last executing test programs: 20m32.434624797s ago: executing program 32 (id=402): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004017}, 0x81) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc2663192cab715837"], 0x1c}}, 0x40000) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 15m24.970103076s ago: executing program 2 (id=868): r0 = socket(0x23, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) exit(0xc) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000080)=""/29) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) creat(&(0x7f0000000240)='./file0\x00', 0x81) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00') rename(0x0, &(0x7f0000000140)='./file0\x00') sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000005200010000000000000000000a0000006d90888ea26d974e902867d6c1f5f1bca9218efb20c23b90fdf5e5ba102482e8c372d0daacab60c41ded92dc6489081a1884f38d0fbd9905bf9edb6ea48e2863311fe2c3773938c5d443c2921ea55a17f529bd99ea7dee82654fc03b406730e22069bfcf51a58890db0982eed87f52ff"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15m23.609925982s ago: executing program 2 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r4, 0x0, 0x0, 0x142, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) r6 = fsopen(&(0x7f0000000100)='erofs\x00', 0x1) close(r6) 15m19.485635491s ago: executing program 2 (id=875): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000080)='./file1\x00', 0x1000000, &(0x7f0000000180)=ANY=[], 0x1, 0x363, &(0x7f0000000600)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) read$FUSE(r4, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f00000002c0)={0x4, 0x7, 0x1, 0x9db, 0x7, 0x7f, 0x8}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) 15m16.979994957s ago: executing program 2 (id=882): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801) signalfd(r3, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x40030000000000}, 0x4000) 15m11.853027592s ago: executing program 2 (id=887): modify_ldt$write2(0x11, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xdfe8, 0x0, 0x8, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc21, 0x0, 0x0, 0x2], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x400000, 0xfffffffd, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x4], [0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) unshare(0x2a020480) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(0x0, 0x8, 0xc00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x200000, 0x200000, 0x7, 0x0, 0x5}) r3 = socket(0x11, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)={0x4, 0x5, 0x5, 0xeac00, 0x1}) 15m4.141525116s ago: executing program 2 (id=896): r0 = socket(0x23, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) exit(0xc) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000080)=""/29) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) creat(&(0x7f0000000240)='./file0\x00', 0x81) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00') rename(0x0, &(0x7f0000000140)='./file0\x00') sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000005200010000000000000000000a0000006d90888ea26d974e902867d6c1f5f1bca9218efb20c23b90fdf5e5ba102482e8c372d0daacab60c41ded92dc6489081a1884f38d0fbd9905bf9edb6ea48e2863311fe2c3773938c5d443c2921ea55a17f529bd99ea7dee82654fc03b406730e22069bfcf51a58890db0982eed87f52ff"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14m46.805987702s ago: executing program 33 (id=896): r0 = socket(0x23, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) exit(0xc) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000080)=""/29) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) creat(&(0x7f0000000240)='./file0\x00', 0x81) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00') rename(0x0, &(0x7f0000000140)='./file0\x00') sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000005200010000000000000000000a0000006d90888ea26d974e902867d6c1f5f1bca9218efb20c23b90fdf5e5ba102482e8c372d0daacab60c41ded92dc6489081a1884f38d0fbd9905bf9edb6ea48e2863311fe2c3773938c5d443c2921ea55a17f529bd99ea7dee82654fc03b406730e22069bfcf51a58890db0982eed87f52ff"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11m11.1090484s ago: executing program 4 (id=1193): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = signalfd(r0, &(0x7f00000001c0)={[0x9]}, 0x8) pidfd_send_signal(r4, 0xffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_open_dev$ndb(0x0, 0x0, 0x14401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 11m9.782947776s ago: executing program 4 (id=1197): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) prlimit64(r5, 0xd, &(0x7f0000000280)={0x100000000, 0xf}, &(0x7f00000003c0)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0) r7 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r8 = fcntl$dupfd(r7, 0x0, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) 10m59.196664315s ago: executing program 4 (id=1203): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x10, 0x1401, 0x301, 0x70bd2a, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x8080) r6 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, 0x0) sendmsg$nl_route(r1, 0x0, 0x48010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socketpair(0x26, 0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x3, 0xc, 0x6}) 10m56.560459564s ago: executing program 3 (id=1208): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 10m54.715057893s ago: executing program 4 (id=1210): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 10m54.656000124s ago: executing program 3 (id=1211): mknod(0x0, 0x1ffa, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x5d}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sg(0x0, 0xf17, 0x100) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000100)) 10m53.429535956s ago: executing program 3 (id=1212): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x1) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 10m52.067722412s ago: executing program 3 (id=1215): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) sendmsg$NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010028bd7000fbdbdf"], 0x1c}, 0x1, 0x0, 0x0, 0xdd20e1676ce9cab4}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, 0x0, 0x10b8}, 0x8000) prlimit64(r5, 0xd, 0x0, &(0x7f00000003c0)) openat$nullb(0xffffff9c, 0x0, 0x200, 0x0) pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0) r9 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r10 = fcntl$dupfd(r9, 0x0, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 10m51.877103308s ago: executing program 4 (id=1216): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801) signalfd(r3, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x40030000000000}, 0x4000) 10m48.974740634s ago: executing program 4 (id=1217): r0 = socket(0x23, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) exit(0xc) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r3, 0x40304580, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000080)=""/29) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) creat(&(0x7f0000000240)='./file0\x00', 0x81) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00') rename(0x0, &(0x7f0000000140)='./file0\x00') sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000005200010000000000000000000a0000006d90888ea26d974e902867d6c1f5f1bca9218efb20c23b90fdf5e5ba102482e8c372d0daacab60c41ded92dc6489081a1884f38d0fbd9905bf9edb6ea48e2863311fe2c3773938c5d443c2921ea55a17f529bd99ea7dee82654fc03b406730e22069bfcf51a58890db0982eed87f52ff"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10m48.73597035s ago: executing program 3 (id=1220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x1, 0x5003) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = signalfd(r1, &(0x7f00000001c0)={[0x9]}, 0x8) pidfd_send_signal(r4, 0xffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_open_dev$ndb(0x0, 0x0, 0x14401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10m44.704512847s ago: executing program 3 (id=1224): mknod(0x0, 0x1ffa, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x5d}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sg(0x0, 0xf17, 0x100) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000100)) 10m32.186038476s ago: executing program 34 (id=1217): r0 = socket(0x23, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) exit(0xc) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r3, 0x40304580, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000080)=""/29) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) creat(&(0x7f0000000240)='./file0\x00', 0x81) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00') rename(0x0, &(0x7f0000000140)='./file0\x00') sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000005200010000000000000000000a0000006d90888ea26d974e902867d6c1f5f1bca9218efb20c23b90fdf5e5ba102482e8c372d0daacab60c41ded92dc6489081a1884f38d0fbd9905bf9edb6ea48e2863311fe2c3773938c5d443c2921ea55a17f529bd99ea7dee82654fc03b406730e22069bfcf51a58890db0982eed87f52ff"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10m27.968366948s ago: executing program 35 (id=1224): mknod(0x0, 0x1ffa, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x5d}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sg(0x0, 0xf17, 0x100) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000100)) 8m29.55886426s ago: executing program 1 (id=1386): sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 8m27.365007239s ago: executing program 1 (id=1389): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000080)='./file1\x00', 0x1000000, &(0x7f0000000180)=ANY=[], 0x1, 0x363, &(0x7f0000000600)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) read$FUSE(r3, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r3, 0xc040583f, 0x0) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f00000002c0)={0x4, 0x7, 0x1, 0x9db, 0x7, 0x7f, 0x8}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) 8m23.710066175s ago: executing program 1 (id=1395): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/256, 0x100) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x7fffffff, 0x8, 0xffffffffffffffff, 0x9, 0x7, 0x4, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) openat$tcp_mem(0xffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ec) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000100)={0x281, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m21.180729291s ago: executing program 1 (id=1396): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) accept(r5, 0x0, 0x0) 8m18.305541667s ago: executing program 1 (id=1402): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801) signalfd(r3, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x40030000000000}, 0x4000) 8m10.086611954s ago: executing program 1 (id=1406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = signalfd(r1, &(0x7f00000001c0)={[0x9]}, 0x8) pidfd_send_signal(r4, 0xffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_open_dev$ndb(0x0, 0x0, 0x14401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7m53.595983489s ago: executing program 36 (id=1406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = signalfd(r1, &(0x7f00000001c0)={[0x9]}, 0x8) pidfd_send_signal(r4, 0xffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_open_dev$ndb(0x0, 0x0, 0x14401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6m32.40463665s ago: executing program 6 (id=1538): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 6m31.330422398s ago: executing program 6 (id=1543): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x54, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x54}}, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m27.636014806s ago: executing program 6 (id=1546): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() setrlimit(0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x42000006, 0x801) socket$kcm(0x2, 0x200000000000001, 0x106) 6m25.20552343s ago: executing program 6 (id=1549): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 6m16.760208302s ago: executing program 6 (id=1573): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_setup(0x3450, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) 6m12.413952597s ago: executing program 6 (id=1565): socket$inet6(0xa, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffd, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x100000000, 