5L/1h/5U/4r/2R/03/pj/1h/3J/xJ/50/5b/3p/0Zf9b/4M/5H/15/5O/4IMfm3gzMS7xVmJ84u3EhMTExKTE5MSUxNTEtMQ7iemJGYmZiXcTsxLvJWYn5iTmJuYl5ifeTyxILEwsSnyQWJz4MLEksTSxLLE8sSKxMhFC7q1xyBvyhWS4LuQP14cCoWAoFAoHH4qEouGGUCzcGIqHm0KJcHMoGW4JpULpUCY8HOqHBqFhaBQah0dCk/BoaBqahebhsdAiPB5ahidCq/BkaB2eCm3C06FteCa0C8+G9uG50CF0DJ3C86FzeCF0CV1DaugWuocXQ4/QM/QKvUOf8FLoG14O/cIroX8YEAaGV8Og8FoYHF4PQ8LQMCy8EYaHEWFkGBVGhzFhbHgzjAtvhfHh7TAhTAyTwuQwJUwN08I7YXqYEWaGd8Os8F6YHeaEuWFemB/eDwvCwrAofBAWhw/DkrA0LAvLw4qwMqwKq8OasDasC+vDhrAxbAqbw5bwUdgatoXtYUfYGXaF3eHjsCd8EvaGT8O+8FnYH/4QDoTPw8HwRTgUvgyHw1fhSPg6HA3fhGPh23A8nAgnw3fhVPg+nA5nwtnwQzgXfgznw0/hgvzPmhBCCCHEP0T/zv5uf+Vz6QDg10ui7gBw1bach/6y5oZsf1z3VLlaJADgya7tH/h1q1QpNTX1l8cu0RDlmwMAiT+v/2u8FJrD49AKmkGxv9pfT9XxHP9O/eTNABn+JCcFLsWX6t/4N+o/8tiwBSXjs1n+Tv05AAXyXcpJD5fiS/WL/4362Zv8Tv/pPx8L0PRPcjLCpfhS/aLwKDwFrf7skUIIIYQQQgghxB/1VGXa/u3rT/0/1+e5zKWcK+BS/HvX50IIIYQQQgghhLj8nunY6YlHWrVq1vYfW+Avf5f+57JkIYv/nkX6X350/q/08x9aXM7fSkIIIYQQQoj/hEsn/Ze7EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIu3633g7sct9jEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIcTl9v8CAAD//5aUMno=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 8m18.361864468s ago: executing program 2 (id=53): mount$bind(0x0, 0x0, 0x0, 0x2901090, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6012203010902"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x501c4814, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2, 0x2}) r5 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x2, 0x0, 0x0) 8m15.218739033s ago: executing program 0 (id=56): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000b, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@dioread_nolock}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x528, &(0x7f0000000980)="$eJzs3c9vI1cdAPDveNeJdzfdpKUHQNCGtrCg1TqJt42qHqAcEaqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU40SN/AAdOPXHgxoUfNy7lgMSPCNQgOLia8SR1svbGahI7jT8faTTvzYz9fc/2vJd5jucFMLZmf/PHdjsiJiLirYiYzrcn+ZJ5PWI2Ij7af7R8sP9oOYl2+81/Jtn+dFt0PSZ1KyL2IqIUEd9/P+JHyeNxmzu760u1WnUrz8+16ptzzZ3de2v1pdXqanWjUllcWJx/9f4rlXOr6/P1iTz15Q9/v/eNn6TFmsq3dNfjPHWqXjyKk7oeEd+9iGAjcC2vz8SoC8KnUoiIZyLihez8n45r2bsJAFxl7fZ0tKe78wDAVVfIxsCSQjkfC5iKQqFc7ozhPRs3C7VGs3X3YWN7Y6UzVjYTxcLDtVp1Ph8rnIlikuYXsvQn+cqJ/P2IeDoifjZ5I8uXlxu1lVH+4QMAY+zWif7/P5Od/h8AuOJKoy4AADB0ffr/vWGXAwAYHtf/ADB+9P8AMH5K2T0cboy6GADAELn+B4Dxo/8HgLHyvTfeSJf2QX7/65W3d7bXG2/fW6k218v17eXycmNrs7zaaKxm9+ypn/Z8tUZjc+Hl2H5n5pubzdZcc2f3Qb2xvdF6kN3X+0G1mB3llwUAMEpPP//Bn5O0R37tRrZE11wOxZGWDLhohVEXABiZa33SwNVnti8YX2e4xjc8AFdEjyl6jylFjx8ItdvZ3MHAZ9OdLxj/h3HVNf7vv4BhzBjzh/Fl/B/GV7udDDrnfwx6IABwuRnjB/p8//9Mvv5V/uXAD1dOHvHeRZYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrfD+X/L+VzgU1EolMsRT0XETBSTh2u16nxE3I6IP00WJ9P8wojLDACcVeFvST7/153pl6aO7Xru1lFyIiJ+/Is3f/7OUqu19YeIieRfk4fbW+/l2yvDLz0AcLrDfjpbd13If7T/aPlwGWZ5/v7tiCh14h/sT8TBUfzrcT1bl6IYETf/neT5jqRr7OIs9t6NiM/3qn8SU9kYSGfm05Px09hPDTV+4Vj8Qravs05fi89lW/+Xz+p8DgWDMfBB2v683uv8K8Rstu59/peyFurs8vYvfarlg6wN/CT+Yft3rU/7NztojJd/+51O6sbj+96N+OL1iMPYB13tz2H8pE/8lwaM/5cvPfdCv33tX0bcid7xu2PNteqbc82d3Xtr9aXV6mp1o1JZXFicf/X+K5W5bIx6rn9v8I/X7t7uty+t/80+8Uun1P+rA9b//f+/9YOvPCH+11/sFb8Qzz4hftonfm3A+Es3f13qty+Nv9Kn/qe9/3cHjP/hX3cfmzYcABid5s7u+lKtVt16UuL2QcRpx3wmEzHYwb/LX6xLUeaxTqTvwiUoRs/Et7q23IoLjDXR52T86Yudj+lkRPcHu93+VLH6tRjnMeoGXAZHJ31E/HeQByQXXyYAAAAAAAAAAAAAAOC4Yfw6atR1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6OAAA//+KltQs") bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x9, 0xfffffffffffffff2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) fcntl$setpipe(r3, 0x407, 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 8m14.928049893s ago: executing program 2 (id=58): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 8m11.329100472s ago: executing program 2 (id=61): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000030400030000000000", @ANYRES32=0x0], 0x34}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB="02c92012000e"], 0x17) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) write(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161182) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x4084) 8m11.274100314s ago: executing program 0 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x5) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ff", 0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000}) readv(r3, &(0x7f0000000080), 0x22d8d0f73c10cac0) close_range(r3, r3, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x84383, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 8m9.347981752s ago: executing program 0 (id=64): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="400001", @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 8m8.756978001s ago: executing program 2 (id=66): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 8m7.663805054s ago: executing program 0 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x88, &(0x7f0000000000)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 8m6.243820057s ago: executing program 0 (id=69): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m53.042423079s ago: executing program 33 (id=66): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 7m50.551942325s ago: executing program 34 (id=69): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m51.669234014s ago: executing program 6 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x88, &(0x7f0000000000)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 4m49.993452445s ago: executing program 6 (id=350): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$kcm(0x23, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002900)=r6, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000740)=[{&(0x7f0000000140)="a2", 0x5e6af45f}], 0x1}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0x6}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000680)={{r7, &(0x7f0000000280)='\x00', 0x4002, 0x0, 0x400, &(0x7f0000000540), &(0x7f0000000580)=0x84}, {[0x800, 0x7, 0x5, 0x6]}, 0xdfeb, 0x0, 0x0}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4m46.681095696s ago: executing program 6 (id=356): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000180)=0x800) io_uring_enter(r2, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x8001, 0x1ff], 0x1}}, @common=@icmp={{0x28}, {0xb, "b22f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'dvmrp0\x00', {}, {}, 0x24, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x40800, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, r5, 0x0, 0x7ffff088) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 4m45.305080978s ago: executing program 6 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r5, 0x1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) sendmmsg$alg(r4, &(0x7f0000000340), 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r4) 4m43.672717668s ago: executing program 6 (id=360): mkdir(&(0x7f0000000000)='./file0\x00', 0x111) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x18b140) close_range(r1, 0xffffffffffffffff, 0x0) 4m40.480965685s ago: executing program 6 (id=363): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2040000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 4m25.172476611s ago: executing program 35 (id=363): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2040000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 18.306852758s ago: executing program 1 (id=782): syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) close(0x3) close(0x4) 17.391456826s ago: executing program 1 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x3, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20000000030301010000e10000000000000000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40140921, 0x200000000005) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, &(0x7f0000000600), &(0x7f0000000640)='%-010d \x00'}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) 12.901689054s ago: executing program 1 (id=798): syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) close(0x3) close(0x4) 12.529596405s ago: executing program 1 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x5a1800, 0xfb8e3ef5619d1250) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x200000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a7", 0x4e, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) linkat(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x1800) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x2010001, &(0x7f0000000180)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb1\xe0\xaf\xff\x01T_zf\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fD[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4\xae\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89N\x8e=\x12\xc2\"\xf8&C\x93\xd4\x99\xf0') syz_open_dev$tty1(0xc, 0x4, 0x2) 12.417886979s ago: executing program 4 (id=804): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2a00001, &(0x7f0000000140)=ANY=[@ANYBLOB="10e31ae92cd369ccb14419025e32a93f3f0221ad17cb8e7276b38f1bff5550ead98d8d3e00d73a2ec5d0b64fb4634618cbc6b75af5203017413b923f3456ea8c47aba9e8e625892c695e4746fb02b3c3b4aa00000000000000"], 0x1, 0x198, &(0x7f0000000240)="$eJzsmD9P8lAUxp97y1ve942DkzEumkgimljaosbFgcHdRNG4SaQStICBDkJ0YPIruDj4CZzcHfwIfgB0csHNuabtbbkl/otBQuL5DafP6Tm9nJ7haQIIgvi1PD68dDrO9TMHMIYUkuL+k9Lr8WphYeKuWkyer0+q92cLl/mLXP95TAVc9+u/nwBwm1PgiNx140+nxHULPNJ5cMwLvQMGTeg9cGwLbYFhV+hDSde8fk07KNuWtl+zi57QvWB4wfRCtn++bpuhLc3HpHqj2Toq2LZV/0Hx2f66OY41aT4u1cPd6NL+DHAYQmfBsCn0KpLhboKVSO8/leidr7zz/jw+N4awmoGLm289dYqRGJ7EcARjIzHGaIueP7lXDHOSPyUk/8g4leNMo9laLFcKJatkVU0zu6Iv6fqymfGNKIgf+N8/35/+S+f/iapKrFdlKk4KjlM3ghjlZhDfclzV9z+O9GyQM3FPxv8ejLMZ75JWok8oQRAEQRAEQRAEQRAEQRDEgJkG8/8FDfkbyyLMDb/7NQAA//+JsXK1") mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) close(r4) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0xfffd, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000000440)="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", 0xfe, 0x300000f0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={r6, 0x4}, &(0x7f0000000100)=0x8) 10.39760188s ago: executing program 8 (id=808): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) chdir(0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) 9.135304139s ago: executing program 8 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 9.047478692s ago: executing program 5 (id=810): syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) close(0x3) close(0x4) 8.628964655s ago: executing program 7 (id=811): close(0x3) 7.861900808s ago: executing program 4 (id=812): syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) close(0x3) close(0x4) 7.647999005s ago: executing program 8 (id=813): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x3}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.520888989s ago: executing program 7 (id=814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x1, 0x0, 0xf, 0x11, 0x7, 0x4, 0xa, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0xa, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x34ae, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 7.48224504s ago: executing program 5 (id=815): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) close(0x3) close(0x4) 6.685906404s ago: executing program 4 (id=816): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) close(0x3) close(0x4) 6.526162359s ago: executing program 5 (id=817): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) r5 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) r6 = socket$inet(0x2, 0x6, 0xfffffffa) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) 6.334683565s ago: executing program 4 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x294}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x40004) 6.331878395s ago: executing program 7 (id=828): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) close(0x3) close(0x4) 5.366696545s ago: executing program 5 (id=819): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000197, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000700)={'icmp\x00'}, &(0x7f00000006c0)=0x1e) syslog(0x3, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) socket(0x10, 0x3, 0x0) splice(r5, &(0x7f00000001c0)=0x6, r0, &(0x7f0000000280)=0x2, 0x8b5, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) 5.252028638s ago: executing program 4 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x88, &(0x7f0000000000)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 4.336717887s ago: executing program 7 (id=821): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) chdir(0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) 4.336525307s ago: executing program 8 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) setpriority(0x7, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket(0x2b, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002020100000083ff020000"], 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 4.085963004s ago: executing program 1 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 4.076273164s ago: executing program 5 (id=824): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) close(0x3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) 3.118521644s ago: executing program 8 (id=825): syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) close(0x3) close(0x4) 447.593086ms ago: executing program 1 (id=826): syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) close(0x3) close(0x4) 445.563136ms ago: executing program 7 (id=827): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae0daa78d0181881892ba551ec8b8ef88da74f34ffbd4102159902ccbef54d129bd5999b98dec92266314ad3f763b613b8621f66ebabc2ffb6c05385635a9dc9ee80796f808f410fb1f5f0590fa725283473ff9319a5ab1436a2c86e36ebf66582f99bb342fe7e76edfa03163f03d65f612730622483555b9920dfbb6747a9228a153b948f355675a03d1ac4fc1f67b059c48461563b1eac9ce045a4e14e31a8e49dac8992415d6a8cbe41b33576c05fcdf00d70f0fe7d7439847313150f66c357e046a1300ce176ff676f77163ca91cfd643c37990cdb52d7ed5b12b2ad75cdd2a7bffa3530ae8"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) close(0x3) close(0x4) 331.204299ms ago: executing program 5 (id=829): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQhiooTWxhEA1BjcmhkTX6tLEv8CdG6OuTExc6d6QEGUDGhdj7p17ZWbaoUNtZwrzPMnQc+acO+ecnnvuPfecDgH0rOHsnyRia0T8EhE7atHGDMO1H9eunJ3688rZqSSq1Vd/T/J8V6+cnSqzlsdtKSIjaUT6QVIU0mhu4cyJyUpl5nQRH5s/+fbY3MKZJ46fnDw2c2zm1MShQwcPjD/91MSTa9LOrF1X95yb3bv7xdcvvjR15OJb33+V1XdrkV7fjlUZXPrWcNbwP6q55rSH4///qbiNZltdOOnvYkW4KX0RkXXXQDb+q9Xq+bq0HfHC+yscvmWdqweso+zetGmZ94v74mK1peSGqcCtIIlu1wDojvJ+nz3/lq8OTj+67vKztQegrN3XilctpT/SIs9A0/PtWhqOiCOLf32WveLG6xB961QFAKDHfDT16eF4fLn5Xxr31OXbXuyhDEXEHRFxZ0TcFRE7I+LuiDzvvRGxq51C6zYImreGls5/0kurb93KsvnfM8XeVuP8r5z9xVBfEduWt38gOXq8MrO/+J2MxMCmLD5+gzK+ef6nj1ul1c//sldWfjkXLOpxqb9pgW56cn4yn5SugcvvRezpj7+r1WpT+5MoeymJiN0RsefmPnp7GTj+6Jd7W2Vauf1LPu66Ndhnqn4R8Uit/xejqf2lZOn+5OC26/uTY/+Lysz+sfKsWOqHHy+80qr89tu/PrL+39x4/hcpny8UgaE36/dr56LFzuXWlmVc+PXDls+Uqz3/B5PX8utRue367uT8/OnxiMHkcB5veH/i+rFlvMyftX9kX5ZStr88Ms2vcVH0/30Rsbd4CLs/Ih4o6v5gRDwUEftatj7iu+dap22E/p+u6/8kms//XedqP8v+X7jpQN+Jb79uVX57/X8wD40U7+TXvxW0W8HV/+YAAADg1pHmKzdJOvpvOE1HR2t/2LszNqeV2bn5x47OvnNqurbCMxQDabnStaNuPXQ8WSw+sRafKNaKy/QDxbrxJ32Rx0enZivTXW479LotLcZ/5jd/cQK3v+X20SaW+UIbcPtpHv9pY/T8y52sDNBRvq8NvWuF8Z92qh5A57n/Q+9abvyfb4rbC4Dbk/s/9C7jH3qX8Q+9q2n898XP3aoJ0EGr+Dq/gMDcwplIN0Q12gq0//9BrHfgjY1RjTYC3b4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArI1/AgAA//8f8uwu") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x22020600) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x204}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000008}, 0x44080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(r4, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/125, 0x7d, 0x1, 0x0}, &(0x7f0000000480)=0x40) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x225000, &(0x7f0000001000)=ANY=[@ANYBLOB="6c617374626c6f67ac9f9bea2c94743030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa000033bd97bb000000003b3c6cbb36a8edf44a84b545c800a7934aabb10cb81cb0b504f9add39b31"], 0x6, 