0x0) 5m54.437093201s ago: executing program 37 (id=1565): socket$inet6(0xa, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffd, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x100000000, 0x0) 20.854649183s ago: executing program 7 (id=2102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) flock(r3, 0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(&(0x7f0000000340)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) fchdir(0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x720, 0x12) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000"], 0x10}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000000080)=[{0x0}], 0x1, 0x65, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) socket$unix(0x1, 0x1, 0x0) 18.460433137s ago: executing program 7 (id=2105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f00000003c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, 0x0, 0x2, 0x0, 0x9}}) shmctl$SHM_UNLOCK(r3, 0xc) semget(0x1, 0x1, 0x39c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 16.684409854s ago: executing program 9 (id=2107): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_har']) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) umount2(0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 15.267462212s ago: executing program 8 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r5, 0x1, 0x5003) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = signalfd(r1, &(0x7f00000001c0)={[0x9]}, 0x8) pidfd_send_signal(r6, 0xffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_open_dev$ndb(0x0, 0x0, 0x14401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 13.779852752s ago: executing program 8 (id=2112): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x4}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xe00, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x0, 0x6, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x1001, 0x8, 0x0, 0x10ffe, 0x400, 0x4002004c2, 0x1003, 0x0, 0x4293, 0x3, 0x2000000000000000, 0x4, 0x4], 0xeeee8000, 0x410}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 12.141234316s ago: executing program 8 (id=2113): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 12.028151399s ago: executing program 0 (id=2114): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_har']) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) 11.99023031s ago: executing program 9 (id=2115): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x482, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04250c20"], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000057040101000000000000000001000400050001000100000056653ff0c3e7fe49c42ae5514dacecfc1bfed6a4d986d5f1926a0d79e2bdd9597a99183a1d260f649799b426d03547bcf0827293fad864bee057040e1c0fd5d5cdf4cf7102a3df101d8470d8d12f1e850d8a4eb82fad1855b3a11f33ce03dcaae3b3fe1cb51bc2d9fedf540d8d2904ee9058e28daf53d5a7f8f3fc20779b047f78c35e552741b05420c043eab44c2ab57781b8a10e0c6f1fb2c52d29c88b07b91284e0d64f197ebf7b2a7f5d1de270d0a0d3b779237338f36c9fc2e41991320490e7c4eb6a2763366eae3917d3812e551ce92ae9a7dcc0285d1200000060d30a7d092011fe4711ce17be9db3719d4f893df2d381f792de03b567bf29be783f9f02acc23cfafbeedc56781ab01f28085efe7d82fc75b608b4c0d0835fde295687691edfc34cf31c6a23e95b5f56ff00dc8cc9d2e08700000000000000000000000000000000113b242ca2"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = signalfd4(r4, &(0x7f0000000140)={[0x7ff]}, 0x8, 0x80000) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0x9, 0x3, 0x4, 0x100000, 0x4, {0x0, 0xea60}, {0x3, 0x8, 0x81, 0x4, 0x5, 0x66, "c2383605"}, 0x1, 0x4, {&(0x7f0000000680)=[{0x9, 0x1, {r7}, 0x7}, {0x3, 0x81, {}, 0x2}]}, 0x7f}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) 11.273056469s ago: executing program 5 (id=2116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) flock(r3, 0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(&(0x7f0000000340)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) fchdir(0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x720, 0x12) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000"], 0x10}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000000080)=[{0x0}], 0x1, 0x65, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) socket$unix(0x1, 0x1, 0x0) 11.200963921s ago: executing program 7 (id=2117): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0xff, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r0 = getpid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r1, 0x1) tkill(r2, 0x14) syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r3, &(0x7f0000006e80)={0x2020}, 0x2082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) migrate_pages(0x0, 0x8, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000001880), 0x33a, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000100)=0x1) 9.922870505s ago: executing program 0 (id=2118): sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 9.270649543s ago: executing program 8 (id=2119): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$qrtrtun(0xffffff9c, 0x0, 0x14801) signalfd(r3, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x40030000000000}, 0x4000) 9.146179986s ago: executing program 5 (id=2120): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 5.62436324s ago: executing program 7 (id=2121): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) 5.577577451s ago: executing program 8 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r5, 0x1, 0x5003) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = signalfd(r1, &(0x7f00000001c0)={[0x9]}, 0x8) pidfd_send_signal(r6, 0xffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_open_dev$ndb(0x0, 0x0, 0x14401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.472374514s ago: executing program 9 (id=2123): mkdirat(0xffffffffffffff9c, 0x0, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x8, 0x43f, 0x6, 0x80c20048}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r8 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90c, 0x40001) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x41045508, 0xfffffffffffffffe) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r9, 0x0, 0x61, 0x0, &(0x7f0000000bc0)=0x2c) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 5.415802576s ago: executing program 5 (id=2124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 5.285194499s ago: executing program 0 (id=2125): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 4.053366052s ago: executing program 8 (id=2126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) 4.023679803s ago: executing program 7 (id=2127): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f00000003c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, 0x0, 0x2, 0x0, 0x9}}) shmctl$SHM_UNLOCK(r3, 0xc) semget(0x1, 0x1, 0x39c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 3.861175977s ago: executing program 5 (id=2128): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_har']) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) 3.744304891s ago: executing program 0 (id=2129): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 3.644763713s ago: executing program 5 (id=2130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000180)) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") open(&(0x7f00000000c0)='.\x00', 0x539121, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x8001) r4 = getpgid(0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r6, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x2000) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2, r4}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2.340071498s ago: executing program 9 (id=2131): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.527311339s ago: executing program 0 (id=2132): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.431651152s ago: executing program 9 (id=2133): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x305295080, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000280)={0xffffcf93, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x20040840) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r4) getrandom(&(0x7f0000000040)=""/29, 0x1d, 0x3) r5 = gettid() r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) io_uring_setup(0x344f, &(0x7f0000000440)={0x0, 0x1539, 0x0, 0x2, 0x97}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYRESOCT=r0, @ANYBLOB="90677326fdda104adf5a38bf3a790b4b9a6d65b9fc769fa57f425516aba554761251bc56a77f570ab9a4e969946e90d1999f500e7e07b791183ff44c76e437", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r7, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140), 0x0, 0x0}, 0x40) 1.339990595s ago: executing program 5 (id=2134): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrandom(&(0x7f0000000040)=""/29, 0x1d, 0x3) 890.577757ms ago: executing program 0 (id=2135): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 878.358756ms ago: executing program 7 (id=2136): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 9 (id=2137): sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.5.1252'. [ 980.624448][T10790] EXT4-fs (loop6): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 980.633993][T10790] EXT4-fs (loop6): Couldn't mount because of unsupported optional features (40000) [ 980.772472][T10785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1253'. [ 980.992741][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 980.999705][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 981.109263][T10793] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1237'. [ 981.930220][T10816] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1244'. [ 981.966380][T10816] loop6: detected capacity change from 0 to 512 [ 981.976055][T10816] ext4: Unknown parameter 'nouser_xattr' [ 982.697359][T10817] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1257'. [ 982.904295][T10815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1258'. [ 983.824565][T10820] loop8: detected capacity change from 0 to 256 [ 984.888760][T10824] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1248'. [ 985.082609][T10832] loop7: detected capacity change from 0 to 32768 [ 985.121221][T10832] (syz.7.1251,10832,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 985.135701][T10832] (syz.7.1251,10832,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 985.152209][T10829] overlayfs: missing 'lowerdir' [ 985.219716][T10820] FAT-fs (loop8): Directory bread(block 64) failed [ 985.232336][T10832] JBD2: Ignoring recovery information on journal [ 985.277161][T10832] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 985.342328][T10820] FAT-fs (loop8): Directory bread(block 65) failed [ 985.544617][T10820] FAT-fs (loop8): Directory bread(block 66) failed [ 985.671373][T10820] FAT-fs (loop8): Directory bread(block 67) failed [ 985.915517][T10820] FAT-fs (loop8): Directory bread(block 68) failed [ 986.111438][T10820] FAT-fs (loop8): Directory bread(block 69) failed [ 986.239655][T10820] FAT-fs (loop8): Directory bread(block 70) failed [ 986.271036][T10820] FAT-fs (loop8): Directory bread(block 71) failed [ 986.277774][T10820] FAT-fs (loop8): Directory bread(block 72) failed [ 986.346452][T10820] FAT-fs (loop8): Directory bread(block 73) failed [ 987.293659][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1259'. [ 988.596410][T10647] ocfs2: Unmounting device (7,7) on (node local) [ 989.150959][T10868] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1262'. [ 989.189632][T10868] loop5: detected capacity change from 0 to 512 [ 989.199902][T10868] ext4: Unknown parameter 'nouser_xattr' [ 989.903885][T10862] XFS (nullb0): Invalid superblock magic number [ 990.073007][T10466] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 990.993773][T10873] loop6: detected capacity change from 0 to 131072 [ 991.005596][T10873] F2FS-fs (loop6): invalid crc value [ 991.059591][T10873] F2FS-fs (loop6): Found nat_bits in checkpoint [ 991.216740][T10873] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 991.230369][T10873] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 992.565286][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1264'. [ 994.310541][T10912] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1267'. [ 997.906212][ T4288] Bluetooth: hci4: command 0x0405 tx timeout [ 998.709254][T10928] loop5: detected capacity change from 0 to 128 [ 999.195981][T10944] loop7: detected capacity change from 0 to 256 [ 999.762187][ T26] audit: type=1326 audit(1786296227.527:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1000.600654][T10752] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1000.669064][ T26] audit: type=1326 audit(1786296227.527:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1000.694243][ T26] audit: type=1326 audit(1786296227.592:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1000.718364][ T26] audit: type=1326 audit(1786296227.592:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1000.742451][ T26] audit: type=1326 audit(1786296227.592:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1000.776857][ T26] audit: type=1326 audit(1786296227.592:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1000.928863][ T26] audit: type=1326 audit(1786296227.831:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1001.191834][T10953] loop1: detected capacity change from 0 to 256 [ 1001.294619][ T4289] Bluetooth: hci1: unexpected subevent 0x0e length: 32 > 15 [ 1002.076599][T10953] FAT-fs (loop1): Directory bread(block 64) failed [ 1002.090242][T10953] FAT-fs (loop1): Directory bread(block 65) failed [ 1002.155450][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1276'. [ 1002.164463][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1276'. [ 1002.189854][T10958] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.198677][T10958] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.207402][T10958] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.216202][T10958] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.235681][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1276'. [ 1002.245992][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1276'. [ 1002.339698][T10953] FAT-fs (loop1): Directory bread(block 66) failed [ 1002.365917][ T26] audit: type=1326 audit(1786296227.831:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1002.616195][ T26] audit: type=1326 audit(1786296227.914:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1002.616239][ T26] audit: type=1326 audit(1786296227.914:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1002.675955][T10953] FAT-fs (loop1): Directory bread(block 67) failed [ 1002.676106][T10953] FAT-fs (loop1): Directory bread(block 68) failed [ 1002.676139][T10953] FAT-fs (loop1): Directory bread(block 69) failed [ 1002.676215][T10953] FAT-fs (loop1): Directory bread(block 70) failed [ 1002.676244][T10953] FAT-fs (loop1): Directory bread(block 71) failed [ 1002.676320][T10953] FAT-fs (loop1): Directory bread(block 72) failed [ 1002.676349][T10953] FAT-fs (loop1): Directory bread(block 73) failed [ 1004.155740][T10970] ieee802154 phy0 wpan0: encryption failed: -22 [ 1009.993431][T11005] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1282'. [ 1011.188622][T11007] loop1: detected capacity change from 0 to 131072 [ 1011.430022][T11007] F2FS-fs (loop1): invalid crc value [ 1011.512862][T11007] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1011.611441][T11007] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 1011.629246][T11007] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1012.099711][T11018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1285'. [ 1014.234999][T11028] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 1015.683787][T11041] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1289'. [ 1017.639483][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1293'. [ 1019.655696][T11061] loop7: detected capacity change from 0 to 2048 [ 1021.178737][T11061] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1021.187681][T11061] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.286742][T11059] fs-verity: sha512 using implementation "sha512-avx2" [ 1021.433047][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1294'. [ 1022.892324][T10647] EXT4-fs (loop7): unmounting filesystem. [ 1023.329703][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1299'. [ 1027.102820][T11098] loop7: detected capacity change from 0 to 131072 [ 1027.177091][T11098] F2FS-fs (loop7): invalid crc value [ 1028.285239][T11098] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1028.315681][T11098] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 1028.393189][T11105] Bluetooth: MGMT ver 1.22 [ 1028.402506][T11098] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1029.438354][T11117] F2FS-fs (loop7): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 1031.705603][T11134] ieee802154 phy0 wpan0: encryption failed: -22 [ 1034.721481][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1302'. [ 1034.730710][T11144] device bridge_slave_1 left promiscuous mode [ 1034.737563][T11144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.842012][ T7736] block nbd8: Attempted send on invalid socket [ 1034.848324][ T7736] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.857722][T11145] efs: cannot read volume header [ 1036.801218][T11144] device bridge_slave_0 left promiscuous mode [ 1036.807434][T11144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.226553][T11181] loop7: detected capacity change from 0 to 256 [ 1039.392906][T11178] loop1: detected capacity change from 0 to 131072 [ 1039.419577][T11178] F2FS-fs (loop1): invalid crc value [ 1039.453571][T11181] FAT-fs (loop7): Directory bread(block 64) failed [ 1039.460697][T11181] FAT-fs (loop7): Directory bread(block 65) failed [ 1039.467334][T11181] FAT-fs (loop7): Directory bread(block 66) failed [ 1039.474658][T11181] FAT-fs (loop7): Directory bread(block 67) failed [ 1039.481671][T11181] FAT-fs (loop7): Directory bread(block 68) failed [ 1039.488241][T11181] FAT-fs (loop7): Directory bread(block 69) failed [ 1039.506566][T11178] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1039.558491][T11178] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 1039.581621][T11178] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1039.595991][T11181] FAT-fs (loop7): Directory bread(block 70) failed [ 1039.614853][T11181] FAT-fs (loop7): Directory bread(block 71) failed [ 1039.634822][T11181] FAT-fs (loop7): Directory bread(block 72) failed [ 1039.645682][T11181] FAT-fs (loop7): Directory bread(block 73) failed [ 1040.386372][T11192] overlayfs: overlapping lowerdir path [ 1040.812812][T11189] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 1041.839486][T11198] loop6: detected capacity change from 0 to 131072 [ 1042.002621][T11198] F2FS-fs (loop6): invalid crc value [ 1042.092120][T11198] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1042.130736][T11198] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 1042.200087][T11198] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1042.625231][T11209] loop5: detected capacity change from 0 to 256 [ 1044.612440][T11211] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 1046.159508][T11209] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1046.586506][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1321'. [ 1046.595564][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1321'. [ 1047.122653][T11215] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.131456][T11215] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.140177][T11215] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.148892][T11215] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.160349][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1321'. [ 1047.242171][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1321'. [ 1047.616905][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1047.626801][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1047.840211][T11228] loop8: detected capacity change from 0 to 4096 [ 1047.849823][T11228] ntfs3: Unknown parameter 'windows_names' [ 1048.650881][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1324'. [ 1048.978063][T11231] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.847743][T11250] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1050.887005][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1330'. [ 1050.896245][T11257] device bridge_slave_1 left promiscuous mode [ 1050.902986][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.933188][T11257] device bridge_slave_0 left promiscuous mode [ 1050.939984][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.030350][ T7736] block nbd7: Attempted send on invalid socket [ 1051.036674][ T7736] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1051.046445][T11258] efs: cannot read volume header [ 1053.406895][T11273] tmpfs: Unknown parameter 'usrquota' [ 1054.025684][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1334'. [ 1054.430213][T11285] loop1: detected capacity change from 0 to 512 [ 1054.480346][T11285] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1055.116749][T11285] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #17: comm syz.1.1335: inode has both inline data and extents flags [ 1055.130563][T11285] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1335: couldn't read orphan inode 17 (err -117) [ 1055.148282][T11285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1055.201808][T11284] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1335: bg 0: block 65: padding at end of block bitmap is not set [ 1055.225354][T11284] __quota_error: 28 callbacks suppressed [ 1055.225372][T11284] Quota error (device loop1): write_blk: dquota write failed [ 1055.239223][T11284] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1055.249351][T11284] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1335: Failed to acquire dquot type 0 [ 1055.495185][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1056.307170][T11299] loop1: detected capacity change from 0 to 256 [ 1057.427841][T11313] binder: 11305:11313 unknown command 32 [ 1057.434120][T11313] binder: 11305:11313 ioctl c0306201 2000000001c0 returned -22 [ 1058.500882][T11325] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1343'. [ 1059.824362][T11320] tmpfs: Unknown parameter 'usrquota' [ 1060.222234][T11338] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1346'. [ 1062.870423][T11336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1349'. [ 1066.025560][T11371] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1353'. [ 1066.885346][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1354'. [ 1066.894389][T11365] device bridge_slave_1 left promiscuous mode [ 1066.900614][T11365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.932153][T11365] device bridge_slave_0 left promiscuous mode [ 1066.938445][T11365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.259722][ T7736] block nbd6: Attempted send on invalid socket [ 1067.267143][ T7736] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1067.713252][T11383] binder: 11375:11383 unknown command 32 [ 1067.719186][T11383] binder: 11375:11383 ioctl c0306201 2000000001c0 returned -22 [ 1068.208118][T11372] efs: cannot read volume header [ 1068.414263][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1358'. [ 1069.561068][T11393] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1069.571170][T11393] cramfs: wrong magic [ 1070.126738][T11398] tmpfs: Unknown parameter 'usrquota' [ 1071.274257][T11405] loop6: detected capacity change from 0 to 8 [ 1071.915564][T11404] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1360'. [ 1072.246358][T11408] loop7: detected capacity change from 0 to 128 [ 1072.265103][T11408] FAT-fs (loop7): Directory bread(block 414) failed [ 1072.328250][T11408] FAT-fs (loop7): Directory bread(block 415) failed [ 1072.334934][T11408] FAT-fs (loop7): Directory bread(block 416) failed [ 1072.423431][T11408] FAT-fs (loop7): Directory bread(block 417) failed [ 1072.430127][T11408] FAT-fs (loop7): Directory bread(block 418) failed [ 1072.442958][T11408] FAT-fs (loop7): Directory bread(block 419) failed [ 1072.627265][T11413] netlink: 'syz.1.1363': attribute type 5 has an invalid length. [ 1072.635079][T11413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1363'. [ 1072.855776][T11408] FAT-fs (loop7): Directory bread(block 420) failed [ 1072.874972][T11408] FAT-fs (loop7): Directory bread(block 421) failed [ 1074.521440][T11434] FAT-fs (loop7): Directory bread(block 414) failed [ 