0xc38, &(0x7f0000001140)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mIhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBfDIYzOxbcUmRtiyKEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8fPHkqfSwWwEAPEiXR79+8rT7PwA8Vq74/38AAAAAAAAAAAAAANjvUhTxZKSYu7yWxqv3HfVL7b6bt8aGhrevdihVNQ9U5cuf+qnTZ85+5YXBc9281J75kPr32+fj1dErFxsfnI+Yn1pYmJpsjM20J2Ynp+56D1X9l2ZvzN1j/a2OVyegceO1m5PXri00Tj9/ZtPHtwbe63/i6MCFwWdPPNMtOzY0PDy6UaTeW752zw3p2GmGx8Eo4kSkeO4HP0+tiChi9+ei/mDHfqtDVSeOV50YGxquOjLdbs0slh+OdE9EEdHoqdTsnqPtxyJqfQ+0DztrRiyVzS8bfLzs3uhca751dXqqMdKaX2wvtmdnRlKntWV/GlHEuRSxHBGr/Xfuri+KqEWK7x1ZS1cj4kD3PHy5mhi8czuKPezjXSjb2eiLWC4egTHbx/qjiFcixS/ePhYT+TpTXWu+FPFKmT+KeLPMFyNS+cU4G/HuNt8jHk21KOIvy/G/sJYmq+tB97py6RuNr81cm+0p272ufMz7wx1Xiod0fzi0JR+MfX5tqkcRreqKv5bu/Tc7AAAAAAAAAAAAAAAAANxvh6KIz0WKl//jT6p5xVHNSz9yYfAPB361d8740x+xn7Ls8xGxVNzdnNyDeWLgSBpJ6SHPJX6c1aOIP83z/77zsBsDAAAAAAAAAAAAAAAAAADwWCviZ5Hi/DvH0nL0rinenrneuNK6Ot1ZFba79m93zfT19fX1RupkM+d4zqWcyzlXcq7mjCLXz9nMOZ5zKedyzpWcqznjQK6fs5lzPOdSzuWcKzlXc0Yt18/ZzDmecynncs6VnKs5Y5+s3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ElSRBEfRIrvfmstRYqIZsR4dHKl/2G3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo9acifhgpGn/UvL2tFhGp+rfjWPnL2WgeLPPT0Rws88VoXszZqrLW/M5DaD+705eK+Gmk6K+/dXvA8/j3dd7d/hrEm9/eePf5WicPdD8ceK//iaNHLgwO/8bTO71O2zXg+KX2zM1bjbGh4eHRns21fPRP92wbyMct7k/XiYiF1994rTU9PTV/7y/Kr8Auqj9CL1LtcempF9WLqO2LZjycvvMYKO//70aK333nP7s3/M79vx6/0nl3+w4f7//Zxv3//NYd3eX9v7a1Xr7/l/f07e7/T/ZsO59/N9JXi6gv3pjrOxpRX3j9jRPtG63rU9enZs6ePPnVwcGvnjnZdzCifq09PdXz6r6cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9dO11IiIW9V8rYELg8+eeOZAHKjmW22at/3q6JWLjZdmb8zNTy0sTE02xmbaE7OTU3d7uHo13WtsaHhPOvORDu1x+w/VX5qde32+ff2PF7f9/HD94tWFxfnWxPYfx6EoIpq9W45XDR4bGq4aPd1uzVRVR7adTP/x9aUi/itSTJxtpC/mbXn+/9YZ/pvm/y9t2svBPZv//6mebeUxUyri/UjxO3/1dHyxaufhuOOc5XJ/FymOn/tCLhcHy3LdNnSeK9CZGViW/b9I8U8fbC7bnQ/55EbZUx/n3D4KyvE/Eil++Bffj9/M2zY//2H78T+8dUd7NP5P9Ww7vOl5BbvuOnn8T0SKF598K34rb/uw5390n71xLBe+/XyOPRr/z/RsG8jH/e3703UAAAAAAAAAAIBHWl8q4u8jxY+Ha+mFvO1u/v7f5NYd7dHf//psz7bJ+7Ne0Ue+2PVJBQAAAIB9oi8V8bNIcX3xrdtzqDfP/+6Z//l7G/M/h9KWT6s/5/u16rkB9/PP/3oN5OOO777bAAAAAAAAAAAAAAAAAAAAsK+kVMQLeT318Wo+/+SO66mvRIqX/+e5XC4dLct114EfqH6tX56dOXFxenp2orXYujo91Rida01MlXWfihRrf/uFXLeo1lfvrjffWeN9Yy32+Ugx/A/dsp212Ltrkz+1UfZUWfZTkeK//3Fz2e461p/ZKHu6LPs3keKb/7J92aMbZc+UZb8fKX7yzUa37OGybPf5qJ/dKPv8xGyxB6MCAAAAAAAAAAAAAAAAAADA46YvFfHnkeJ/byzfnsuf1//v63lbefPbPev9b3GrWud/oFr/f6fX97L+f/VcgaWdjgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9MKYp4I1LMXV5LK/3l+476pfbMzVtjQ8PbVzuUqpoHqvLlT/3U6TNnv/LC4Llufnj9++1z8erolYuNl2ZvzM1PLSxMTTbGZtoTs5NTd72H3dbf6nh1Aho3Xrs5ee3aQuP082c2fXxr4L3+J44OXBh89sQz3bJjQ8PDoz1lan33fPQ7pB22H4wi/jpSPPeDn6cf90cUsftz8RHfnb12qOrE8aoTY0PDVUem262ZxfLDke6JKCIaPZWa3XP0AMZiV5oRS2XzywYfL7s3Oteab12dnmqMtOYX24vt2ZmR1Glt2Z9GFHEuRSxHxGr/nbvriyJeixTfO7KW/rU/4kD3PHz58ujXT57euR3FHvbxLpTtbPRFLBePwJjtY/1RxD9Hil+8fSz+rT+iFp2f+FLEK2X+KOLN6Ix3Kr8YZyPe3eZ7xKOpFkX8fzn+F9bS2/3l9aB7Xbn0jcbXZq7N9pTtXlce+fvDg7TPr031KOIn1RV/Lf27/64BAAAAAAAAAAAAAAAA9pEifj1SnH/nWKrmB9+eU9yeud640ro63ZnW1537150zvb6+vt5InWzmHM+5lHM550rO1ZxR5Po5m2XW19fH8/ulnMs5V3Ku5owDuX7OZs7xnEs5l3Ou5FzNGbVcP2cz53jOpZzLVZfX11fy+9WcsU/m7gEAAAAAAAAAAAAAAAAAAJ8sRfVPiu9+ay2t93fWlx6PTq5YD/QT75cBAAD//wIc9mA=") 244.587532ms ago: executing program 8 (id=830): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x38}}, 0x44) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000869000/0x2000)=nil, &(0x7f000021f000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000352000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() 65.703858ms ago: executing program 7 (id=831): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0x80184132, &(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "03e08b113c0af5000000000000008000", '\x00', "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 0s ago: executing program 4 (id=832): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101680000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30002000003c000380380000804400018030000b802c0001800a0001006c696d697400"], 0x118}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x9, 0x4, 0x8, 0x8, [0xfffffffffffffff7, 0x6, 0x5, 0x1, 0x5]}) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): [ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.236188][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.247391][ T5107] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.269678][ T5107] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.282259][ T4997] device hsr_slave_0 entered promiscuous mode [ 181.304001][ T4997] device hsr_slave_1 entered promiscuous mode [ 181.312334][ T4997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.328428][ T4997] Cannot create hsr debugfs directory [ 181.338274][ T5107] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.383434][ T4848] device veth1_vlan entered promiscuous mode [ 181.550171][ T4848] device veth0_macvtap entered promiscuous mode [ 181.599064][ T5117] loop1: detected capacity change from 0 to 1024 [ 181.671586][ T5117] ext2: Unknown parameter 'subj_type' [ 181.678529][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.714386][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.806494][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.977434][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.249520][ T4848] device veth1_macvtap entered promiscuous mode [ 182.531309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.556463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.847179][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.873744][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.904342][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.935330][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.956770][ T4848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.006645][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.079518][ T4293] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 183.229326][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.285743][ T4367] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 183.506296][ T4367] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.620197][ T4367] usb 5-1: config 1 has no interface number 0 [ 183.630981][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.665388][ T4367] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.685303][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.728097][ T4367] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 183.740788][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.785294][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.802608][ T4367] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 183.825690][ T4848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.836928][ T4848] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.853602][ T4848] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.869334][ T4367] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 183.879441][ T4848] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.911442][ T4367] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.953058][ T4367] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.983829][ T4367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.014171][ T4367] usb 5-1: Product: syz [ 184.024296][ T4848] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.038148][ T4367] usb 5-1: Manufacturer: syz [ 184.042799][ T4367] usb 5-1: SerialNumber: syz [ 184.083269][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.102078][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.150515][ T5132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 184.249050][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.263697][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.289920][ T5149] CIFS mount error: No usable UNC path provided in device string! [ 184.289920][ T5149] [ 184.300146][ T5149] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 184.379715][ T5132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 184.401504][ T4877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.513902][ T4655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.534784][ T4655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.620267][ T5132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 184.637603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.718227][ T4655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.734862][ T4655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.771884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.983999][ T4997] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 185.041916][ T4997] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 185.059350][ T5132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 186.577323][ T4367] cdc_ncm 5-1:1.1: bind() failure [ 186.590887][ T4997] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.637169][ T4997] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.786777][ T14] usb 5-1: USB disconnect, device number 2 [ 186.916828][ T4997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.954906][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.983022][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.017195][ T4997] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.067158][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.082611][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.101807][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.108992][ T4526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.155237][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.164720][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.186212][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.193345][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.246218][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.282221][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.319601][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.356655][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.391405][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.574562][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.583982][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.627221][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.666256][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.685887][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.716936][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.750950][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.782852][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.885780][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.906378][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.116418][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.133536][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.318003][ T4877] device veth0_vlan entered promiscuous mode [ 188.380363][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.415876][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.918303][ T4877] device veth1_vlan entered promiscuous mode [ 189.988111][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.928943][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.958735][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.109616][ T4997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.166519][ T4414] device hsr_slave_0 left promiscuous mode [ 192.182205][ T5212] loop6: detected capacity change from 0 to 1024 [ 192.199045][ T5212] ext2: Unknown parameter 'subj_type' [ 192.242251][ T4414] device hsr_slave_1 left promiscuous mode [ 192.265387][ T4280] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.290963][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.329479][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.362860][ T4414] device bridge_slave_1 left promiscuous mode [ 192.369173][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.378877][ T4414] device bridge_slave_0 left promiscuous mode [ 192.385123][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.409323][ T4414] device veth0_macvtap left promiscuous mode [ 192.416244][ T4414] device veth1_vlan left promiscuous mode [ 192.422492][ T4414] device veth0_vlan left promiscuous mode [ 192.637049][ T5215] netlink: 64 bytes leftover after parsing attributes in process `syz.1.137'. [ 194.165786][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.175149][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.740550][ T5239] CIFS mount error: No usable UNC path provided in device string! [ 195.740550][ T5239] [ 195.750789][ T5239] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 196.121451][ T4414] team0 (unregistering): Port device team_slave_1 removed [ 196.255112][ T4414] team0 (unregistering): Port device team_slave_0 removed [ 196.354189][ T4414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.442523][ T5240] loop4: detected capacity change from 0 to 2048 [ 196.516175][ T4414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.604579][ T5240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.706040][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 196.706055][ T27] audit: type=1800 audit(1782163930.805:20): pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.133" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 198.020642][ T4414] bond0 (unregistering): Released all slaves [ 198.072446][ T5246] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 198.359172][ T4877] device veth0_macvtap entered promiscuous mode [ 198.367214][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.381735][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.430129][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.671116][ T4877] device veth1_macvtap entered promiscuous mode [ 199.220174][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.309158][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.382176][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.405987][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.427669][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.447265][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.469072][ T4877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.507700][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.565848][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.612681][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.739446][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.971247][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.172229][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.672823][ T5267] netlink: 64 bytes leftover after parsing attributes in process `syz.4.140'. [ 200.771729][ T4877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.796795][ T4877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.859563][ T5272] loop1: detected capacity change from 0 to 512 [ 200.884450][ T4877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.912552][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.933686][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.057283][ T4877] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.075087][ T4877] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.081008][ T5272] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.141: missing EA_INODE flag [ 201.178385][ T4877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.209523][ T5272] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.141: error while reading EA inode 12 err=-117 [ 201.221916][ T4877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.236389][ T5272] EXT4-fs (loop1): 1 orphan inode deleted [ 201.255790][ T5272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 203.470304][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 205.083289][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.111778][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.150230][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.640331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.686432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.781515][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.859458][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.983413][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.128257][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.219946][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.362826][ T4997] device veth0_vlan entered promiscuous mode [ 206.430454][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.549127][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.711459][ T4997] device veth1_vlan entered promiscuous mode [ 206.918013][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 206.918063][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 207.155058][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.215580][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.489807][ T4997] device veth0_macvtap entered promiscuous mode [ 208.180548][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.499373][ T4997] device veth1_macvtap entered promiscuous mode [ 209.344038][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.383165][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.411802][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.077628][ T5317] siw: device registration error -23 [ 210.090181][ T27] audit: type=1326 audit(1782163944.185:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.6.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 210.178273][ T27] audit: type=1326 audit(1782163944.185:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.6.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 210.224576][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.245132][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.273775][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.299626][ T27] audit: type=1326 audit(1782163944.185:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.6.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 210.406244][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.535468][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.567560][ T27] audit: type=1326 audit(1782163944.185:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.6.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 210.600790][ T4997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.845516][ T27] audit: type=1326 audit(1782163944.185:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.6.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 212.124712][ T27] audit: type=1326 audit(1782163944.185:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.6.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 212.160042][ T27] audit: type=1326 audit(1782163944.185:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.6.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 212.336018][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.354608][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.420874][ T5332] loop6: detected capacity change from 0 to 512 [ 212.445664][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.490082][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.006097][ T27] audit: type=1326 audit(1782163944.185:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.6.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 214.045428][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.065288][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.075153][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.096243][ T27] audit: type=1326 audit(1782163944.185:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.6.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 214.250020][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.290469][ T27] audit: type=1326 audit(1782163944.185:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.6.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 214.363748][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.394728][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.518902][ T4997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.567331][ T4997] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.603677][ T4997] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.793521][ T4997] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.038982][ T4280] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.310155][ T4997] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.335833][ T5349] netlink: 536 bytes leftover after parsing attributes in process `syz.6.154'. [ 215.998255][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.008707][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.378433][ T5360] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 216.685565][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.769654][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.287140][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.340851][ T5367] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 217.352344][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.368200][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.403013][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.901614][ T5372] befs: (nbd1): No write support. Marking filesystem read-only [ 219.915964][ T52] block nbd1: Attempted send on invalid socket [ 219.922687][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.652641][ T5402] loop7: detected capacity change from 0 to 512 [ 222.212855][ T5402] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 222.226563][ T5402] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 223.566276][ T5402] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.156: bg 0: block 104: invalid block bitmap [ 223.596072][ T5402] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 223.625466][ T5402] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.156: invalid indirect mapped block 1 (level 1) [ 223.640638][ T5402] EXT4-fs (loop7): 1 truncate cleaned up [ 223.646378][ T5402] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 224.765068][ T4877] EXT4-fs (loop7): unmounting filesystem. [ 225.045763][ T5424] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 225.190126][ T5430] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 225.314348][ T5436] capability: warning: `syz.6.175' uses deprecated v2 capabilities in a way that may be insecure [ 225.992581][ T5444] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 229.082344][ T5458] binder: Unknown parameter 'rootcontext' [ 231.124609][ T5473] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 231.390217][ T5479] loop4: detected capacity change from 0 to 512 [ 233.389777][ T5468] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 233.396361][ T5468] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 233.404321][ T5468] vhci_hcd vhci_hcd.0: Device attached [ 233.596470][ T5479] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 233.846049][ T4331] usb 48-1: SetAddress Request (2) to port 0 [ 233.867965][ T4331] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 233.968251][ T5482] vhci_hcd: connection closed [ 233.971853][ T4395] vhci_hcd: stop threads [ 234.137412][ T4395] vhci_hcd: release socket [ 234.218107][ T4395] vhci_hcd: disconnect device [ 234.709340][ T5479] EXT4-fs: error -4 creating inode table initialization thread [ 234.718758][ T5479] EXT4-fs (loop4): mount failed [ 236.660163][ T5515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.801706][ T5521] loop7: detected capacity change from 0 to 512 [ 236.897842][ T5527] loop6: detected capacity change from 0 to 512 [ 236.934477][ T5527] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 236.976536][ T5521] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.031574][ T5521] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 237.072879][ T5521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002] [ 237.081863][ T5521] System zones: 1-12 [ 237.087090][ T5521] EXT4-fs (loop7): orphan cleanup on readonly fs [ 237.095157][ T5527] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.195: corrupted xattr entries [ 237.120195][ T5521] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.194: bg 0: block 361: padding at end of block bitmap is not set [ 237.184510][ T5527] EXT4-fs (loop6): Remounting filesystem read-only [ 237.191966][ T5521] EXT4-fs (loop7): Remounting filesystem read-only [ 237.205588][ T5521] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 237.234852][ T5527] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 237.248624][ T5521] EXT4-fs (loop7): Remounting filesystem read-only [ 237.261564][ T5521] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.194: attempt to clear invalid blocks 33619980 len 1 [ 237.383511][ T5527] EXT4-fs (loop6): 1 truncate cleaned up [ 237.430712][ T5521] EXT4-fs (loop7): Remounting filesystem read-only [ 237.457898][ T5527] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 237.563894][ T5521] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.194: invalid indirect mapped block 1811939328 (level 0) [ 237.658296][ T5535] device syzkaller0 entered promiscuous mode [ 238.568203][ T5521] EXT4-fs (loop7): Remounting filesystem read-only [ 238.574806][ T5521] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.194: invalid indirect mapped block 2 (level 2) [ 238.614121][ T4848] EXT4-fs (loop6): unmounting filesystem. [ 238.633428][ T5535] tipc: Enabled bearer , priority 0 [ 238.641725][ T5521] EXT4-fs (loop7): Remounting filesystem read-only [ 238.656156][ T5521] EXT4-fs (loop7): 1 truncate cleaned up [ 238.661877][ T5521] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 238.968469][ T5553] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 238.982017][ T5521] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #2: block 5: comm syz.7.194: lblock 0 mapped to illegal pblock 5 (length 1) [ 238.998005][ T5534] tipc: Resetting bearer [ 239.013339][ T5521] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.194: error -117 reading directory block [ 239.288888][ T4331] usb 48-1: device descriptor read/8, error -110 [ 239.321966][ T5550] netlink: 36 bytes leftover after parsing attributes in process `syz.5.200'. [ 239.738794][ T5534] tipc: Disabling bearer [ 239.890003][ T4877] EXT4-fs (loop7): unmounting filesystem. [ 239.898771][ T5560] device bond0 entered promiscuous mode [ 239.904371][ T5560] device bond_slave_0 entered promiscuous mode [ 239.913413][ T5560] device bond_slave_1 entered promiscuous mode [ 240.104129][ T4331] usb usb48-port1: attempt power cycle [ 241.195503][ T5579] loop1: detected capacity change from 0 to 512 [ 241.322043][ T5578] loop5: detected capacity change from 0 to 512 [ 241.656294][ T4331] usb usb48-port1: unable to enumerate USB device [ 241.816132][ T5578] EXT4-fs: Ignoring removed i_version option [ 241.856869][ T5579] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 242.208726][ T5578] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.206: inode has both inline data and extents flags [ 242.227808][ T5579] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.203: bg 0: block 104: invalid block bitmap [ 242.254107][ T5579] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 242.270168][ T5579] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.203: invalid indirect mapped block 1 (level 1) [ 242.287785][ T5579] EXT4-fs (loop1): 1 truncate cleaned up [ 242.293466][ T5579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 242.514207][ T5592] loop4: detected capacity change from 0 to 16 [ 242.529342][ T5578] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.206: couldn't read orphan inode 15 (err -117) [ 242.695934][ T5592] erofs: Unknown parameter 'ãé' [ 242.720790][ T5578] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 242.733390][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 242.785421][ T4287] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.806102][ T5601] Cannot find add_set index 0 as target [ 245.458373][ T5614] loop4: detected capacity change from 0 to 256 [ 245.465752][ T5614] exfat: Deprecated parameter 'utf8' [ 245.471263][ T5614] exfat: Deprecated parameter 'namecase' [ 245.578347][ T5614] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 245.614975][ T5612] loop6: detected capacity change from 0 to 2048 [ 245.630820][ T4997] EXT4-fs (loop5): unmounting filesystem. [ 245.637167][ T5591] : renamed from ipvlan0 [ 245.724308][ T5599] [ 245.727196][ T5612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.581769][ T5622] netlink: 'syz.5.212': attribute type 4 has an invalid length. [ 249.521969][ T5636] xt_l2tp: v2 doesn't support IP mode [ 250.294582][ T5640] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 251.949528][ T5654] loop4: detected capacity change from 0 to 32768 [ 252.422861][ T5666] mmap: syz.7.229 (5666) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 252.980581][ T5654] XFS (loop4): Mounting V5 Filesystem [ 253.172483][ T5654] XFS (loop4): Ending clean mount [ 253.181419][ T5654] XFS (loop4): Quotacheck needed: Please wait. [ 253.262062][ T5654] XFS (loop4): Quotacheck: Done. [ 254.917732][ T5702] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 255.108580][ T5702] device bond0 entered promiscuous mode [ 255.114207][ T5702] device bond_slave_0 entered promiscuous mode [ 255.153590][ T5702] device bond_slave_1 entered promiscuous mode [ 255.288868][ T5711] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 255.350418][ T5712] ip6t_rpfilter: unknown options [ 255.628559][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.689428][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.904451][ T5711] device bond0 entered promiscuous mode [ 257.962823][ T5711] device bond_slave_0 entered promiscuous mode [ 258.216404][ T5711] device bond_slave_1 entered promiscuous mode [ 260.779042][ T5741] tipc: Started in network mode [ 260.784007][ T5741] tipc: Node identity 6a4cb796a0ef, cluster identity 4711 [ 260.877996][ T5741] tipc: Enabled bearer , priority 0 [ 261.096696][ T5740] tipc: Disabling bearer [ 261.598134][ T4273] XFS (loop4): Unmounting Filesystem [ 261.690792][ T5758] 8021q: VLANs not supported on ipvlan0 [ 261.701031][ T5758] binder: 5750:5758 ioctl c018620c 200000000240 returned -22 [ 262.511548][ T5757] device syzkaller0 entered promiscuous mode [ 262.664341][ T5759] tipc: Started in network mode [ 262.674282][ T5759] tipc: Node identity e619e8e1203e, cluster identity 4711 [ 262.699164][ T5759] tipc: Enabled bearer , priority 0 [ 262.779727][ T5754] tipc: Resetting bearer [ 262.911851][ T5754] tipc: Disabling bearer [ 265.400865][ T5775] syz.7.240 uses obsolete (PF_INET,SOCK_PACKET) [ 266.846839][ T5774] virt_wifi0 speed is unknown, defaulting to 1000 [ 267.989382][ T5790] device syzkaller0 entered promiscuous mode [ 268.066720][ T5790] tipc: Enabled bearer , priority 0 [ 268.447896][ T5789] tipc: Resetting bearer [ 269.778452][ T5789] tipc: Disabling bearer [ 269.820360][ T128] tipc: Node number set to 3324504289 [ 270.011240][ T5808] loop1: detected capacity change from 0 to 32768 [ 270.047009][ T5804] device syzkaller0 entered promiscuous mode [ 270.067965][ T5808] XFS (loop1): Mounting V5 Filesystem [ 270.093596][ T4281] Bluetooth: hci2: hcon ffff8880293ac000 sent 1 < count 10 [ 270.101162][ T4281] Bluetooth: hci2: hcon ffff88805ee6e000 sent 1 < count 16 [ 270.112004][ T5804] tipc: Started in network mode [ 270.126915][ T5818] qnx6: unable to read the first superblock [ 270.307385][ T5808] XFS (loop1): Ending clean mount [ 270.322462][ T5808] XFS (loop1): Quotacheck needed: Please wait. [ 270.385661][ T5804] tipc: Node identity 563e5e6327d1, cluster identity 4711 [ 270.401080][ T5804] tipc: Enabled bearer , priority 0 [ 270.770538][ T5808] XFS (loop1): Quotacheck: Done. [ 270.916827][ T5803] tipc: Resetting bearer [ 271.029383][ T5803] tipc: Disabling bearer [ 272.424229][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.7.254'. [ 273.381074][ T5854] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 275.060324][ T5867] loop6: detected capacity change from 0 to 32768 [ 275.073549][ T5867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.258 (5867) [ 275.107908][ T5867] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.118526][ T5867] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 275.127665][ T5867] BTRFS info (device loop6): turning on async discard [ 275.134506][ T5867] BTRFS info (device loop6): metadata ratio 0 [ 275.140652][ T5867] BTRFS info (device loop6): setting nodatasum [ 275.146891][ T5867] BTRFS info (device loop6): using free space tree [ 275.173116][ T5871] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 275.621040][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.261'. [ 275.677513][ T5867] BTRFS info (device loop6): enabling ssd optimizations [ 276.349709][ T5898] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 276.356329][ T5898] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 276.379827][ T5898] vhci_hcd vhci_hcd.0: Device attached [ 276.711095][ T5899] vhci_hcd: connection closed [ 277.532235][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 277.532269][ T27] audit: type=1800 audit(1782164011.175:38): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.258" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 277.730510][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.258'. [ 277.739430][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.258'. [ 277.770736][ T5485] usb 44-1: SetAddress Request (2) to port 0 [ 277.811079][ T32] vhci_hcd: stop threads [ 277.815623][ T32] vhci_hcd: release socket [ 277.895520][ T32] vhci_hcd: disconnect device [ 277.954599][ T5485] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 277.985353][ T5485] usb 44-1: enqueue for inactive port 0 [ 278.036903][ T5895] syz.7.261 (5895) used greatest stack depth: 17504 bytes left [ 278.049114][ T4275] XFS (loop1): Unmounting Filesystem [ 278.073544][ T5921] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 278.115941][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 278.117624][ T27] audit: type=1326 audit(1782164011.625:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.6.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 278.122003][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 278.161657][ T5918] device syzkaller0 entered promiscuous mode [ 278.194909][ T4848] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 278.223640][ T5921] device bond0 entered promiscuous mode [ 278.244386][ T5921] device bond_slave_0 entered promiscuous mode [ 278.251198][ T27] audit: type=1326 audit(1782164011.625:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.6.