1074.528741][T11434] FAT-fs (loop7): Directory bread(block 415) failed [ 1074.815165][T11436] loop5: detected capacity change from 0 to 512 [ 1075.156242][T11436] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1075.172500][T11437] loop1: detected capacity change from 0 to 512 [ 1075.211981][T11437] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1075.246441][T11436] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #17: comm syz.5.1368: inode has both inline data and extents flags [ 1075.269785][T11436] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1368: couldn't read orphan inode 17 (err -117) [ 1075.283213][T11436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1075.334050][T11433] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1368: bg 0: block 65: padding at end of block bitmap is not set [ 1075.349001][T11433] Quota error (device loop5): write_blk: dquota write failed [ 1075.356895][T11433] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1075.366969][T11433] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1368: Failed to acquire dquot type 0 [ 1075.422739][T11437] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 1075.680925][T11437] System zones: 1-12 [ 1075.758345][T11453] binder: 11442:11453 unknown command 32 [ 1075.764146][T11453] binder: 11442:11453 ioctl c0306201 2000000001c0 returned -22 [ 1076.351743][T11437] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1076.473007][T11437] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1369: attempt to clear invalid blocks 1024 len 1 [ 1076.588897][ T7256] EXT4-fs (loop5): unmounting filesystem. [ 1077.518793][T11462] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1372'. [ 1077.622468][T11437] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1369: bg 0: block 361: padding at end of block bitmap is not set [ 1077.821770][T11437] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1077.858590][T11468] tmpfs: Unknown parameter 'usrquota' [ 1078.759244][T11437] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1369: invalid indirect mapped block 1811939328 (level 0) [ 1078.773902][T11437] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1369: invalid indirect mapped block 2 (level 2) [ 1078.825898][T11437] EXT4-fs (loop1): 1 truncate cleaned up [ 1079.890190][T11437] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1080.040295][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1376'. [ 1080.844661][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1080.992185][T11479] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1082.079408][T11479] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1082.088702][T11479] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1082.096637][T11479] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1082.673888][T11493] SET target dimension over the limit! [ 1082.932014][T11486] loop1: detected capacity change from 0 to 4096 [ 1082.941816][T11486] ntfs3: Unknown parameter 'windows_names' [ 1085.181833][T11523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1386'. [ 1086.246699][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1387'. [ 1087.288267][T11530] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1388'. [ 1088.099043][T11532] loop1: detected capacity change from 0 to 256 [ 1088.374422][T11532] FAT-fs (loop1): Directory bread(block 64) failed [ 1088.384134][T11535] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1390'. [ 1088.502788][T11532] FAT-fs (loop1): Directory bread(block 65) failed [ 1088.612964][T11532] FAT-fs (loop1): Directory bread(block 66) failed [ 1089.006469][T11532] FAT-fs (loop1): Directory bread(block 67) failed [ 1089.177824][T11532] FAT-fs (loop1): Directory bread(block 68) failed [ 1089.355641][T11538] loop6: detected capacity change from 0 to 32768 [ 1089.381573][T11532] FAT-fs (loop1): Directory bread(block 69) failed [ 1089.399696][T11532] FAT-fs (loop1): Directory bread(block 70) failed [ 1089.421185][T11538] (syz.6.1391,11538,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1089.435060][T11538] (syz.6.1391,11538,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1089.449766][T11532] FAT-fs (loop1): Directory bread(block 71) failed [ 1089.456444][T11532] FAT-fs (loop1): Directory bread(block 72) failed [ 1089.498162][T11538] JBD2: Ignoring recovery information on journal [ 1089.531486][T11532] FAT-fs (loop1): Directory bread(block 73) failed [ 1089.616189][T11538] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1089.681020][T11546] tmpfs: Unknown parameter 'quota' [ 1091.105906][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1392'. [ 1092.904947][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1394'. [ 1095.472480][ T9272] ocfs2: Unmounting device (7,6) on (node local) [ 1099.586237][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1398'. [ 1099.595286][T11587] device bridge_slave_1 left promiscuous mode [ 1099.601559][T11587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.558453][T11587] device bridge_slave_0 left promiscuous mode [ 1100.564771][T11587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.572234][ T53] block nbd5: Attempted send on invalid socket [ 1100.581837][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1100.603766][T11598] efs: cannot read volume header [ 1102.577823][T11606] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1403'. [ 1104.120590][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1400'. [ 1106.105468][T11626] loop6: detected capacity change from 0 to 131072 [ 1106.158241][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 1106.164871][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 1106.428336][T11626] F2FS-fs (loop6): invalid crc value [ 1106.463830][T11626] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1106.505675][T11626] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 1106.716649][T11641] loop8: detected capacity change from 0 to 2048 [ 1109.280408][T11642] loop5: detected capacity change from 0 to 32768 [ 1109.300201][T11642] (syz.5.1409,11642,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1109.323831][T11642] (syz.5.1409,11642,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1109.372616][T11642] JBD2: Ignoring recovery information on journal [ 1109.467217][T11642] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1110.286203][T11641] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1110.295203][T11641] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.769904][T11659] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1111.780402][T11659] cramfs: wrong magic [ 1112.168547][T10656] EXT4-fs (loop8): unmounting filesystem. [ 1112.509056][T11667] loop8: detected capacity change from 0 to 256 [ 1112.540792][ T7256] ocfs2: Unmounting device (7,5) on (node local) [ 1112.747452][T11675] overlayfs: missing 'lowerdir' [ 1114.545597][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1114.551971][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1114.697292][T11667] FAT-fs (loop8): Directory bread(block 64) failed [ 1114.952902][T11687] binder: 11682:11687 unknown command 32 [ 1114.958721][T11687] binder: 11682:11687 ioctl c0306201 2000000001c0 returned -22 [ 1115.569303][T11667] FAT-fs (loop8): Directory bread(block 65) failed [ 1115.576034][T11667] FAT-fs (loop8): Directory bread(block 66) failed [ 1115.623001][T11667] FAT-fs (loop8): Directory bread(block 67) failed [ 1115.629700][T11667] FAT-fs (loop8): Directory bread(block 68) failed [ 1115.734331][T11667] FAT-fs (loop8): Directory bread(block 69) failed [ 1115.740998][T11667] FAT-fs (loop8): Directory bread(block 70) failed [ 1115.869376][T11667] FAT-fs (loop8): Directory bread(block 71) failed [ 1116.201290][T11686] loop7: detected capacity change from 0 to 512 [ 1116.352879][T11667] FAT-fs (loop8): Directory bread(block 72) failed [ 1116.359489][T11667] FAT-fs (loop8): Directory bread(block 73) failed [ 1116.388524][T11686] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1116.451356][T11686] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #17: comm syz.7.1418: inode has both inline data and extents flags [ 1116.469271][T11686] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1418: couldn't read orphan inode 17 (err -117) [ 1116.486765][T11686] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1116.538279][T11686] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1418: bg 0: block 65: padding at end of block bitmap is not set [ 1116.553054][T11686] Quota error (device loop7): write_blk: dquota write failed [ 1116.560943][T11686] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1116.570997][T11686] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1418: Failed to acquire dquot type 0 [ 1117.508678][T11703] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1117.524057][T11703] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1117.541364][T11703] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1117.553630][T11703] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1117.616101][T11704] sctp_transport_update_pmtu: 48 callbacks suppressed [ 1117.616154][T11704] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1117.638077][T11704] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1117.648366][T11704] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1117.660263][T11704] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1117.722808][T11704] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1117.746094][T11704] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1117.756308][T11704] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1117.766524][T11704] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1117.776749][T11704] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1117.787037][T11704] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1117.880401][T11703] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1117.892865][T11703] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1117.905357][T11703] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1120.293449][T10647] EXT4-fs (loop7): unmounting filesystem. [ 1120.985361][T11716] loop7: detected capacity change from 0 to 256 [ 1121.866810][T11717] atomic_op ffff888140062998 conn xmit_atomic 0000000000000000 [ 1122.750180][T11716] FAT-fs (loop7): Directory bread(block 64) failed [ 1122.756780][T11716] FAT-fs (loop7): Directory bread(block 65) failed [ 1122.834940][T11716] FAT-fs (loop7): Directory bread(block 66) failed [ 1122.841547][T11716] FAT-fs (loop7): Directory bread(block 67) failed [ 1122.899136][T11716] FAT-fs (loop7): Directory bread(block 68) failed [ 1122.910561][T11716] FAT-fs (loop7): Directory bread(block 69) failed [ 1122.917250][T11716] FAT-fs (loop7): Directory bread(block 70) failed [ 1122.985935][T11716] FAT-fs (loop7): Directory bread(block 71) failed [ 1123.014551][T11716] FAT-fs (loop7): Directory bread(block 72) failed [ 1123.025573][T11723] overlayfs: missing 'lowerdir' [ 1123.103650][T11716] FAT-fs (loop7): Directory bread(block 73) failed [ 1124.229034][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1124.239888][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1124.248250][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1124.256152][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1124.264878][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1124.273655][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1124.339676][T11728] wlan0 speed is unknown, defaulting to 1000 [ 1124.367288][T11733] tmpfs: Unknown parameter 'quota' [ 1125.500087][ T4790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.206797][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 1127.328763][T11766] loop7: detected capacity change from 0 to 256 [ 1127.390969][ T4790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.610515][T11766] FAT-fs (loop7): Directory bread(block 64) failed [ 1127.630287][T11766] FAT-fs (loop7): Directory bread(block 65) failed [ 1127.636976][T11766] FAT-fs (loop7): Directory bread(block 66) failed [ 1127.730988][T11766] FAT-fs (loop7): Directory bread(block 67) failed [ 1127.757197][T11766] FAT-fs (loop7): Directory bread(block 68) failed [ 1127.763856][T11766] FAT-fs (loop7): Directory bread(block 69) failed [ 1127.795508][ T4790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.800846][T11766] FAT-fs (loop7): Directory bread(block 70) failed [ 1127.832890][T11766] FAT-fs (loop7): Directory bread(block 71) failed [ 1127.839580][T11766] FAT-fs (loop7): Directory bread(block 72) failed [ 1127.876258][T11766] FAT-fs (loop7): Directory bread(block 73) failed [ 1128.162300][ T4790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.416372][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 1130.013673][T11728] chnl_net:caif_netlink_parms(): no params data found [ 1130.841537][T11788] Mass Storage Function, version: 2009/09/11 [ 1130.936026][T11788] LUN: removable file: (no medium) [ 1130.978158][ T26] audit: type=1800 audit(1786296348.601:58): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1437" name="cdrom" dev="configfs" ino=56934 res=0 errno=0 [ 1131.094321][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.134674][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.157673][T11728] device bridge_slave_0 entered promiscuous mode [ 1131.311823][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.386400][T11803] overlayfs: missing 'lowerdir' [ 1131.643533][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.671960][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 1131.748225][T11804] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1433'. [ 1131.782586][T11728] device bridge_slave_1 entered promiscuous mode [ 1132.385157][T11728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.419469][T11728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.906527][T11816] atomic_op ffff888055870998 conn xmit_atomic 0000000000000000 [ 1134.445618][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 1134.665053][T11807] loop5: detected capacity change from 0 to 4096 [ 1134.713716][T11728] team0: Port device team_slave_0 added [ 1134.725991][T11807] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1134.814692][T11728] team0: Port device team_slave_1 added [ 1136.756327][T11829] SET target dimension over the limit! [ 1137.065072][T11728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.077192][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.244790][T11728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.246011][T11728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.253061][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.331654][T11728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.151961][T11728] device hsr_slave_0 entered promiscuous mode [ 1139.195313][T11728] device hsr_slave_1 entered promiscuous mode [ 1140.327634][T11844] loop7: detected capacity change from 0 to 8 [ 1140.759317][T11728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1140.766958][T11728] Cannot create hsr debugfs directory [ 1141.348474][T11849] overlayfs: missing 'lowerdir' [ 1142.737559][T11861] loop8: detected capacity change from 0 to 256 [ 1142.801284][T11861] FAT-fs (loop8): Directory bread(block 64) failed [ 1142.825598][T11861] FAT-fs (loop8): Directory bread(block 65) failed [ 1142.846264][T11861] FAT-fs (loop8): Directory bread(block 66) failed [ 1142.867574][T11861] FAT-fs (loop8): Directory bread(block 67) failed [ 1142.882549][T11861] FAT-fs (loop8): Directory bread(block 68) failed [ 1142.901126][T11861] FAT-fs (loop8): Directory bread(block 69) failed [ 1142.913502][T11861] FAT-fs (loop8): Directory bread(block 70) failed [ 1142.922548][T11861] FAT-fs (loop8): Directory bread(block 71) failed [ 1142.935595][T11861] FAT-fs (loop8): Directory bread(block 72) failed [ 1142.962518][ T27] wlan0 speed is unknown, defaulting to 1000 [ 1142.995264][T11861] FAT-fs (loop8): Directory bread(block 73) failed [ 1143.437513][T11878] overlayfs: unrecognized mount option "/" or missing value [ 1143.489141][ T4790] device hsr_slave_0 left promiscuous mode [ 1144.271157][ T4289] Bluetooth: hci2: command 0x0405 tx timeout [ 1144.629569][T11879] atomic_op ffff8880761e9998 conn xmit_atomic 0000000000000000 [ 1144.662469][ T4790] device hsr_slave_1 left promiscuous mode [ 1144.670759][ T4790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.705979][ T4790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.887805][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1454'. [ 1145.604445][ T4790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1145.769529][ T4790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.865893][ T4790] device bridge_slave_1 left promiscuous mode [ 1145.881714][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.922624][ T4790] device bridge_slave_0 left promiscuous mode [ 1145.943111][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.100149][ T4790] device veth1_macvtap left promiscuous mode [ 1146.134870][ T4790] device veth1_vlan left promiscuous mode [ 1146.163457][ T4790] device veth0_vlan left promiscuous mode [ 1147.181798][T11899] loop8: detected capacity change from 0 to 4096 [ 1147.338416][T11899] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1148.700723][T11905] loop8: detected capacity change from 0 to 1024 [ 1148.713254][T11905] hfsplus: unable to find HFS+ superblock [ 1149.170149][T10752] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1149.473588][ T4790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.675303][T11912] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 1149.685023][T11909] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1149.692168][T11909] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1149.703738][T11909] vhci_hcd vhci_hcd.0: Device attached [ 1150.074081][T11688] usb 50-1: SetAddress Request (2) to port 0 [ 1150.128069][T11688] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1150.420730][T11910] vhci_hcd: connection closed [ 1150.426194][ T4747] vhci_hcd: stop threads [ 1150.487204][ T4747] vhci_hcd: release socket [ 1150.517449][ T4747] vhci_hcd: disconnect device [ 1151.084713][ T4790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.372090][ T4790] bond0 (unregistering): Released all slaves [ 1153.795742][T11728] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1154.041620][T11728] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1155.148617][T11728] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1155.258244][T11728] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1155.346850][T11940] tmpfs: Unknown parameter 'quota' [ 1155.875256][T11688] usb 50-1: device descriptor read/8, error -110 [ 1156.363452][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1465'. [ 1156.668882][T11688] usb usb50-port1: attempt power cycle [ 1157.957458][T11728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.096799][T11688] usb usb50-port1: unable to enumerate USB device [ 1159.203270][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1159.213359][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1159.249630][T11728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.425614][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1159.532846][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1159.678412][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.685647][ T8767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.744493][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1159.824512][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1159.851697][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1159.915308][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.922553][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.855032][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1160.932174][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1161.021008][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1163.207508][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1163.219416][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1163.242846][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1163.259852][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1163.327165][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1163.354832][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1165.252775][T11728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1165.276986][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1165.425335][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1165.448597][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1170.330543][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1170.338033][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1170.421525][T11728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.328295][T12077] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1487'. [ 1175.749022][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1177.165477][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1177.221239][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1177.230236][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1177.263518][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1177.285504][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1177.322749][T11728] device veth0_vlan entered promiscuous mode [ 1177.384247][T11728] device veth1_vlan entered promiscuous mode [ 1177.519829][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1177.539501][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1178.413762][T11728] device veth0_macvtap entered promiscuous mode [ 1178.647722][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1178.692991][T11728] device veth1_macvtap entered promiscuous mode [ 1178.832034][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.893971][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.982724][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.382375][T12117] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1494'. [ 1179.398155][T12117] loop6: detected capacity change from 0 to 512 [ 1179.972899][T12117] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1180.110026][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.120086][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.148090][T12117] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1180.168152][T12117] EXT4-fs (loop6): Remounting filesystem read-only [ 1180.175330][T12117] EXT4-fs (loop6): 1 truncate cleaned up [ 1180.181022][T12117] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1180.461683][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.494520][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.505491][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.517978][T11728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.527237][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1180.575523][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1180.586936][ T9272] EXT4-fs (loop6): unmounting filesystem. [ 1180.669874][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.875100][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.031657][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.041563][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.199597][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.217912][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.238975][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.978346][T12129] sctp: failed to load transform for md5: -2 [ 1182.138182][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1182.168894][T12115] overlayfs: missing 'lowerdir' [ 1182.229721][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.274275][T11728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.311561][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1182.333634][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1182.371429][T11728] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.460204][T11728] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.519525][T11728] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.543875][T11728] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.554534][T12149] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1500'. [ 1183.787361][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.795825][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.856269][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1183.927947][ T8767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.945620][ T8767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.025564][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1184.181637][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1504'. [ 1184.277218][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1504'. [ 1186.033893][T12171] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1186.041863][T12171] cramfs: wrong magic [ 1187.489956][T12197] block device autoloading is deprecated and will be removed. [ 1189.181079][T12201] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1511'. [ 1190.889695][T12203] Process accounting resumed [ 1193.590629][T12232] overlayfs: missing 'lowerdir' [ 1193.971938][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1512'. [ 1196.186456][T12257] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1524'. [ 1197.261256][T12272] tmpfs: Unknown parameter 'usrquota' [ 1200.489936][T12295] lo speed is unknown, defaulting to 1000 [ 1200.496048][T12295] lo speed is unknown, defaulting to 1000 [ 1200.507173][T12295] lo speed is unknown, defaulting to 1000 [ 1200.664433][T12295] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1200.723799][T12295] lo speed is unknown, defaulting to 1000 [ 1200.740665][T12295] lo speed is unknown, defaulting to 1000 [ 1200.753835][T12295] lo speed is unknown, defaulting to 1000 [ 1200.764947][T12295] lo speed is unknown, defaulting to 1000 [ 1200.775106][T12295] lo speed is unknown, defaulting to 1000 [ 1201.164668][T12300] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1537'. [ 1202.063226][T12288] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 1202.294703][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1538'. [ 1203.302660][T12321] loop9: detected capacity change from 0 to 2048 [ 1204.010730][T12325] tmpfs: Unknown parameter 'usrquota' [ 1205.475369][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1542'. [ 1206.040211][T12337] lo speed is unknown, defaulting to 1000 [ 1206.887111][T12321] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1206.896058][T12321] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1209.286628][T11728] EXT4-fs (loop9): unmounting filesystem. [ 1210.176103][ T4587] Bluetooth: (null): Invalid header checksum [ 1210.222961][ T4587] Bluetooth: (null): Invalid header checksum [ 1210.594944][T12375] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1550'. [ 1210.649087][ T4587] Bluetooth: (null): Invalid header checksum [ 1214.014005][T12405] tmpfs: Unknown parameter 'usrquota' [ 1214.991356][T12409] loop8: detected capacity change from 0 to 512 [ 1216.220352][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1549'. [ 1216.903595][T12431] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1562'. [ 1217.763368][T12436] loop6: detected capacity change from 0 to 2048 [ 1217.945018][T12436] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1218.511292][ T3600] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1221.031455][T12448] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1221.048662][T12448] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 1221.061327][T12448] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1221.061327][T12448] [ 1221.070979][T12448] EXT4-fs (loop6): Total free blocks count 0 [ 1221.077106][T12448] EXT4-fs (loop6): Free/Dirty block details [ 1221.083107][T12448] EXT4-fs (loop6): free_blocks=2415919104 [ 1221.088883][T12448] EXT4-fs (loop6): dirty_blocks=39776 [ 1221.094334][T12448] EXT4-fs (loop6): Block reservation details [ 1221.100840][T12448] EXT4-fs (loop6): i_reserved_data_blocks=2486 [ 1222.128442][ T4757] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2048 with error 28 [ 1222.322893][T12481] futex_wake_op: syz.8.1566 tries to shift op by 144; fix this program [ 1222.366569][T12481] loop8: detected capacity change from 0 to 256 [ 1224.431414][T12481] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1224.528200][ T26] audit: type=1800 audit(1786296434.915:59): pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1566" name="file1" dev="loop8" ino=1048786 res=0 errno=0 [ 1224.575944][T12479] syz.8.1566: attempt to access beyond end of device [ 1224.575944][T12479] loop8: rw=0, sector=184, nr_sectors = 120 limit=256 [ 1224.617641][T12479] syz.8.1566: attempt to access beyond end of device [ 1224.617641][T12479] loop8: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 1224.633408][T12479] syz.8.1566: attempt to access beyond end of device [ 1224.633408][T12479] loop8: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 1224.648320][T12479] syz.8.1566: attempt to access beyond end of device [ 1224.648320][T12479] loop8: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1224.661998][T12479] syz.8.1566: attempt to access beyond end of device [ 1224.661998][T12479] loop8: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1224.675439][T12479] syz.8.1566: attempt to access beyond end of device [ 1224.675439][T12479] loop8: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1224.688737][T12479] syz.8.1566: attempt to access beyond end of device [ 1224.688737][T12479] loop8: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1224.702004][T12479] syz.8.1566: attempt to access beyond end of device [ 1224.702004][T12479] loop8: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1224.715952][T12479] syz.8.1566: attempt to access beyond end of device [ 1224.715952][T12479] loop8: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1224.729370][T12479] syz.8.1566: attempt to access beyond end of device [ 1224.729370][T12479] loop8: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1225.018058][ T4757] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1225.018058][ T4757] [ 1225.036938][T12485] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1570'. [ 1225.398080][ T4757] EXT4-fs (loop6): Total free blocks count 0 [ 1225.607243][ T4757] EXT4-fs (loop6): Free/Dirty block details [ 1225.788378][ T4757] EXT4-fs (loop6): free_blocks=2415919104 [ 1225.842152][ T4757] EXT4-fs (loop6): dirty_blocks=39776 [ 1225.847757][ T4757] EXT4-fs (loop6): Block reservation details [ 1225.853865][ T4757] EXT4-fs (loop6): i_reserved_data_blocks=2486 [ 1225.913139][ T4757] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2054 with max blocks 2048 with error 28 [ 1225.947905][ T4757] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1225.947905][ T4757] [ 1225.957689][ T4757] EXT4-fs (loop6): Total free blocks count 0 [ 1227.429191][T12499] tmpfs: Unknown parameter 'usrquota' [ 1228.241975][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1574'. [ 1231.049809][T12521] loop8: detected capacity change from 0 to 256 [ 1231.141079][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1589'. [ 1231.940969][T12532] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1232.986720][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1583'. [ 1233.205241][T12548] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1584'. [ 1233.343593][ T26] audit: type=1326 audit(1786296443.060:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.5.1586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1233.368027][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.538521][T12558] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1587'. [ 1233.564846][ T9272] EXT4-fs: 5 callbacks suppressed [ 1233.564862][ T9272] EXT4-fs (loop6): unmounting filesystem. [ 1233.597903][ T26] audit: type=1326 audit(1786296443.060:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.5.1586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1233.802576][T12569] tmpfs: Unknown parameter 'usrquota' [ 1234.547790][ T26] audit: type=1326 audit(1786296443.060:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.5.1586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1234.604927][ T26] audit: type=1326 audit(1786296443.097:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.5.1586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1234.628992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.636121][ T26] audit: type=1326 audit(1786296443.097:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.5.1586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1234.660371][ T26] audit: type=1326 audit(1786296443.097:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.5.1586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1234.684282][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.628182][ T26] audit: type=1326 audit(1786296443.097:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.5.1586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1237.160890][ T26] audit: type=1326 audit(1786296443.097:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.5.1586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1237.185717][ T26] audit: type=1326 audit(1786296443.097:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.5.1586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1237.209980][ T26] audit: type=1326 audit(1786296443.097:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.5.1586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e0979e019 code=0x7ffc0000 [ 1240.458305][T12599] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1597'. [ 1241.590308][T12606] loop9: detected capacity change from 0 to 256 [ 1241.599792][T12606] exfat: Deprecated parameter 'namecase' [ 1241.743525][T12606] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 1241.863343][T12610] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1598'. [ 1243.243623][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1601'. [ 1243.753348][ T4334] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.584953][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1244.598159][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1244.607657][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1244.623035][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1244.631300][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1244.638575][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1244.744496][ T4334] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.469854][ T4334] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.506835][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.550770][T12634] lo speed is unknown, defaulting to 1000 [ 1246.688168][T12657] loop8: detected capacity change from 0 to 1024 [ 1246.832103][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 1247.109887][T12657] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1247.388385][ T4334] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.524073][T10656] EXT4-fs (loop8): unmounting filesystem. [ 1249.291846][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 1249.342408][T12679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1610'. [ 1249.404538][T12634] chnl_net:caif_netlink_parms(): no params data found [ 1249.559393][T12689] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1612'. [ 1251.496721][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 1253.203785][T12718] futex_wake_op: syz.5.1619 tries to shift op by 144; fix this program [ 1253.700250][T12634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.718179][T12634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.731638][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 1253.769727][T12634] device bridge_slave_0 entered promiscuous mode [ 1254.820983][T12634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.828166][T12634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.883746][T12733] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1622'. [ 1254.900789][T12634] device bridge_slave_1 entered promiscuous mode [ 1255.046513][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 1255.046527][ T26] audit: type=1800 audit(1786296463.582:114): pid=12723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1617" name="bus" dev="ramfs" ino=59583 res=0 errno=0 [ 1255.118791][T12634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.325688][T12634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.375934][T12634] team0: Port device team_slave_0 added [ 1256.860931][T12743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1624'. [ 1256.871381][T12634] team0: Port device team_slave_1 added [ 1257.276970][ T7736] block nbd8: Attempted send on