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32499ce59 code=0x7ffc0000 [ 278.299762][ T5921] device bond_slave_1 entered promiscuous mode [ 278.318047][ T5918] tipc: Enabled bearer , priority 0 [ 278.350481][ T5917] tipc: Resetting bearer [ 278.420926][ T5485] usb usb44-port1: attempt power cycle [ 278.571329][ T5917] tipc: Disabling bearer [ 278.978517][ T5934] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 279.087363][ T5936] loop6: detected capacity change from 0 to 512 [ 279.153336][ T5936] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 279.334927][ T5936] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.265: bg 0: block 104: invalid block bitmap [ 279.349913][ T5936] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 279.365374][ T5936] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.265: invalid indirect mapped block 1 (level 1) [ 279.387000][ T5936] EXT4-fs (loop6): 1 truncate cleaned up [ 279.392795][ T5936] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 279.685032][ T5485] usb usb44-port1: unable to enumerate USB device [ 279.710047][ T4848] EXT4-fs (loop6): unmounting filesystem. [ 280.725717][ T5950] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 281.007321][ T5955] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 281.290324][ T5959] tipc: Cannot configure node identity twice [ 283.315750][ T5973] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 283.526341][ T5977] device syzkaller0 entered promiscuous mode [ 283.588009][ T5977] tipc: Enabled bearer , priority 0 [ 283.649456][ T5981] Bluetooth: MGMT ver 1.22 [ 283.709045][ T5974] tipc: Resetting bearer [ 284.289258][ T5974] tipc: Disabling bearer [ 284.356520][ T5962] loop4: detected capacity change from 0 to 32768 [ 284.473254][ T5962] XFS (loop4): Mounting V5 Filesystem [ 284.562007][ T5962] XFS (loop4): Ending clean mount [ 284.574183][ T5962] XFS (loop4): Quotacheck needed: Please wait. [ 284.611775][ T5962] XFS (loop4): Quotacheck: Done. [ 285.279498][ T6003] loop5: detected capacity change from 0 to 512 [ 285.445554][ T6003] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 285.547369][ T6003] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.281: bg 0: block 104: invalid block bitmap [ 285.562364][ T6003] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 285.575758][ T6003] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.281: invalid indirect mapped block 1 (level 1) [ 285.589372][ T6003] EXT4-fs (loop5): 1 truncate cleaned up [ 285.595063][ T6003] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 285.717784][ T4273] XFS (loop4): Unmounting Filesystem [ 286.634023][ T4997] EXT4-fs (loop5): unmounting filesystem. [ 286.922979][ T6018] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 290.352802][ T6044] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 292.328794][ T6070] tipc: Enabling of bearer rejected, failed to enable media [ 293.353687][ T6084] trusted_key: encrypted_key: insufficient parameters specified [ 293.928014][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 294.144480][ T6088] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 296.354504][ T6099] loop4: detected capacity change from 0 to 2048 [ 296.463407][ T6099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.291828][ T6111] virt_wifi0 speed is unknown, defaulting to 1000 [ 302.943532][ T6130] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 302.954135][ T6130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.458703][ T6143] loop4: detected capacity change from 0 to 2048 [ 310.433431][ T6143] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.804131][ T6155] loop1: detected capacity change from 0 to 128 [ 310.836142][ T6157] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 313.006437][ T6155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 313.405512][ T6169] loop7: detected capacity change from 0 to 512 [ 313.414253][ T6155] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 313.477080][ T6169] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.320: ea_inode with extended attributes [ 313.768227][ T6169] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.320: error while reading EA inode 11 err=-117 [ 314.251711][ T6169] EXT4-fs (loop7): 1 orphan inode deleted [ 314.258277][ T6169] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 314.434550][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 314.527535][ T6179] loop5: detected capacity change from 0 to 8 [ 314.599593][ T6179] SQUASHFS error: xz decompression failed, data probably corrupt [ 314.607937][ T6179] SQUASHFS error: Failed to read block 0x304: -5 [ 314.614369][ T6179] SQUASHFS error: Unable to read metadata cache entry [302] [ 314.621805][ T6179] SQUASHFS error: Unable to read inode 0x11f [ 315.368965][ T4280] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.349637][ T6186] random: crng reseeded on system resumption [ 316.862704][ T4877] EXT4-fs (loop7): unmounting filesystem. [ 317.000316][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.006759][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.265586][ T6202] sctp: failed to load transform for md5: -2 [ 318.399727][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.324'. [ 321.220849][ T6234] virt_wifi0 speed is unknown, defaulting to 1000 [ 321.289817][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 322.011770][ T6243] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 328.130932][ T6280] netlink: 23 bytes leftover after parsing attributes in process `syz.5.342'. [ 329.018580][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.343'. [ 329.341791][ T6295] loop1: detected capacity change from 0 to 512 [ 329.352477][ T6295] ext4: Unknown parameter 'context' [ 331.379533][ T6298] loop1: detected capacity change from 0 to 512 [ 331.388976][ T6298] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 331.425564][ T5485] libceph: connect (1)[c::]:6789 error -101 [ 331.456230][ T5485] libceph: mon0 (1)[c::]:6789 connect error [ 331.515420][ T6298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 331.523704][ T6298] System zones: 1-12 [ 331.646405][ T6280] ceph: No mds server is up or the cluster is laggy [ 333.106784][ T5485] libceph: connect (1)[c::]:6789 error -101 [ 333.112858][ T5485] libceph: mon0 (1)[c::]:6789 connect error [ 333.125701][ T6298] EXT4-fs (loop1): 1 truncate cleaned up [ 333.131428][ T6298] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 333.318488][ T6319] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 333.469781][ T6322] batman_adv: batadv0: Adding interface: dummy0 [ 333.514576][ T6322] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.986724][ T6322] batman_adv: batadv0: Interface activated: dummy0 [ 335.040814][ T6334] loop7: detected capacity change from 0 to 512 [ 335.066135][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.6.350'. [ 335.081499][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 335.129932][ T6334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.149284][ T6327] batadv0: mtu less than device minimum [ 335.156796][ T6327] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.169593][ T6327] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.181849][ T6327] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.193949][ T6327] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.206286][ T6327] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.218647][ T6327] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.231013][ T6327] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.243196][ T6327] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.319104][ T6334] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 335.419095][ T6335] loop4: detected capacity change from 0 to 32768 [ 335.505566][ T6334] EXT4-fs (loop7): 1 truncate cleaned up [ 335.557347][ T6334] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 335.606643][ T6335] XFS (loop4): Mounting V5 Filesystem [ 335.759420][ T6329] loop5: detected capacity change from 0 to 2048 [ 335.987543][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.354'. [ 336.243405][ T6329] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 336.253258][ T6329] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.449627][ T6335] XFS (loop4): Ending clean mount [ 336.634493][ T6335] XFS (loop4): Quotacheck needed: Please wait. [ 336.672904][ T6356] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 336.774152][ T6335] XFS (loop4): Quotacheck: Done. [ 336.844122][ T6356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.386492][ T6360] xt_l2tp: unknown flags: 17 [ 337.823712][ T4997] EXT4-fs (loop5): unmounting filesystem. [ 337.881356][ T4273] XFS (loop4): Unmounting Filesystem [ 338.959985][ T6375] loop5: detected capacity change from 0 to 8 [ 338.972025][ T6375] squashfs: Unknown parameter 'threads' [ 339.141593][ T6372] net_ratelimit: 11 callbacks suppressed [ 339.141650][ T6372] sctp: failed to load transform for md5: -2 [ 342.587865][ T6393] loop1: detected capacity change from 0 to 2048 [ 342.981819][ T6393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 342.991596][ T6393] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.296259][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 343.695307][ T6404] loop4: detected capacity change from 0 to 512 [ 344.391620][ T6404] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 344.803255][ T6409] device syzkaller0 entered promiscuous mode [ 344.912921][ T6409] tipc: Enabled bearer , priority 0 [ 344.937411][ T6408] tipc: Resetting bearer [ 346.114633][ T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 347.126537][ T6408] tipc: Disabling bearer [ 347.203947][ T4877] EXT4-fs (loop7): unmounting filesystem. [ 347.314508][ T6427] trusted_key: encrypted_key: insufficient parameters specified [ 347.326918][ T6427] trusted_key: encrypted_key: keylen parameter is missing [ 349.458064][ T6446] netlink: 'syz.7.371': attribute type 3 has an invalid length. [ 350.127541][ T6448] loop4: detected capacity change from 0 to 512 [ 350.150006][ T6448] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 350.183242][ T6447] tipc: Enabled bearer , priority 0 [ 350.315513][ T6448] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 350.335059][ T6448] System zones: 0-1, 15-15, 18-18, 34-34 [ 350.402096][ T6443] tipc: Disabling bearer [ 350.407022][ T6448] EXT4-fs (loop4): orphan cleanup on readonly fs [ 350.474960][ T6448] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 350.515502][ T6448] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 351.037093][ T6448] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 351.104886][ T6448] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.373: bad orphan inode 16 [ 351.251816][ T6448] ext4_test_bit(bit=15, block=18) = 1 [ 351.288932][ T6448] is_bad_inode(inode)=0 [ 351.538201][ T6448] NEXT_ORPHAN(inode)=0 [ 351.542817][ T6448] max_ino=32 [ 351.547016][ T6448] i_nlink=2 [ 351.550442][ T6448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 354.926400][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 356.362910][ T6479] device syzkaller0 entered promiscuous mode [ 358.007710][ T6497] tipc: Started in network mode [ 358.012669][ T6497] tipc: Node identity 8a7a8e2dd973, cluster identity 4711 [ 358.075494][ T6497] tipc: Enabled bearer , priority 0 [ 358.910552][ T6478] tipc: Resetting bearer [ 359.081471][ T6478] tipc: Disabling bearer [ 359.141137][ T128] tipc: Node number set to 1393135149 [ 359.616670][ T6519] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 360.492446][ T6523] loop7: detected capacity change from 0 to 512 [ 360.550551][ T6523] EXT4-fs: Ignoring removed bh option [ 360.603541][ T6523] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 360.750046][ T6523] EXT4-fs (loop7): 1 truncate cleaned up [ 360.785303][ T6523] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 361.972268][ T6540] IPVS: Error connecting to the multicast addr [ 362.195509][ T6531] Can't find ip_set type [ 362.376335][ T4877] EXT4-fs (loop7): unmounting filesystem. [ 363.380473][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.392019][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.401984][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.410423][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.417977][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 363.428836][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.232032][ T6547] virt_wifi0 speed is unknown, defaulting to 1000 [ 364.266727][ T6561] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 365.367333][ T6381] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.388597][ T6569] loop1: detected capacity change from 0 to 128 [ 365.404190][ T6569] ext4: Unknown parameter 'fsmagic' [ 365.555367][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 365.610437][ T6566] tipc: Enabled bearer , priority 0 [ 366.010812][ T6381] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.397321][ T6565] tipc: Disabling bearer [ 367.636596][ T4293] Bluetooth: hci4: command 0x041b tx timeout [ 368.083551][ T6381] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.173022][ T6591] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 368.268229][ T6381] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.366553][ T6596] loop1: detected capacity change from 0 to 512 [ 368.412872][ T6596] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 369.178283][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 370.155316][ T4293] Bluetooth: hci4: command 0x040f tx timeout [ 371.143923][ T6603] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 371.150575][ T6603] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 371.159123][ T6604] vhci_hcd: connection closed [ 371.161698][ T6603] vhci_hcd vhci_hcd.0: Device attached [ 371.186640][ T4772] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 371.264024][ T4397] vhci_hcd: stop threads [ 371.268504][ T4397] vhci_hcd: release socket [ 371.334084][ T4397] vhci_hcd: disconnect device [ 371.607659][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.622466][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.772259][ T6547] device bridge_slave_0 entered promiscuous mode [ 371.781288][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.794305][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.210960][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 372.786457][ T6547] device bridge_slave_1 entered promiscuous mode [ 373.018484][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.091135][ T6381] tipc: Left network mode [ 373.118202][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.808323][ T6547] team0: Port device team_slave_0 added [ 375.044104][ T6660] loop7: detected capacity change from 0 to 512 [ 375.051265][ T6660] ext4: Unknown parameter 'context' [ 376.111693][ T6642] tipc: Enabled bearer , priority 0 [ 376.187030][ T5604] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 376.539307][ T6636] tipc: Disabling bearer [ 378.439250][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.445745][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.483257][ T6547] team0: Port device team_slave_1 added [ 378.630006][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.687570][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.748884][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.879074][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.003699][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.032006][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.080160][ T6681] loop1: detected capacity change from 0 to 512 [ 379.865892][ T6681] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 379.873878][ T6681] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 379.893116][ T6681] System zones: 0-1, 15-15, 18-18, 34-34 [ 379.917391][ T6681] EXT4-fs (loop1): orphan cleanup on readonly fs [ 379.935633][ T6681] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 379.945122][ T6681] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 380.138893][ T6547] device hsr_slave_0 entered promiscuous mode [ 380.156159][ T6547] device hsr_slave_1 entered promiscuous mode [ 380.162919][ T6547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.170882][ T6547] Cannot create hsr debugfs directory [ 380.189269][ T6681] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 380.759485][ T6681] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.417: bad orphan inode 16 [ 380.793474][ T6681] ext4_test_bit(bit=15, block=18) = 1 [ 380.803542][ T6681] is_bad_inode(inode)=0 [ 380.855674][ T6681] NEXT_ORPHAN(inode)=0 [ 380.890738][ T6681] max_ino=32 [ 380.893981][ T6681] i_nlink=2 [ 381.032597][ T6681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 382.027828][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 382.507489][ T6708] loop7: detected capacity change from 0 to 256 [ 383.353539][ T6708] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 383.364312][ T6708] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 383.403272][ T6708] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 383.443446][ T6708] exFAT-fs (loop7): hint_cluster is invalid (17) [ 383.456402][ T6708] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff) [ 383.464482][ T6708] exFAT-fs (loop7): Filesystem has been set read-only [ 385.271650][ T6728] loop5: detected capacity change from 0 to 512 [ 385.281153][ T6728] ext4: Unknown parameter 'context' [ 385.567818][ T6547] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 386.720946][ T6547] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 387.150452][ T6547] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 387.206967][ T6547] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 387.370879][ T6381] device hsr_slave_0 left promiscuous mode [ 387.496588][ T6381] device hsr_slave_1 left promiscuous mode [ 387.610094][ T6381] batman_adv: batadv0: Interface deactivated: dummy0 [ 387.714767][ T6381] batman_adv: batadv0: Removing interface: dummy0 [ 387.841180][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.944247][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.015361][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.022834][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.088233][ T6381] device bridge_slave_1 left promiscuous mode [ 388.094512][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.126963][ T6381] device bridge_slave_0 left promiscuous mode [ 388.133218][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.250870][ T6381] device veth1_macvtap left promiscuous mode [ 388.259785][ T6381] device veth0_macvtap left promiscuous mode [ 388.294285][ T6381] device veth1_vlan left promiscuous mode [ 388.301062][ T6381] device veth0_vlan left promiscuous mode [ 388.354172][ T6759] loop7: detected capacity change from 0 to 512 [ 388.399307][ T6759] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 388.430541][ T6759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 388.445475][ T6759] System zones: 1-12 [ 388.481246][ T6759] EXT4-fs (loop7): 1 truncate cleaned up [ 388.544841][ T6759] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 390.559750][ T4877] EXT4-fs (loop7): unmounting filesystem. [ 390.673873][ T6781] loop7: detected capacity change from 0 to 512 [ 390.684934][ T6781] EXT4-fs: Ignoring removed i_version option [ 390.741905][ T6781] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.433: inode has both inline data and extents flags [ 390.784166][ T6781] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.433: couldn't read orphan inode 15 (err -117) [ 390.826692][ T6781] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 390.827522][ T6381] team0 (unregistering): Port device team_slave_1 removed [ 390.983335][ T6784] Cannot find add_set index 0 as target [ 391.040442][ T6381] team0 (unregistering): Port device team_slave_0 removed [ 391.409649][ T6381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.427039][ T6381] device bond_slave_1 left promiscuous mode [ 391.536405][ T6381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.546220][ T6381] device bond_slave_0 left promiscuous mode [ 391.608372][ T4877] EXT4-fs (loop7): unmounting filesystem. [ 391.978941][ T6381] bond0 (unregistering): Released all slaves [ 392.061455][ T6743] tipc: Enabled bearer , priority 0 [ 392.079783][ T6737] tipc: Disabling bearer [ 392.091912][ T6763] device syzkaller0 entered promiscuous mode [ 392.258883][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.311512][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.321309][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.359131][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.384337][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.733368][ T6798] loop5: detected capacity change from 0 to 32768 [ 392.916998][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.104035][ T6798] XFS (loop5): Mounting V5 Filesystem [ 393.132404][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.139613][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.325449][ T6798] XFS (loop5): Ending clean mount [ 394.374609][ T6798] XFS (loop5): Quotacheck needed: Please wait. [ 394.396164][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.407866][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.447315][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.515141][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.523013][ T6733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.538437][ T6798] XFS (loop5): Quotacheck: Done. [ 394.595587][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.878243][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 395.510151][ T6825] loop4: detected capacity change from 0 to 512 [ 395.519873][ T6825] ext4: Unknown parameter 'context' [ 396.798360][ T6547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.960488][ T6547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.144978][ T4280] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 397.154701][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.205922][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.292327][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.311489][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.402954][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.414228][ T4997] XFS (loop5): Unmounting Filesystem [ 397.451505][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.487445][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.513008][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.549285][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.582454][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.177642][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.185129][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.203233][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.653623][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.670320][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.710997][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.723035][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.736621][ T6547] device veth0_vlan entered promiscuous mode [ 398.743578][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.752311][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.767463][ T6547] device veth1_vlan entered promiscuous mode [ 398.801325][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.810293][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 398.820479][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.829387][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.841269][ T6547] device veth0_macvtap entered promiscuous mode [ 398.853490][ T6547] device veth1_macvtap entered promiscuous mode [ 398.873121][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.885045][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.895856][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.906671][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.917211][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.927889][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.938086][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.949893][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.962935][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.979409][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.988312][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.996993][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.006736][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.016994][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.027730][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.038035][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.050320][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.060572][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.071569][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.081888][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.101770][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.113271][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.128863][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.138683][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.151283][ T6547] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.160915][ T6547] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.173424][ T6547] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.183227][ T6547] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.271679][ T6381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.289273][ T6381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.310544][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.334080][ T6381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.347956][ T6381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.358613][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.530738][ T6874] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 399.592740][ T6874] device bond0 entered promiscuous mode [ 399.613594][ T6874] device bond_slave_0 entered promiscuous mode [ 399.733343][ T6874] device bond_slave_1 entered promiscuous mode [ 399.834136][ T6884] loop4: detected capacity change from 0 to 512 [ 400.461227][ T6878] random: crng reseeded on system resumption [ 400.612068][ T5604] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 401.693861][ T6894] loop4: detected capacity change from 0 to 8 [ 401.700228][ T5604] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 401.825489][ T5604] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.862092][ T6894] squashfs image failed sanity check [ 401.876914][ T5604] Buffer I/O error on dev loop4, logical block 0, async page read [ 402.733269][ T6901] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 404.280997][ T6915] device syzkaller0 entered promiscuous mode [ 404.333237][ T6912] tipc: Enabled bearer , priority 0 [ 404.432578][ T6923] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 404.472088][ T6908] tipc: Disabling bearer [ 404.930784][ T6932] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 408.227457][ T6951] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 408.399437][ T6955] device syzkaller0 entered promiscuous mode [ 411.240452][ T6980] loop7: detected capacity change from 0 to 32768 [ 411.330731][ T6982] device syzkaller0 entered promiscuous mode [ 411.380898][ T6980] XFS (loop7): Mounting V5 Filesystem [ 411.423877][ T6980] XFS (loop7): Ending clean mount [ 411.431376][ T6980] XFS (loop7): Quotacheck needed: Please wait. [ 411.438157][ T6982] tipc: Started in network mode [ 411.456067][ T6982] tipc: Node identity 52c34e0991ff, cluster identity 4711 [ 411.463335][ T6982] tipc: Enabled bearer , priority 0 [ 411.478699][ T6996] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 411.580375][ T6978] tipc: Resetting bearer [ 411.605153][ T6980] XFS (loop7): Quotacheck: Done. [ 411.806828][ T6978] tipc: Disabling bearer [ 413.862788][ T4877] XFS (loop7): Unmounting Filesystem [ 414.057522][ T7020] loop1: detected capacity change from 0 to 16 [ 414.306121][ T7020] erofs: Unknown parameter 'ãé' [ 415.545280][ T26] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 415.588628][ T7035] loop5: detected capacity change from 0 to 1024 [ 415.750780][ T7038] loop1: detected capacity change from 0 to 256 [ 415.762093][ T7038] exfat: Deprecated parameter 'utf8' [ 415.768148][ T7038] exfat: Deprecated parameter 'namecase' [ 415.810792][ T7038] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 415.840174][ T7038] : renamed from ipvlan0 [ 415.885972][ T26] usb 9-1: Using ep0 maxpacket: 32 [ 415.917552][ T26] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 415.984804][ T26] usb 9-1: config 0 has no interface number 0 [ 416.225094][ T26] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 416.238194][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.246595][ T26] usb 9-1: Product: syz [ 416.250819][ T26] usb 9-1: Manufacturer: syz [ 416.258574][ T26] usb 9-1: SerialNumber: syz [ 416.277611][ T26] usb 9-1: config 0 descriptor?? [ 416.311318][ T7040] random: crng reseeded on system resumption [ 416.585835][ T26] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 416.994045][ T7043] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 417.537166][ T26] usb 9-1: qt2_attach - failed to power on unit: -71 [ 417.544730][ T26] quatech2: probe of 9-1:0.51 failed with error -71 [ 417.588690][ T26] usb 9-1: USB disconnect, device number 2 [ 417.642608][ T7057] tipc: Enabling of bearer rejected, failed to enable media [ 417.824753][ T7060] device syzkaller0 entered promiscuous mode [ 417.914196][ T7060] tipc: Enabled bearer , priority 0 [ 417.953743][ T7059] tipc: Resetting bearer [ 418.059756][ T7059] tipc: Disabling bearer [ 418.486316][ T7068] loop1: detected capacity change from 0 to 32768 [ 418.926057][ T7079] CIFS mount error: No usable UNC path provided in device string! [ 418.926057][ T7079] [ 418.936165][ T7079] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 419.162485][ T7068] XFS (loop1): Mounting V5 Filesystem [ 419.402360][ T7088] CIFS mount error: No usable UNC path provided in device string! [ 419.402360][ T7088] [ 419.412441][ T7088] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 420.290863][ T7097] CIFS mount error: No usable UNC path provided in device string! [ 420.290863][ T7097] [ 420.301261][ T7097] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 421.896307][ T7068] XFS (loop1): Ending clean mount [ 421.908525][ T7068] XFS (loop1): Quotacheck needed: Please wait. [ 421.942151][ T7068] XFS (loop1): Quotacheck: Done. [ 422.022645][ T4275] XFS (loop1): Unmounting Filesystem [ 422.867137][ T7113] loop5: detected capacity change from 0 to 256 [ 423.194526][ T7113] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 423.205566][ T7113] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 423.237733][ T7113] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 423.314208][ T7113] exFAT-fs (loop5): hint_cluster is invalid (17) [ 423.326053][ T7113] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 423.335019][ T7113] exFAT-fs (loop5): Filesystem has been set read-only [ 424.072253][ T7124] loop4: detected capacity change from 0 to 512 [ 424.088513][ T7124] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 424.959915][ T7124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 425.157501][ T7124] System zones: 1-12 [ 425.176756][ T7124] EXT4-fs (loop4): 1 truncate cleaned up [ 425.242883][ T7124] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 426.864430][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 429.320599][ T7161] tipc: Enabled bearer , priority 0 [ 429.334871][ T7159] loop5: detected capacity change from 0 to 2048 [ 429.617043][ T7149] tipc: Disabling bearer [ 429.626938][ T7159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.042148][ T7173] loop1: detected capacity change from 0 to 32768 [ 431.521157][ T7173] XFS (loop1): Mounting V5 Filesystem [ 431.544983][ T7173] XFS (loop1): Ending clean mount [ 431.572961][ T7173] XFS (loop1): Quotacheck needed: Please wait. [ 431.675555][ T7173] XFS (loop1): Quotacheck: Done. [ 432.247084][ T7195] overlayfs: failed to resolve './bus': -2 [ 432.565878][ T7192] loop8: detected capacity change from 0 to 32768 [ 432.657267][ T4275] XFS (loop1): Unmounting Filesystem [ 432.767333][ T7203] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 432.794524][ T7192] XFS (loop8): Mounting V5 Filesystem [ 432.897933][ T7192] XFS (loop8): Ending clean mount [ 432.976792][ T7211] xt_l2tp: v2 doesn't support IP mode [ 433.140184][ T7192] XFS (loop8): Quotacheck needed: Please wait. [ 433.455873][ T7192] XFS (loop8): Quotacheck: Done. [ 435.403230][ T6547] XFS (loop8): Unmounting Filesystem [ 436.765819][ T7221] xt_limit: Overflow, try lower: 324382443/0 [ 438.497827][ T7234] loop4: detected capacity change from 0 to 2048 [ 438.620737][ T7234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.704752][ T7243] device syzkaller0 entered promiscuous mode [ 438.927320][ T7243] tipc: Enabled bearer , priority 0 [ 439.670816][ T7242] tipc: Resetting bearer [ 439.794273][ T7242] tipc: Disabling bearer [ 439.878110][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.884470][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.735597][ T7267] loop5: detected capacity change from 0 to 32768 [ 442.541573][ T7267] XFS (loop5): Mounting V5 Filesystem [ 443.251772][ T7291] loop8: detected capacity change from 0 to 512 [ 443.258981][ T7291] ext4: Unknown parameter 'context' [ 443.872145][ T7267] XFS (loop5): Ending clean mount [ 443.940597][ T7267] XFS (loop5): Quotacheck needed: Please wait. [ 444.423998][ T7267] XFS (loop5): Quotacheck: Done. [ 444.797658][ T7293] overlayfs: failed to resolve './bus': -2 [ 445.205368][ T4280] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 445.480164][ T4997] XFS (loop5): Unmounting Filesystem [ 445.813162][ T7302] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 445.982124][ T7300] loop1: detected capacity change from 0 to 32768 [ 446.256099][ T7300] XFS (loop1): Mounting V5 Filesystem [ 446.499675][ T7315] virt_wifi0 speed is unknown, defaulting to 1000 [ 447.252115][ T7300] XFS (loop1): Ending clean mount [ 448.031207][ T7300] XFS (loop1): Quotacheck needed: Please wait. [ 451.060479][ T7300] XFS (loop1): Quotacheck: Done. [ 451.177631][ T4275] XFS (loop1): Unmounting Filesystem [ 452.348006][ T7343] loop5: detected capacity change from 0 to 16 [ 452.806269][ T7343] erofs: Unknown parameter 'ãé' [ 453.166750][ T7349] : renamed from ipvlan0 [ 453.625333][ T4327] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 453.714877][ T7352] loop5: detected capacity change from 0 to 512 [ 454.059309][ T7358] loop1: detected capacity change from 0 to 256 [ 454.635257][ T4327] usb 5-1: Using ep0 maxpacket: 32 [ 454.695252][ T7358] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.706124][ T7358] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 454.710425][ T4327] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 455.716717][ T7358] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 455.761656][ T4327] usb 5-1: config 0 has no interface number 0 [ 455.770297][ T7357] exFAT-fs (loop1): hint_cluster is invalid (17) [ 455.778551][ T7357] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 455.786650][ T7357] exFAT-fs (loop1): Filesystem has been set read-only [ 455.787337][ T4327] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 455.807112][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.821643][ T4327] usb 5-1: Product: syz [ 455.826700][ T4327] usb 5-1: Manufacturer: syz [ 455.831527][ T4327] usb 5-1: SerialNumber: syz [ 455.840407][ T4327] usb 5-1: config 0 descriptor?? [ 455.957649][ T4327] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 456.002703][ T7352] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.538: ea_inode with extended attributes [ 456.038859][ T7365] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 456.061893][ T7352] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.538: error while reading EA inode 11 err=-117 [ 456.102115][ T4327] usb 5-1: qt2_attach - failed to power on unit: -71 [ 456.131899][ T4327] quatech2: probe of 5-1:0.51 failed with error -71 [ 456.139480][ T7352] EXT4-fs (loop5): 1 orphan inode deleted [ 456.145522][ T7352] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 456.221691][ T4327] usb 5-1: USB disconnect, device number 3 [ 456.273331][ T7371] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 457.977076][ T7382] loop8: detected capacity change from 0 to 2048 [ 458.030633][ T7382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.931691][ T4997] EXT4-fs (loop5): unmounting filesystem. [ 459.140041][ T7390] loop1: detected capacity change from 0 to 32768 [ 459.242133][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 459.294629][ T7390] XFS (loop1): Mounting V5 Filesystem [ 461.296536][ T7390] XFS (loop1): Ending clean mount [ 461.307746][ T7390] XFS (loop1): Quotacheck needed: Please wait. [ 461.521206][ T7410] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 461.579111][ T7390] XFS (loop1): Quotacheck: Done. [ 462.037642][ T7418] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 463.271631][ T7424] sctp: failed to load transform for md5: -2 [ 463.491195][ T4275] XFS (loop1): Unmounting Filesystem [ 466.076599][ T7453] xt_limit: Overflow, try lower: 324382443/0 [ 466.556314][ T27] audit: type=1326 audit(1782164200.655:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.5.