invalid socket [ 1257.283346][ T7736] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1257.293558][T12756] efs: cannot read volume header [ 1258.387867][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1625'. [ 1259.964178][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 1260.039180][T12634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.046184][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.260027][T12634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.365958][T12772] sctp: [Deprecated]: syz.8.1629 (pid 12772) Use of int in max_burst socket option deprecated. [ 1260.365958][T12772] Use struct sctp_assoc_value instead [ 1260.424607][T12634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.450433][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.827341][T12778] netlink: 204 bytes leftover after parsing attributes in process `syz.8.1629'. [ 1262.007525][T12775] UBIFS error (pid: 12775): cannot open "(null)", error -22 [ 1262.357435][T12634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.755784][ T4450] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1264.121129][T12796] loop9: detected capacity change from 0 to 512 [ 1264.247139][ T4450] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.262144][T12634] device hsr_slave_0 entered promiscuous mode [ 1265.144903][ T4450] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1265.306326][ T4450] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1265.336785][ T4450] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.384221][ T4450] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1265.405979][ T4450] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.466477][T12634] device hsr_slave_1 entered promiscuous mode [ 1265.484460][T12634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1265.492116][T12634] Cannot create hsr debugfs directory [ 1265.529414][ T4450] usb 9-1: invalid MIDI out EP 0 [ 1266.496835][T12818] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1636'. [ 1266.639583][ T4450] snd-usb-audio: probe of 9-1:27.0 failed with error -22 [ 1266.716289][T12820] loop9: detected capacity change from 0 to 512 [ 1266.803543][T12821] udevd[12821]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1268.243402][T12837] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1641'. [ 1270.903843][ T4334] device hsr_slave_0 left promiscuous mode [ 1271.999270][ T4334] device hsr_slave_1 left promiscuous mode [ 1272.023821][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.122757][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.263456][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.359220][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.072248][ T3600] usb 9-1: USB disconnect, device number 2 [ 1273.237325][ T4334] device veth1_macvtap left promiscuous mode [ 1273.292776][ T4334] device veth0_macvtap left promiscuous mode [ 1273.372812][ T4334] device veth1_vlan left promiscuous mode [ 1273.395299][ T4334] device veth0_vlan left promiscuous mode [ 1274.557176][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 1274.612790][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 1274.669946][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1274.731200][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1275.142771][ T4334] bond0 (unregistering): Released all slaves [ 1276.275246][ T26] audit: type=1326 audit(1786296482.606:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.7.1651" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba14b9e019 code=0x0 [ 1278.276288][ T27] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1279.319108][ T4289] Bluetooth: hci0: command 0x0405 tx timeout [ 1279.679657][ T27] usb 10-1: device descriptor read/all, error -71 [ 1280.617461][T12912] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1657'. [ 1282.709941][T12920] loop9: detected capacity change from 0 to 8 [ 1283.337637][T12925] fuse: Unknown parameter '' [ 1283.613217][T12926] Bluetooth: MGMT ver 1.22 [ 1286.220004][T12973] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1667'. [ 1287.188370][T12634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1287.211989][T12634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1289.092777][T12634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1289.128139][T12634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1291.056813][T12634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.146662][T12998] xt_l2tp: invalid flags combination: 4 [ 1291.202928][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1291.226742][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1291.250040][T13000] loop9: detected capacity change from 0 to 128 [ 1291.282551][T12634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.360230][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1291.535663][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1291.700267][ T26] audit: type=1326 audit(1786296497.867:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12999 comm="syz.9.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144839e019 code=0x7ffc0000 [ 1292.477911][ T9576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.485097][ T9576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.520707][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1292.581101][ T26] audit: type=1326 audit(1786296497.867:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12999 comm="syz.9.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144839e019 code=0x7ffc0000 [ 1292.621029][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1292.657726][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1292.697382][ T9576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.704656][ T9576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.716668][ T26] audit: type=1326 audit(1786296497.867:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12999 comm="syz.9.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f144839e019 code=0x7ffc0000 [ 1292.746647][ T26] audit: type=1326 audit(1786296497.867:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12999 comm="syz.9.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144839e019 code=0x7ffc0000 [ 1292.822060][ T26] audit: type=1326 audit(1786296497.867:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12999 comm="syz.9.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144839e019 code=0x7ffc0000 [ 1292.856145][T13005] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 1292.880584][ T26] audit: type=1326 audit(1786296497.867:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12999 comm="syz.9.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f144839e019 code=0x7ffc0000 [ 1292.954634][ T26] audit: type=1326 audit(1786296497.867:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12999 comm="syz.9.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144839e019 code=0x7ffc0000 [ 1292.987035][ T26] audit: type=1326 audit(1786296497.867:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12999 comm="syz.9.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144839e019 code=0x7ffc0000 [ 1293.021630][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1293.284726][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1293.874188][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1293.917618][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1294.072134][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1294.080380][ T26] audit: type=1326 audit(1786296497.867:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12999 comm="syz.9.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f144839e019 code=0x7ffc0000 [ 1294.968519][ T26] audit: type=1326 audit(1786296497.867:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12999 comm="syz.9.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144839e019 code=0x7ffc0000 [ 1295.000373][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1295.009802][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1295.030347][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1295.251768][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1295.271961][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1295.456101][T13026] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1680'. [ 1296.247876][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1296.257440][T12634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1296.828446][T13034] futex_wake_op: syz.9.1682 tries to shift op by 144; fix this program [ 1296.846671][T13036] loop9: detected capacity change from 0 to 128 [ 1300.728670][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1300.821535][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1301.001984][T12634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1301.273522][T12634] device veth0_vlan entered promiscuous mode [ 1301.319029][T12634] device veth1_vlan entered promiscuous mode [ 1303.031431][T13052] tmpfs: Unknown parameter 'quota' [ 1303.044828][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1303.055522][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1303.073511][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1303.083807][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1303.092829][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1303.139825][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1303.156202][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1303.197932][T12634] device veth0_macvtap entered promiscuous mode [ 1303.205464][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1303.217258][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1303.232061][T12634] device veth1_macvtap entered promiscuous mode [ 1303.248091][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1303.261162][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1303.295652][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.326170][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.481239][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.516965][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.592352][T13066] overlayfs: missing 'lowerdir' [ 1304.235211][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.251076][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.261716][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.277449][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.319640][T12634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.405937][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1304.431050][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1304.526171][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1692'. [ 1304.693933][T13076] futex_wake_op: syz.7.1693 tries to shift op by 144; fix this program [ 1305.606910][T13077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1306.598076][T13077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1307.614174][T13096] loop9: detected capacity change from 0 to 256 [ 1309.474431][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1309.486807][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1309.495936][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1309.503905][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1309.512949][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1309.520739][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1310.098768][T13116] loop9: detected capacity change from 0 to 2048 [ 1310.186258][T13116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1310.659400][T13109] lo speed is unknown, defaulting to 1000 [ 1310.661535][T13118] tmpfs: Unknown parameter 'quota' [ 1311.767528][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 1312.498877][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.826951][T13140] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1704'. [ 1312.930517][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1703'. [ 1314.813455][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 1315.313300][T13162] futex_wake_op: syz.9.1708 tries to shift op by 144; fix this program [ 1315.840997][T13109] chnl_net:caif_netlink_parms(): no params data found [ 1316.679994][T13109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.698689][T13109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.716266][T13109] device