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9959b9ce59 code=0x7ffc0000 [ 466.622739][ T7455] loop5: detected capacity change from 0 to 4096 [ 466.664932][ T7455] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 466.679197][ T7455] ntfs3: loop5: Failed to load $BadClus. [ 466.726268][ T5604] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 466.992917][ T27] audit: type=1326 audit(1782164200.655:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.5.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9959b9ce59 code=0x7ffc0000 [ 467.309410][ T27] audit: type=1326 audit(1782164200.655:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.5.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9959b9ce59 code=0x7ffc0000 [ 467.333543][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.645944][ T7459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.710498][ T27] audit: type=1326 audit(1782164200.655:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.5.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9959b9ce59 code=0x7ffc0000 [ 467.755262][ T27] audit: type=1326 audit(1782164200.685:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.5.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9959b9ce59 code=0x7ffc0000 [ 467.780098][ T27] audit: type=1326 audit(1782164200.685:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.5.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9959b9ce59 code=0x7ffc0000 [ 467.803912][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.813187][ T27] audit: type=1326 audit(1782164200.685:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.5.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9959b9ce59 code=0x7ffc0000 [ 467.828453][ T7466] loop4: detected capacity change from 0 to 512 [ 467.836996][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.843132][ T27] audit: type=1326 audit(1782164200.685:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.5.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9959b9ce59 code=0x7ffc0000 [ 467.873933][ T27] audit: type=1326 audit(1782164200.685:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.5.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9959b9ce59 code=0x7ffc0000 [ 467.900139][ T27] audit: type=1326 audit(1782164200.685:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.5.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f9959b9ce59 code=0x7ffc0000 [ 468.154799][ T7470] loop5: detected capacity change from 0 to 512 [ 468.928275][ T5604] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 469.005859][ T7466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 469.034475][ T7466] ext4 filesystem being mounted at /122/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.920085][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 472.187836][ T7492] trusted_key: encrypted_key: insufficient parameters specified [ 472.735631][ T7494] sctp: failed to load transform for md5: -2 [ 473.189064][ T7507] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 477.087446][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.8.570'. [ 477.286770][ T7550] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 477.390679][ T7552] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 477.401996][ T7552] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.809922][ T7562] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 481.794942][ T7567] loop4: detected capacity change from 0 to 1024 [ 482.523846][ T7579] trusted_key: encrypted_key: insufficient parameters specified [ 483.323704][ T7580] device syzkaller0 entered promiscuous mode [ 484.338626][ T7601] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 484.416927][ T7604] batman_adv: batadv0: Adding interface: dummy0 [ 484.423232][ T7604] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.700923][ T7604] batman_adv: batadv0: Interface activated: dummy0 [ 484.847433][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.585'. [ 484.913346][ T7604] batadv0: mtu less than device minimum [ 484.927297][ T7604] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.939706][ T7604] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.951996][ T7604] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.964477][ T7604] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.976899][ T7604] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 484.989213][ T7604] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.001564][ T7604] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.013961][ T7604] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.026383][ T7604] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.937338][ T7617] loop5: detected capacity change from 0 to 512 [ 486.114227][ T7617] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 486.361182][ T7617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 486.506058][ T7617] System zones: 1-12 [ 486.778120][ T7617] EXT4-fs (loop5): 1 truncate cleaned up [ 486.896174][ T7617] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 488.755548][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 489.637127][ T4997] EXT4-fs (loop5): unmounting filesystem. [ 489.926194][ T7649] net_ratelimit: 12 callbacks suppressed [ 489.926285][ T7649] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 490.305702][ T7657] trusted_key: encrypted_key: insufficient parameters specified [ 490.841681][ T7659] virt_wifi0 speed is unknown, defaulting to 1000 [ 491.762744][ T7666] loop8: detected capacity change from 0 to 1024 [ 491.791065][ T7668] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 492.773524][ T7675] sctp: failed to load transform for md5: -2 [ 492.971272][ T7688] batman_adv: batadv0: Adding interface: dummy0 [ 492.985464][ T7688] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.203382][ T7688] batman_adv: batadv0: Interface activated: dummy0 [ 493.301950][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 494.902684][ T7690] batadv0: mtu less than device minimum [ 495.172761][ T7690] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.184953][ T7690] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.197217][ T7690] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.209387][ T7690] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.221612][ T7690] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.234200][ T7690] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.246438][ T7690] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.258767][ T7690] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.271019][ T7690] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.283091][ T7690] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.451179][ T7700] netlink: 23 bytes leftover after parsing attributes in process `syz.4.609'. [ 495.632929][ T7699] loop5: detected capacity change from 0 to 32768 [ 496.478785][ T7699] XFS (loop5): Mounting V5 Filesystem [ 496.589664][ T22] libceph: connect (1)[c::]:6789 error -101 [ 496.614342][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 496.679863][ T7700] ceph: No mds server is up or the cluster is laggy [ 497.117184][ T3655] libceph: connect (1)[c::]:6789 error -101 [ 497.124022][ T3655] libceph: mon0 (1)[c::]:6789 connect error [ 497.935200][ T22] libceph: connect (1)[c::]:6789 error -101 [ 498.008263][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 498.327732][ T7699] XFS (loop5): Ending clean mount [ 498.346053][ T7699] XFS (loop5): Quotacheck needed: Please wait. [ 499.288628][ T7699] XFS (loop5): Quotacheck: Done. [ 499.538829][ T4997] XFS (loop5): Unmounting Filesystem [ 499.641375][ T7743] CIFS mount error: No usable UNC path provided in device string! [ 499.641375][ T7743] [ 499.651541][ T7743] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 501.317301][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.323648][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.605558][ T7772] qnx6: unable to read the first superblock [ 503.620943][ T7772] random: crng reseeded on system resumption [ 504.742716][ T7780] net_ratelimit: 12 callbacks suppressed [ 504.742735][ T7780] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 505.083946][ T7787] loop7: detected capacity change from 0 to 32768 [ 505.222389][ T7787] XFS (loop7): Mounting V5 Filesystem [ 505.454608][ T7787] XFS (loop7): Ending clean mount [ 505.465628][ T7787] XFS (loop7): Quotacheck needed: Please wait. [ 505.988435][ T7787] XFS (loop7): Quotacheck: Done. [ 506.311418][ T7807] overlayfs: failed to resolve './bus': -2 [ 506.721279][ T7810] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 506.745937][ T4877] XFS (loop7): Unmounting Filesystem [ 508.477165][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 508.729435][ T26] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 508.778418][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.892451][ T26] usb 5-1: Product: syz [ 508.913878][ T7850] tipc: Enabling of bearer rejected, failed to enable media [ 508.934446][ T26] usb 5-1: Manufacturer: syz [ 508.970672][ T26] usb 5-1: SerialNumber: syz [ 509.210868][ T7857] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 509.844548][ T26] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 510.309396][ T26] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 510.321209][ T26] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 510.337593][ T7865] sctp: failed to load transform for md5: -2 [ 510.406884][ T26] lan78xx: probe of 5-1:1.0 failed with error -32 [ 510.755555][ T4293] Bluetooth: hci5: command 0xfc11 tx timeout [ 510.763581][ T4281] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 511.568050][ T7881] qnx6: unable to read the first superblock [ 511.581972][ T7881] random: crng reseeded on system resumption [ 512.404891][ T7890] loop7: detected capacity change from 0 to 32768 [ 512.423379][ T128] usb 5-1: USB disconnect, device number 4 [ 513.091667][ T7890] XFS (loop7): Mounting V5 Filesystem [ 513.492249][ T7890] XFS (loop7): Ending clean mount [ 513.500436][ T7890] XFS (loop7): Quotacheck needed: Please wait. [ 513.617492][ T7890] XFS (loop7): Quotacheck: Done. [ 514.418271][ T4877] XFS (loop7): Unmounting Filesystem [ 515.488089][ T7922] loop8: detected capacity change from 0 to 256 [ 515.596707][ T7922] FAT-fs (loop8): Directory bread(block 64) failed [ 515.613220][ T7922] FAT-fs (loop8): Directory bread(block 65) failed [ 515.631997][ T7922] FAT-fs (loop8): Directory bread(block 66) failed [ 515.655360][ T7922] FAT-fs (loop8): Directory bread(block 67) failed [ 515.661991][ T7922] FAT-fs (loop8): Directory bread(block 68) failed [ 515.685203][ T7922] FAT-fs (loop8): Directory bread(block 69) failed [ 515.691838][ T7922] FAT-fs (loop8): Directory bread(block 70) failed [ 515.738470][ T7922] FAT-fs (loop8): Directory bread(block 71) failed [ 515.755775][ T7922] FAT-fs (loop8): Directory bread(block 72) failed [ 515.762355][ T7922] FAT-fs (loop8): Directory bread(block 73) failed [ 515.853072][ T7934] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 517.758660][ T7927] tipc: Enabling of bearer rejected, failed to enable media [ 517.803169][ T4393] kworker/u4:8: attempt to access beyond end of device [ 517.803169][ T4393] loop8: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 517.923926][ T4393] kworker/u4:8: attempt to access beyond end of device [ 517.923926][ T4393] loop8: rw=1, sector=1864, nr_sectors = 64 limit=256 [ 518.042296][ T4393] kworker/u4:8: attempt to access beyond end of device [ 518.042296][ T4393] loop8: rw=1, sector=1960, nr_sectors = 2048 limit=256 [ 519.138174][ T4393] kworker/u4:8: attempt to access beyond end of device [ 519.138174][ T4393] loop8: rw=1, sector=4008, nr_sectors = 6176 limit=256 [ 520.063515][ T4393] kworker/u4:8: attempt to access beyond end of device [ 520.063515][ T4393] loop8: rw=1, sector=10184, nr_sectors = 9464 limit=256 [ 520.513198][ T4393] kworker/u4:8: attempt to access beyond end of device [ 520.513198][ T4393] loop8: rw=1, sector=19648, nr_sectors = 8176 limit=256 [ 520.656359][ T7957] netlink: 23 bytes leftover after parsing attributes in process `syz.1.654'. [ 520.741587][ T4393] kworker/u4:8: attempt to access beyond end of device [ 520.741587][ T4393] loop8: rw=1, sector=27824, nr_sectors = 5976 limit=256 [ 521.513209][ T4832] libceph: connect (1)[c::]:6789 error -101 [ 521.547056][ T4832] libceph: mon0 (1)[c::]:6789 connect error [ 521.553134][ T7957] ceph: No mds server is up or the cluster is laggy [ 521.888965][ T7969] loop4: detected capacity change from 0 to 32768 [ 521.897487][ T4832] libceph: connect (1)[c::]:6789 error -101 [ 521.903505][ T4832] libceph: mon0 (1)[c::]:6789 connect error [ 522.181090][ T7969] XFS (loop4): Mounting V5 Filesystem [ 522.286746][ T7969] XFS (loop4): Ending clean mount [ 522.294159][ T7969] XFS (loop4): Quotacheck needed: Please wait. [ 523.937644][ T7987] loop8: detected capacity change from 0 to 2048 [ 524.120804][ T7987] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 524.130279][ T7987] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.188822][ T7969] XFS (loop4): Quotacheck: Done. [ 524.945388][ T6547] EXT4-fs (loop8): unmounting filesystem. [ 525.004087][ T8000] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 525.142446][ T4273] XFS (loop4): Unmounting Filesystem [ 525.593745][ T8008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 525.602764][ T8008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 526.104514][ T8010] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 526.493672][ T8017] loop7: detected capacity change from 0 to 128 [ 526.604034][ T8017] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 526.618907][ T8017] hpfs: filesystem error: improperly stopped [ 526.625000][ T8017] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 526.632916][ T8017] hpfs: You really don't want any checks? You are crazy... [ 526.641700][ T8017] hpfs: hpfs_map_sector(): read error [ 526.647296][ T8017] hpfs: code page support is disabled [ 526.664387][ T8017] hpfs: hpfs_map_4sectors(): unaligned read [ 526.671418][ T8017] hpfs: hpfs_map_4sectors(): unaligned read [ 526.677447][ T8017] hpfs: filesystem error: unable to find root dir [ 527.716320][ T8025] device syzkaller0 entered promiscuous mode [ 527.872728][ T8029] loop8: detected capacity change from 0 to 512 [ 527.910742][ T8029] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 527.938117][ T8027] tipc: Enabled bearer , priority 0 [ 527.980476][ T8029] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 528.199062][ T8022] tipc: Resetting bearer [ 528.422090][ T8029] EXT4-fs error (device loop8): __ext4_get_inode_loc:4520: comm syz.8.668: Invalid inode table block 1 in block_group 0 [ 528.645760][ T8029] EXT4-fs (loop8): get root inode failed [ 528.651535][ T8029] EXT4-fs (loop8): mount failed [ 528.966710][ T8022] tipc: Disabling bearer [ 529.052676][ T8043] ubi0: attaching mtd0 [ 529.067195][ T8043] ubi0: scanning is finished [ 529.071884][ T8043] ubi0: empty MTD device detected [ 529.419892][ T8043] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 530.443225][ T27] kauditd_printk_skb: 218 callbacks suppressed [ 530.443319][ T27] audit: type=1326 audit(1782164264.535:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.5.671" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9959b9ce59 code=0x0 [ 530.523139][ T8052] netlink: 23 bytes leftover after parsing attributes in process `syz.7.669'. [ 530.686696][ T8054] ceph: No mds server is up or the cluster is laggy [ 530.794787][ T8060] loop8: detected capacity change from 0 to 32768 [ 530.822339][ T4327] libceph: connect (1)[c::]:6789 error -101 [ 530.937536][ T4327] libceph: mon0 (1)[c::]:6789 connect error [ 531.080329][ T8065] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.254512][ T8071] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 531.283410][ T8060] XFS (loop8): Mounting V5 Filesystem [ 531.374461][ T8060] XFS (loop8): Ending clean mount [ 531.392206][ T8060] XFS (loop8): Quotacheck needed: Please wait. [ 531.545280][ T5485] libceph: connect (1)[c::]:6789 error -101 [ 531.551778][ T5485] libceph: mon0 (1)[c::]:6789 connect error [ 532.129920][ T8060] XFS (loop8): Quotacheck: Done. [ 532.752104][ T8065] netlink: 160 bytes leftover after parsing attributes in process `syz.5.671'. [ 533.235412][ T8091] loop4: detected capacity change from 0 to 8192 [ 534.432434][ T6547] XFS (loop8): Unmounting Filesystem [ 537.050946][ T8102] loop5: detected capacity change from 0 to 4096 [ 537.218904][ T8114] loop1: detected capacity change from 0 to 512 [ 537.320113][ T8118] loop7: detected capacity change from 0 to 512 [ 537.451798][ T4280] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 537.822427][ T8121] netlink: 536 bytes leftover after parsing attributes in process `syz.1.683'. [ 538.450950][ T8118] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 538.516043][ T8118] ext4 filesystem being mounted at /114/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.872326][ T8132] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 538.881819][ T8132] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 541.531068][ T8139] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 541.824133][ T8142] netlink: 23 bytes leftover after parsing attributes in process `syz.8.687'. [ 541.888457][ T3655] libceph: connect (1)[c::]:6789 error -101 [ 541.894514][ T3655] libceph: mon0 (1)[c::]:6789 connect error [ 541.960661][ T8142] ceph: No mds server is up or the cluster is laggy [ 542.227463][ T3655] libceph: connect (1)[c::]:6789 error -101 [ 542.233569][ T3655] libceph: mon0 (1)[c::]:6789 connect error [ 542.607597][ T4877] EXT4-fs (loop7): unmounting filesystem. [ 542.752549][ T8154] loop1: detected capacity change from 0 to 128 [ 543.392055][ T8154] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 543.403940][ T8154] hpfs: filesystem error: improperly stopped [ 543.410014][ T8154] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 543.417779][ T8154] hpfs: You really don't want any checks? You are crazy... [ 543.425276][ T8154] hpfs: hpfs_map_sector(): read error [ 543.430653][ T8154] hpfs: code page support is disabled [ 543.436599][ T8154] hpfs: hpfs_map_4sectors(): unaligned read [ 543.442550][ T8154] hpfs: hpfs_map_4sectors(): unaligned read [ 543.448531][ T8154] hpfs: filesystem error: unable to find root dir [ 543.547298][ T8156] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 545.194272][ T8169] device syzkaller0 entered promiscuous mode [ 548.978826][ T8187] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 549.103815][ T8190] netlink: 'syz.7.696': attribute type 10 has an invalid length. [ 551.002076][ T8200] loop1: detected capacity change from 0 to 1024 [ 551.232986][ T8206] befs: (nbd4): No write support. Marking filesystem read-only [ 551.747467][ T52] block nbd4: Attempted send on invalid socket [ 551.753664][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.993947][ T8215] loop5: detected capacity change from 0 to 512 [ 554.256875][ T8215] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 554.349875][ T8215] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.050485][ T4997] EXT4-fs (loop5): unmounting filesystem. [ 558.505992][ T8248] loop8: detected capacity change from 0 to 16 [ 558.563586][ T8240] sctp: failed to load transform for md5: -2 [ 558.805166][ T8248] erofs: (device loop8): mounted with root inode @ nid 36. [ 558.942986][ T8259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 558.951048][ T8259] device bond0 left promiscuous mode [ 558.956580][ T8259] device bond_slave_0 left promiscuous mode [ 558.963129][ T8259] device bond_slave_1 left promiscuous mode [ 559.920327][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 560.362069][ T8267] loop7: detected capacity change from 0 to 32768 [ 560.592890][ T8267] XFS (loop7): Mounting V5 Filesystem [ 560.659819][ T8267] XFS (loop7): Ending clean mount [ 560.668412][ T8267] XFS (loop7): Quotacheck needed: Please wait. [ 560.950484][ T8267] XFS (loop7): Quotacheck: Done. [ 561.572499][ T8286] erofs: (device loop8): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 561.583691][ T8286] erofs: (device loop8): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 561.624100][ T8284] overlayfs: missing 'lowerdir' [ 561.829128][ T27] audit: type=1800 audit(1782164295.685:270): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.707" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 561.969115][ T4877] XFS (loop7): Unmounting Filesystem [ 562.769767][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.776231][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.549578][ T8306] virt_wifi0 speed is unknown, defaulting to 1000 [ 566.155668][ T8311] loop4: detected capacity change from 0 to 32768 [ 567.887783][ T8311] XFS (loop4): Mounting V5 Filesystem [ 568.227092][ T8329] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.721' sets config #1 [ 568.415215][ T8311] XFS (loop4): Ending clean mount [ 568.424925][ T8311] XFS (loop4): Quotacheck needed: Please wait. [ 568.664218][ T8311] XFS (loop4): Quotacheck: Done. [ 569.430296][ T8349] overlayfs: missing 'lowerdir' [ 570.025292][ T4273] XFS (loop4): Unmounting Filesystem [ 570.034194][ T8351] device bond0 entered promiscuous mode [ 570.046905][ T8356] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 570.142798][ T8351] device bond_slave_0 entered promiscuous mode [ 570.166506][ T8351] device bond_slave_1 entered promiscuous mode [ 570.449461][ T8361] loop8: detected capacity change from 0 to 32768 [ 570.608748][ T8361] XFS (loop8): Mounting V5 Filesystem [ 570.811245][ T8361] XFS (loop8): Ending clean mount [ 570.852362][ T8361] XFS (loop8): Quotacheck needed: Please wait. [ 571.066671][ T8390] netlink: 23 bytes leftover after parsing attributes in process `syz.5.731'. [ 571.864317][ T8384] Sensor B: ================= START STATUS ================= [ 571.926235][ T8384] Sensor B: Test Pattern: 75% Colorbar [ 571.937563][ T8384] Sensor B: Show Information: All [ 571.944031][ T8384] Sensor B: Vertical Flip: false [ 571.952336][ T8384] Sensor B: Horizontal Flip: false [ 571.958870][ T8384] Sensor B: Brightness: 128 [ 571.966729][ T8384] Sensor B: Contrast: 128 [ 571.975386][ T8361] XFS (loop8): Quotacheck: Done. [ 571.997083][ T8402] loop1: detected capacity change from 0 to 16 [ 572.123734][ T4832] libceph: connect (1)[c::]:6789 error -101 [ 572.141858][ T4832] libceph: mon0 (1)[c::]:6789 connect error [ 572.175590][ T8402] erofs: (device loop1): mounted with root inode @ nid 36. [ 572.193660][ T8384] Sensor B: Hue: 0 [ 572.209585][ T8384] Sensor B: Saturation: 128 [ 572.261379][ T8390] ceph: No mds server is up or the cluster is laggy [ 572.336455][ T8407] overlayfs: missing 'lowerdir' [ 572.472303][ T4832] libceph: connect (1)[c::]:6789 error -101 [ 572.647091][ T8384] Sensor B: ================== END STATUS ================== [ 572.789391][ T4832] libceph: mon0 (1)[c::]:6789 connect error [ 572.933111][ T8409] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 572.944589][ T8409] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 573.176868][ T27] audit: type=1800 audit(1782164307.055:271): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.732" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 573.343483][ T26] libceph: connect (1)[c::]:6789 error -101 [ 573.350612][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 573.369069][ T6547] XFS (loop8): Unmounting Filesystem [ 573.459195][ T8411] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 573.734877][ T8414] device syzkaller0 entered promiscuous mode [ 577.096005][ T8432] loop5: detected capacity change from 0 to 32768 [ 577.585204][ T8432] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 577.593864][ T8432] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 577.759232][ T8432] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 577.774976][ T4327] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 577.782597][ T4327] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 577.817358][ T4327] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 34ms [ 577.840544][ T4327] gfs2: fsid=syz:syz.0: jid=0: Done [ 577.851977][ T8432] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 578.541947][ T8432] gfs2: fsid=syz:syz.0: found 1 quota changes [ 580.957709][ T8446] tipc: Enabled bearer , priority 0 [ 580.994079][ T4997] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 580.994079][ T4997] inode = 11 2339 [ 580.994079][ T4997] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 581.156716][ T8444] tipc: Disabling bearer [ 581.205236][ T4997] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 581.214524][ T4997] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4997 [syz-executor] gfs2_quota_sync+0x355/0x780 [ 581.415612][ T4997] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 581.627936][ T4997] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 582.603563][ T4997] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 582.742052][ T4997] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 582.752869][ T4997] gfs2: fsid=syz:syz.0: File system withdrawn [ 582.759201][ T4997] CPU: 1 PID: 4997 Comm: syz-executor Not tainted syzkaller #0 [ 582.766806][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.776903][ T4997] Call Trace: [ 582.780197][ T4997] [ 582.783234][ T4997] dump_stack_lvl+0x188/0x24e [ 582.788002][ T4997] ? show_regs_print_info+0x12/0x12 [ 582.793246][ T4997] ? load_image+0x410/0x410 [ 582.797783][ T4997] ? kobject_uevent_env+0x364/0x890 [ 582.803027][ T4997] gfs2_withdraw+0xc69/0x1450 [ 582.807919][ T4997] ? gfs2_lm+0x240/0x240 [ 582.812184][ T4997] ? gfs2_consist_inode_i+0xf1/0x110 [ 582.817575][ T4997] gfs2_inode_refresh+0xb2d/0x1190 [ 582.822796][ T4997] ? gfs2_inode_metasync+0xf0/0xf0 [ 582.827974][ T4997] ? gfs2_glock_nq+0xcee/0x14d0 [ 582.832850][ T4997] gfs2_instantiate+0x15e/0x210 [ 582.837818][ T4997] gfs2_glock_wait+0x1d0/0x2a0 [ 582.842607][ T4997] do_sync+0x4af/0xbb0 [ 582.846699][ T4997] ? gfs2_quota_sync+0x355/0x780 [ 582.851679][ T4997] ? slot_put+0x1e0/0x1e0 [ 582.856050][ T4997] ? __lock_acquire+0x7bd0/0x7bd0 [ 582.861158][ T4997] ? do_raw_spin_lock+0x128/0x2f0 [ 582.866207][ T4997] ? gfs2_quota_sync+0x355/0x780 [ 582.871167][ T4997] ? do_raw_spin_unlock+0x11d/0x230 [ 582.876391][ T4997] gfs2_quota_sync+0x355/0x780 [ 582.881196][ T4997] gfs2_sync_fs+0x48/0xb0 [ 582.885559][ T4997] sync_filesystem+0xe6/0x220 [ 582.890355][ T4997] generic_shutdown_super+0x6b/0x340 [ 582.895744][ T4997] kill_block_super+0x7c/0xe0 [ 582.900470][ T4997] deactivate_locked_super+0x93/0xf0 [ 582.905787][ T4997] cleanup_mnt+0x471/0x4f0 [ 582.910248][ T4997] task_work_run+0x1d0/0x260 [ 582.914924][ T4997] ? task_work_cancel+0x220/0x220 [ 582.919983][ T4997] ? exit_to_user_mode_loop+0x3b/0x110 [ 582.925528][ T4997] exit_to_user_mode_loop+0xe6/0x110 [ 582.930860][ T4997] exit_to_user_mode_prepare+0xee/0x180 [ 582.936435][ T4997] syscall_exit_to_user_mode+0x16/0x40 [ 582.941962][ T4997] do_syscall_64+0x58/0xa0 [ 582.946442][ T4997] ? clear_bhb_loop+0x60/0xb0 [ 582.951178][ T4997] ? clear_bhb_loop+0x60/0xb0 [ 582.955876][ T4997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.961834][ T4997] RIP: 0033:0x7f9959b9e097 [ 582.966285][ T4997] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 582.985945][ T4997] RSP: 002b:00007fffdcbe31f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 582.994427][ T4997] RAX: 0000000000000000 RBX: 00007f9959c322ca RCX: 00007f9959b9e097 [ 583.002423][ T4997] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdcbe32b0 [ 583.010418][ T4997] RBP: 00007fffdcbe32b0 R08: 00007fffdcbe42b0 R09: 00000000ffffffff [ 583.018492][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdcbe4340 [ 583.026481][ T4997] R13: 00007f9959c322ca R14: 000000000008cdae R15: 00007fffdcbe4380 [ 583.034506][ T4997] [ 583.106145][ T4997] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 583.285350][ T4997] CPU: 1 PID: 4997 Comm: syz-executor Not tainted syzkaller #0 [ 583.292980][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 583.303063][ T4997] Call Trace: [ 583.306375][ T4997] [ 583.309357][ T4997] dump_stack_lvl+0x188/0x24e [ 583.314084][ T4997] ? gfs2_assert_warn_i+0xbb/0x2c0 [ 583.319242][ T4997] ? show_regs_print_info+0x12/0x12 [ 583.324467][ T4997] ? load_image+0x410/0x410 [ 583.329007][ T4997] ? do_raw_spin_unlock+0x11d/0x230 [ 583.334261][ T4997] gfs2_assert_warn_i+0x187/0x2c0 [ 583.339331][ T4997] gfs2_quota_cleanup+0x48c/0x670 [ 583.344392][ T4997] gfs2_put_super+0x22f/0x920 [ 583.349116][ T4997] ? gfs2_evict_inode+0x1290/0x1290 [ 583.354356][ T4997] generic_shutdown_super+0x130/0x340 [ 583.359779][ T4997] kill_block_super+0x7c/0xe0 [ 583.364513][ T4997] deactivate_locked_super+0x93/0xf0 [ 583.369843][ T4997] cleanup_mnt+0x471/0x4f0 [ 583.374308][ T4997] task_work_run+0x1d0/0x260 [ 583.378944][ T4997] ? task_work_cancel+0x220/0x220 [ 583.384031][ T4997] ? exit_to_user_mode_loop+0x3b/0x110 [ 583.389536][ T4997] exit_to_user_mode_loop+0xe6/0x110 [ 583.394878][ T4997] exit_to_user_mode_prepare+0xee/0x180 [ 583.400495][ T4997] syscall_exit_to_user_mode+0x16/0x40 [ 583.406017][ T4997] do_syscall_64+0x58/0xa0 [ 583.410477][ T4997] ? clear_bhb_loop+0x60/0xb0 [ 583.415273][ T4997] ? clear_bhb_loop+0x60/0xb0 [ 583.420002][ T4997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.425941][ T4997] RIP: 0033:0x7f9959b9e097 [ 583.430420][ T4997] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 583.450065][ T4997] RSP: 002b:00007fffdcbe31f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 583.458518][ T4997] RAX: 0000000000000000 RBX: 00007f9959c322ca RCX: 00007f9959b9e097 [ 583.466572][ T4997] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdcbe32b0 [ 583.474574][ T4997] RBP: 00007fffdcbe32b0 R08: 00007fffdcbe42b0 R09: 00000000ffffffff [ 583.482576][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdcbe4340 [ 583.490582][ T4997] R13: 00007f9959c322ca R14: 000000000008cdae R15: 00007fffdcbe4380 [ 583.498602][ T4997] [ 583.552046][ T8485] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 585.106265][ T8498] device syzkaller0 entered promiscuous mode [ 588.411746][ T8513] loop4: detected capacity change from 0 to 32768 [ 588.535435][ T8513] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 588.543773][ T8513] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 588.616998][ T8513] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 588.645264][ T14] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 588.652217][ T14] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 589.316389][ T8519] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 589.354612][ T8522] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 589.452937][ T14] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 800ms [ 589.504138][ T14] gfs2: fsid=syz:syz.0: jid=0: Done [ 589.537593][ T8513] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 589.756959][ T8513] gfs2: fsid=syz:syz.0: found 1 quota changes [ 589.862522][ T8530] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 589.862522][ T8530] inode = 11 2339 [ 589.862522][ T8530] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 590.630707][ T8530] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 590.998252][ T8530] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8530 [gfs2_quotad] gfs2_quota_sync+0x355/0x780 [ 591.015228][ T8530] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 592.639325][ T8530] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 592.983272][ T8530] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 593.136250][ T8539] loop8: detected capacity change from 0 to 4096 [ 594.360430][ T8530] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 594.426582][ T8530] gfs2: fsid=syz:syz.0: File system withdrawn [ 594.524186][ T8530] CPU: 1 PID: 8530 Comm: gfs2_quotad Not tainted syzkaller #0 [ 594.531742][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 594.541841][ T8530] Call Trace: [ 594.545165][ T8530] [ 594.548171][ T8530] dump_stack_lvl+0x188/0x24e [ 594.552906][ T8530] ? show_regs_print_info+0x12/0x12 [ 594.558156][ T8530] ? load_image+0x410/0x410 [ 594.562714][ T8530] ? kobject_uevent_env+0x364/0x890 [ 594.567980][ T8530] gfs2_withdraw+0xc69/0x1450 [ 594.572718][ T8530] ? gfs2_lm+0x240/0x240 [ 594.577026][ T8530] ? gfs2_consist_inode_i+0xf1/0x110 [ 594.582364][ T8530] gfs2_inode_refresh+0xb2d/0x1190 [ 594.587540][ T8530] ? gfs2_inode_metasync+0xf0/0xf0 [ 594.592707][ T8530] ? gfs2_glock_nq+0xcee/0x14d0 [ 594.597609][ T8530] gfs2_instantiate+0x15e/0x210 [ 594.602505][ T8530] gfs2_glock_wait+0x1d0/0x2a0 [ 594.607325][ T8530] do_sync+0x4af/0xbb0 [ 594.611443][ T8530] ? gfs2_quota_sync+0x355/0x780 [ 594.616458][ T8530] ? slot_put+0x1e0/0x1e0 [ 594.620836][ T8530] ? __lock_acquire+0x7bd0/0x7bd0 [ 594.625898][ T8530] ? do_raw_spin_lock+0x128/0x2f0 [ 594.630970][ T8530] ? gfs2_quota_sync+0x355/0x780 [ 594.635959][ T8530] ? do_raw_spin_unlock+0x11d/0x230 [ 594.641231][ T8530] gfs2_quota_sync+0x355/0x780 [ 594.646061][ T8530] gfs2_quotad+0x421/0x690 [ 594.650528][ T8530] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 594.655683][ T8530] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 594.661634][ T8530] ? wake_bit_function+0x200/0x200 [ 594.666870][ T8530] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 594.672817][ T8530] ? __kthread_parkme+0x71/0x1c0 [ 594.677863][ T8530] ? __kthread_parkme+0x15b/0x1c0 [ 594.682937][ T8530] kthread+0x29d/0x330 [ 594.687075][ T8530] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 594.692235][ T8530] ? kthread_blkcg+0xd0/0xd0 [ 594.696897][ T8530] ret_from_fork+0x1f/0x30 [ 594.701391][ T8530] [ 594.810966][ T4273] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 595.266388][ T4273] CPU: 0 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 595.274032][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 595.284123][ T4273] Call Trace: [ 595.287431][ T4273] [ 595.290383][ T4273] dump_stack_lvl+0x188/0x24e [ 595.295106][ T4273] ? gfs2_assert_warn_i+0xbb/0x2c0 [ 595.300269][ T4273] ? show_regs_print_info+0x12/0x12 [ 595.305511][ T4273] ? load_image+0x410/0x410 [ 595.310066][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 595.315305][ T4273] gfs2_assert_warn_i+0x187/0x2c0 [ 595.320379][ T4273] gfs2_quota_cleanup+0x48c/0x670 [ 595.325458][ T4273] gfs2_put_super+0x22f/0x920 [ 595.330185][ T4273] ? gfs2_evict_inode+0x1290/0x1290 [ 595.335430][ T4273] generic_shutdown_super+0x130/0x340 [ 595.340854][ T4273] kill_block_super+0x7c/0xe0 [ 595.345591][ T4273] deactivate_locked_super+0x93/0xf0 [ 595.350919][ T4273] cleanup_mnt+0x471/0x4f0 [ 595.355383][ T4273] task_work_run+0x1d0/0x260 [ 595.360023][ T4273] ? task_work_cancel+0x220/0x220 [ 595.365091][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 595.370603][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 595.375934][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 595.381561][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 595.387074][ T4273] do_syscall_64+0x58/0xa0 [ 595.391537][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 595.396250][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 595.400968][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.406901][ T4273] RIP: 0033:0x7fb63bf9e097 [ 595.411355][ T4273] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 595.431004][ T4273] RSP: 002b:00007fff32629578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 595.439467][ T4273] RAX: 0000000000000000 RBX: 00007fb63c0322ca RCX: 00007fb63bf9e097 [ 595.447507][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff32629630 [ 595.455511][ T4273] RBP: 00007fff32629630 R08: 00007fff3262a630 R09: 00000000ffffffff [ 595.463518][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3262a6c0 [ 595.471518][ T4273] R13: 00007fb63c0322ca R14: 0000000000090464 R15: 00007fff3262a700 [ 595.479532][ T4273] [ 597.966087][ T8596] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 598.284573][ T8607] loop4: detected capacity change from 0 to 8 [ 598.317024][ T8603] device syzkaller0 entered promiscuous mode [ 598.411938][ T8607] squashfs image failed sanity check [ 600.025306][ T8181] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 600.659221][ T8622] loop7: detected capacity change from 0 to 512 [ 600.726729][ T8622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.959595][ T8622] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 601.369655][ T8622] EXT4-fs (loop7): 1 truncate cleaned up [ 601.479034][ T8622] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 603.141190][ T4877] EXT4-fs (loop7): unmounting filesystem. [ 603.209283][ T8645] CIFS mount error: No usable UNC path provided in device string! [ 603.209283][ T8645] [ 603.219416][ T8645] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 603.968337][ T8654] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 604.012636][ T8650] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 604.078086][ T8658] tipc: Enabling of bearer rejected, failed to enable media [ 605.448990][ T8675] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 605.939096][ T8683] loop4: detected capacity change from 0 to 512 [ 606.651477][ T8683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 606.661540][ T8683] ext4: Unknown parameter 'fscontext' [ 606.760735][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.787'. [ 607.370820][ T8698] CIFS mount error: No usable UNC path provided in device string! [ 607.370820][ T8698] [ 607.380947][ T8698] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 607.767651][ T8699] loop4: detected capacity change from 0 to 2048 [ 608.083505][ T8701] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 609.138384][ T8712] device syzkaller0 entered promiscuous mode [ 609.337320][ T8717] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 609.366386][ T8718] tipc: Enabling of bearer rejected, failed to enable media [ 610.405577][ T8725] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 610.599251][ T8733] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 612.976828][ T8759] loop4: detected capacity change from 0 to 16 [ 613.057694][ T8759] erofs: Unknown parameter 'ãé' [ 614.119361][ T47] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 614.260633][ T8770] atomic_op ffff888029697198 conn xmit_atomic 0000000000000000 [ 615.281685][ T8775] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 615.670859][ T8784] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 615.682394][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.8.813'. [ 616.030672][ T8790] device syzkaller0 entered promiscuous mode [ 616.408284][ T8790] tipc: Enabling of bearer rejected, failed to enable media [ 622.085939][ T8839] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 623.040626][ T8851] loop5: detected capacity change from 0 to 512 [ 623.067687][ T8852] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 623.085228][ T8851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 623.122654][ T8851] ext4: Unknown parameter 'fscontext' [ 623.465885][ T8181] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 624.275958][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.299435][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.498586][ T8530] ================================================================== [ 625.506895][ T8530] BUG: KASAN: use-after-free in __lock_acquire+0x107/0x7bd0 [ 625.514298][ T8530] Read of size 8 at addr ffff8880779f4bb0 by task gfs2_quotad/8530 [ 625.522235][ T8530] [ 625.524640][ T8530] CPU: 0 PID: 8530 Comm: gfs2_quotad Not tainted syzkaller #0 [ 625.532125][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 625.542213][ T8530] Call Trace: [ 625.545521][ T8530] [ 625.548486][ T8530] dump_stack_lvl+0x188/0x24e [ 625.553216][ T8530] ? __lock_acquire+0x7bd0/0x7bd0 [ 625.558281][ T8530] ? show_regs_print_info+0x12/0x12 [ 625.563558][ T8530] ? load_image+0x410/0x410 [ 625.568093][ T8530] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 625.573590][ T8530] ? __virt_addr_valid+0x188/0x540 [ 625.578818][ T8530] ? __virt_addr_valid+0x467/0x540 [ 625.583991][ T8530] ? __lock_acquire+0x107/0x7bd0 [ 625.589008][ T8530] print_report+0xa8/0x210 [ 625.593503][ T8530] kasan_report+0x10b/0x140 [ 625.598124][ T8530] ? __lock_acquire+0x107/0x7bd0 [ 625.603107][ T8530] __lock_acquire+0x107/0x7bd0 [ 625.607927][ T8530] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 625.613962][ T8530] ? lock_chain_count+0x20/0x20 [ 625.618863][ T8530] ? __free_object+0x218/0xa60 [ 625.623719][ T8530] ? lockdep_hardirqs_on+0x94/0x140 [ 625.628946][ T8530] ? verify_lock_unused+0x140/0x140 [ 625.634205][ T8530] ? alloc_object+0x640/0x640 [ 625.638929][ T8530] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 625.644972][ T8530] ? __lock_acquire+0x7bd0/0x7bd0 [ 625.650035][ T8530] ? lock_chain_count+0x20/0x20 [ 625.654944][ T8530] lock_acquire+0x1bb/0x4a0 [ 625.659509][ T8530] ? finish_wait+0xbb/0x1c0 [ 625.664049][ T8530] ? timer_delete_sync+0x20/0x20 [ 625.669089][ T8530] ? read_lock_is_recursive+0x10/0x10 [ 625.674499][ T8530] _raw_spin_lock_irqsave+0xb0/0x100 [ 625.679900][ T8530] ? finish_wait+0xbb/0x1c0 [ 625.684441][ T8530] ? _raw_spin_lock+0x40/0x40 [ 625.689161][ T8530] ? update_process_times+0x1b0/0x1b0 [ 625.694567][ T8530] finish_wait+0xbb/0x1c0 [ 625.698941][ T8530] gfs2_quotad+0x501/0x690 [ 625.703405][ T8530] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 625.708543][ T8530] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 625.714465][ T8530] ? wake_bit_function+0x200/0x200 [ 625.719635][ T8530] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 625.725562][ T8530] ? __kthread_parkme+0x71/0x1c0 [ 625.730541][ T8530] ? __kthread_parkme+0x15b/0x1c0 [ 625.735617][ T8530] kthread+0x29d/0x330 [ 625.739724][ T8530] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 625.744871][ T8530] ? kthread_blkcg+0xd0/0xd0 [ 625.749505][ T8530] ret_from_fork+0x1f/0x30 [ 625.753973][ T8530] [ 625.757062][ T8530] [ 625.759404][ T8530] Allocated by task 8790: [ 625.763791][ T8530] kasan_set_track+0x4b/0x70 [ 625.768420][ T8530] __kasan_kmalloc+0x8e/0xa0 [ 625.773051][ T8530] __kmalloc_node+0xb2/0x240 [ 625.777761][ T8530] kvmalloc_node+0x6c/0x180 [ 625.782320][ T8530] pfifo_fast_init+0x109/0x6a0 [ 625.787115][ T8530] qdisc_create_dflt+0x11a/0x490 [ 625.792089][ T8530] dev_activate+0x392/0x1150 [ 625.796717][ T8530] __dev_open+0x343/0x430 [ 625.801093][ T8530] __dev_change_flags+0x1e4/0x6a0 [ 625.806188][ T8530] dev_change_flags+0x78/0x1a0 [ 625.811072][ T8530] dev_ifsioc+0x130/0xd50 [ 625.815478][ T8530] dev_ioctl+0x55e/0xe80 [ 625.819763][ T8530] sock_do_ioctl+0x245/0x320 [ 625.824448][ T8530] sock_ioctl+0x48a/0x700 [ 625.828817][ T8530] __se_sys_ioctl+0xfa/0x170 [ 625.833441][ T8530] do_syscall_64+0x4c/0xa0 [ 625.837881][ T8530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.843809][ T8530] [ 625.846157][ T8530] Freed by task 8790: [ 625.850158][ T8530] kasan_set_track+0x4b/0x70 [ 625.854784][ T8530] kasan_save_free_info+0x27/0x40 [ 625.859852][ T8530] ____kasan_slab_free+0x126/0x1f0 [ 625.865006][ T8530] slab_free_freelist_hook+0x133/0x1b0 [ 625.870500][ T8530] __kmem_cache_free+0xb6/0x200 [ 625.875376][ T8530] pfifo_fast_destroy+0x49/0xd0 [ 625.880264][ T8530] __qdisc_destroy+0x115/0x430 [ 625.885062][ T8530] htb_attach+0x2bb/0x520 [ 625.889523][ T8530] qdisc_graft+0x129c/0x15b0 [ 625.894142][ T8530] tc_modify_qdisc+0xe91/0x1de0 [ 625.899019][ T8530] rtnetlink_rcv_msg+0x863/0xfb0 [ 625.904081][ T8530] netlink_rcv_skb+0x1ef/0x440 [ 625.908908][ T8530] netlink_unicast+0x7ad/0x920 [ 625.913709][ T8530] netlink_sendmsg+0x8ad/0xbd0 [ 625.918507][ T8530] ____sys_sendmsg+0x5ed/0x9a0 [ 625.923321][ T8530] ___sys_sendmsg+0x2a2/0x360 [ 625.928029][ T8530] __se_sys_sendmsg+0x1c3/0x2b0 [ 625.932910][ T8530] do_syscall_64+0x4c/0xa0 [ 625.937369][ T8530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.943301][ T8530] [ 625.945656][ T8530] The buggy address belongs to the object at ffff8880779f4000 [ 625.945656][ T8530] which belongs to the cache kmalloc-8k of size 8192 [ 625.959803][ T8530] The buggy address is located 2992 bytes inside of [ 625.959803][ T8530] 8192-byte region [ffff8880779f4000, ffff8880779f6000) [ 625.973278][ T8530] [ 625.975630][ T8530] The buggy address belongs to the physical page: [ 625.982144][ T8530] page:ffffea0001de7c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x779f0 [ 625.992321][ T8530] head:ffffea0001de7c00 order:3 compound_mapcount:0 compound_pincount:0 [ 626.000672][ T8530] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 626.008703][ T8530] raw: 00fff00000010200 ffffea0001d13800 dead000000000002 ffff888017442280 [ 626.017314][ T8530] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 626.025918][ T8530] page dumped because: kasan: bad access detected [ 626.032356][ T8530] page_owner tracks the page as allocated [ 626.038094][ T8530] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4023, tgid 4023 (start-stop-daem), ts 51813657137, free_ts 51756293206 [ 626.058968][ T8530] post_alloc_hook+0x173/0x1a0 [ 626.063843][ T8530] get_page_from_freelist+0x206b/0x2180 [ 626.069466][ T8530] __alloc_pages+0x1ec/0x4f0 [ 626.074107][ T8530] alloc_slab_page+0x5d/0x180 [ 626.078814][ T8530] new_slab+0x87/0x2d0 [ 626.082920][ T8530] ___slab_alloc+0xbc5/0x1240 [ 626.087620][ T8530] __kmem_cache_alloc_node+0x126/0x270 [ 626.093102][ T8530] kmalloc_trace+0x26/0xe0 [ 626.097549][ T8530] tomoyo_init_log+0x10a3/0x1f90 [ 626.102575][ T8530] tomoyo_supervisor+0x361/0x11b0 [ 626.107631][ T8530] tomoyo_env_perm+0x14e/0x1f0 [ 626.112476][ T8530] tomoyo_find_next_domain+0x12dd/0x1a30 [ 626.118147][ T8530] tomoyo_bprm_check_security+0x100/0x150 [ 626.123931][ T8530] security_bprm_check+0x5e/0x90 [ 626.128948][ T8530] bprm_execve+0xa5d/0x17e0 [ 626.133497][ T8530] do_execveat_common+0x501/0x6b0 [ 626.138561][ T8530] page last free stack trace: [ 626.143253][ T8530] free_unref_page_prepare+0x8e5/0x9e0 [ 626.148788][ T8530] free_unref_page+0x2e/0x3f0 [ 626.153596][ T8530] qlist_free_all+0x76/0xe0 [ 626.158129][ T8530] kasan_quarantine_reduce+0x144/0x160 [ 626.163628][ T8530] __kasan_slab_alloc+0x1e/0x80 [ 626.168515][ T8530] slab_post_alloc_hook+0x4b/0x490 [ 626.173658][ T8530] kmem_cache_alloc+0x18b/0x2f0 [ 626.178545][ T8530] vm_area_alloc+0x20/0xe0 [ 626.183048][ T8530] mmap_region+0xcbc/0x1c50 [ 626.187654][ T8530] do_mmap+0x9ce/0x10d0 [ 626.191867][ T8530] vm_mmap_pgoff+0x1c1/0x2d0 [ 626.196505][ T8530] ksys_mmap_pgoff+0x4bf/0x720 [ 626.201321][ T8530] do_syscall_64+0x4c/0xa0 [ 626.205772][ T8530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.211703][ T8530] [ 626.214047][ T8530] Memory state around the buggy address: [ 626.219701][ T8530] ffff8880779f4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 626.227802][ T8530] ffff8880779f4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 626.235887][ T8530] >ffff8880779f4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 626.243978][ T8530] ^ [ 626.249635][ T8530] ffff8880779f4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 626.257807][ T8530] ffff8880779f4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 626.265905][ T8530] ================================================================== [ 626.274007][ T8530] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 626.281212][ T8530] CPU: 0 PID: 8530 Comm: gfs2_quotad Not tainted syzkaller #0 [ 626.288693][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.298772][ T8530] Call Trace: [ 626.302072][ T8530] [ 626.305030][ T8530] dump_stack_lvl+0x188/0x24e [ 626.309735][ T8530] ? memcpy+0x3c/0x60 [ 626.313739][ T8530] ? show_regs_print_info+0x12/0x12 [ 626.318972][ T8530] ? load_image+0x410/0x410 [ 626.323520][ T8530] panic+0x2d3/0x710 [ 626.327437][ T8530] ? __lock_acquire+0x7bd0/0x7bd0 [ 626.332585][ T8530] ? bpf_jit_dump+0xd0/0xd0 [ 626.337128][ T8530] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 626.343049][ T8530] ? _raw_spin_unlock+0x40/0x40 [ 626.347934][ T8530] check_panic_on_warn+0x80/0xa0 [ 626.353075][ T8530] ? __lock_acquire+0x107/0x7bd0 [ 626.358049][ T8530] end_report+0x66/0x110 [ 626.362324][ T8530] kasan_report+0x118/0x140 [ 626.366849][ T8530] ? __lock_acquire+0x107/0x7bd0 [ 626.371858][ T8530] __lock_acquire+0x107/0x7bd0 [ 626.376746][ T8530] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 626.382756][ T8530] ? lock_chain_count+0x20/0x20 [ 626.387627][ T8530] ? __free_object+0x218/0xa60 [ 626.392405][ T8530] ? lockdep_hardirqs_on+0x94/0x140 [ 626.397622][ T8530] ? verify_lock_unused+0x140/0x140 [ 626.402950][ T8530] ? alloc_object+0x640/0x640 [ 626.407646][ T8530] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 626.413639][ T8530] ? __lock_acquire+0x7bd0/0x7bd0 [ 626.418686][ T8530] ? lock_chain_count+0x20/0x20 [ 626.423563][ T8530] lock_acquire+0x1bb/0x4a0 [ 626.428085][ T8530] ? finish_wait+0xbb/0x1c0 [ 626.432630][ T8530] ? timer_delete_sync+0x20/0x20 [ 626.437582][ T8530] ? read_lock_is_recursive+0x10/0x10 [ 626.442982][ T8530] _raw_spin_lock_irqsave+0xb0/0x100 [ 626.448323][ T8530] ? finish_wait+0xbb/0x1c0 [ 626.452847][ T8530] ? _raw_spin_lock+0x40/0x40 [ 626.457819][ T8530] ? update_process_times+0x1b0/0x1b0 [ 626.463219][ T8530] finish_wait+0xbb/0x1c0 [ 626.467569][ T8530] gfs2_quotad+0x501/0x690 [ 626.472023][ T8530] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 626.477173][ T8530] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 626.483090][ T8530] ? wake_bit_function+0x200/0x200 [ 626.488228][ T8530] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 626.494137][ T8530] ? __kthread_parkme+0x71/0x1c0 [ 626.499098][ T8530] ? __kthread_parkme+0x15b/0x1c0 [ 626.504150][ T8530] kthread+0x29d/0x330 [ 626.508238][ T8530] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 626.513383][ T8530] ? kthread_blkcg+0xd0/0xd0 [ 626.518007][ T8530] ret_from_fork+0x1f/0x30 [ 626.522447][ T8530] [ 626.526069][ T8530] Kernel Offset: disabled [ 626.530401][ T8530] Rebooting in 86400 seconds..