bridge_slave_0 entered promiscuous mode [ 1316.725717][T13109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.733794][T13109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.741807][T13109] device bridge_slave_1 entered promiscuous mode [ 1316.767665][T13109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.779912][T13109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.881807][T13109] team0: Port device team_slave_0 added [ 1316.973628][T13109] team0: Port device team_slave_1 added [ 1317.029616][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 1317.050759][T13109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.086411][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.201909][T13109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.236800][T13109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.243816][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.359914][T13109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.845948][T13109] device hsr_slave_0 entered promiscuous mode [ 1317.854060][ T26] kauditd_printk_skb: 76 callbacks suppressed [ 1317.854074][ T26] audit: type=1800 audit(1786296778.097:202): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1710" name="bus" dev="ramfs" ino=61488 res=0 errno=0 [ 1318.570257][T13109] device hsr_slave_1 entered promiscuous mode [ 1318.594691][T13109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1318.710553][T13109] Cannot create hsr debugfs directory [ 1318.814993][T13187] sctp: [Deprecated]: syz.5.1712 (pid 13187) Use of int in max_burst socket option deprecated. [ 1318.814993][T13187] Use struct sctp_assoc_value instead [ 1319.015645][T13193] tmpfs: Unknown parameter 'quota' [ 1319.093355][T13194] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1712'. [ 1319.284179][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 1321.513552][T13209] tmpfs: Unknown parameter 'quota' [ 1321.538024][ T4289] Bluetooth: hci0: command 0x0405 tx timeout [ 1326.569703][T13231] tmpfs: Unknown parameter 'quota' [ 1327.897889][T13242] loop8: detected capacity change from 0 to 1024 [ 1328.270625][T13242] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1328.782443][T13255] Bluetooth: MGMT ver 1.22 [ 1329.182871][T13257] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1722'. [ 1329.201622][T10656] EXT4-fs (loop8): unmounting filesystem. [ 1329.298564][ T9576] device hsr_slave_0 left promiscuous mode [ 1330.161248][ T9576] device hsr_slave_1 left promiscuous mode [ 1330.422785][ T9576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.526606][T13273] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1726'. [ 1330.809737][T13275] syz.5.1728 sent an empty control message without MSG_MORE. [ 1330.827084][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.870646][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.910202][T13278] tmpfs: Unknown parameter 'quota' [ 1331.087151][ T9576] device bridge_slave_1 left promiscuous mode [ 1331.106671][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.127610][ T9576] device bridge_slave_0 left promiscuous mode [ 1331.160658][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.266388][ T9576] device veth1_macvtap left promiscuous mode [ 1331.302690][ T9576] device veth0_macvtap left promiscuous mode [ 1331.308880][ T9576] device veth1_vlan left promiscuous mode [ 1331.338606][ T9576] device veth0_vlan left promiscuous mode [ 1331.697450][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1729'. [ 1331.718387][T13283] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1729'. [ 1332.989465][ T9576] team0 (unregistering): Port device team_slave_1 removed [ 1333.094522][T13291] tmpfs: Unknown parameter 'quota' [ 1333.151613][ T9576] team0 (unregistering): Port device team_slave_0 removed [ 1333.299966][ T9576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.668605][ T9576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.232296][ T9576] bond0 (unregistering): Released all slaves [ 1334.331920][T13273] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1726'. [ 1334.462066][T13109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1334.532405][T13109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1334.772521][T13109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1335.649985][T13305] futex_wake_op: syz.5.1732 tries to shift op by 144; fix this program [ 1335.743257][T13109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1335.832710][T13306] loop8: detected capacity change from 0 to 1024 [ 1335.840179][T13306] EXT4-fs: Ignoring removed bh option [ 1335.864536][T13306] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 1335.958111][T13306] System zones: 0-1, 3-12 [ 1335.968753][T13306] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1335.985154][T13315] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1735'. [ 1336.297026][T13322] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1336.306073][T13322] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1336.742810][T10656] EXT4-fs (loop8): unmounting filesystem. [ 1337.150310][T13334] futex_wake_op: syz.5.1739 tries to shift op by 144; fix this program [ 1337.413705][T13109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.882230][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1337.895840][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1337.958532][T13109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.008038][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1338.047733][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1338.078181][T10301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.085401][T10301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.152796][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1338.220741][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1338.278186][T10301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.285353][T10301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.323878][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1338.344117][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1338.685555][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1339.025721][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1339.095186][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1339.179072][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1339.199512][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1339.589985][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1339.621583][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1339.635845][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1340.005104][T13109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1340.029318][T13109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1340.038139][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1340.056219][T13350] tmpfs: Unknown parameter 'quota' [ 1340.140127][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1340.222923][T13356] tmpfs: Unknown parameter 'quota' [ 1342.872098][T13374] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1748'. [ 1343.212757][T13379] sctp: [Deprecated]: syz.9.1752 (pid 13379) Use of int in max_burst socket option deprecated. [ 1343.212757][T13379] Use struct sctp_assoc_value instead [ 1343.612650][T13383] netlink: 204 bytes leftover after parsing attributes in process `syz.9.1752'. [ 1345.811032][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1345.818766][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1345.832957][T13109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.928767][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1345.967435][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1346.072709][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1346.153226][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1346.357570][T13412] loop9: detected capacity change from 0 to 1024 [ 1346.779621][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1346.787794][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1346.801820][T13109] device veth0_vlan entered promiscuous mode [ 1346.875851][T13109] device veth1_vlan entered promiscuous mode [ 1346.988585][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1347.046429][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1347.156280][T13109] device veth0_macvtap entered promiscuous mode [ 1347.195015][T13109] device veth1_macvtap entered promiscuous mode [ 1347.234201][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1347.280368][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1347.384531][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1347.733753][T13428] tmpfs: Unknown parameter 'quota' [ 1347.936471][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1348.496482][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.551318][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.627942][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.638510][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.650666][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.661322][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.671432][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.684303][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.697413][T13109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.722235][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.779063][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.801305][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.901881][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.949648][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.991169][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.047227][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1349.084950][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.135971][T13109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1349.162340][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1349.195888][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1349.234379][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1349.266494][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1349.326547][T13109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.401079][T13109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.467129][T13109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.498406][T13446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1761'. [ 1349.538426][T13109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.861233][ T4751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.889322][ T4751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.018444][T13456] futex_wake_op: syz.5.1763 tries to shift op by 144; fix this program [ 1351.265024][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1351.456660][ T4755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.561440][ T4755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.760295][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1358.591368][T13494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1770'. [ 1359.913244][T13497] tmpfs: Unknown parameter 'quota' [ 1360.334498][T13503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1772'. [ 1364.708593][T13520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1775'. [ 1364.717693][T13520] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1775'. [ 1365.386022][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1776'. [ 1369.833491][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1782'. [ 1370.057104][T13565] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1785'. [ 1370.157614][T13568] netlink: 'syz.0.1784': attribute type 2 has an invalid length. [ 1372.762728][T13586] 0x000000000007-0x000000020000 : "" [ 1372.805614][T13586] ftl_cs: FTL header corrupt! [ 1373.039784][T13594] tmpfs: Unknown parameter 'quota' [ 1375.333902][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1793'. [ 1376.433812][T13619] futex_wake_op: syz.8.1794 tries to shift op by 144; fix this program [ 1377.291360][T13624] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1798'. [ 1379.133816][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1379.179088][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1800'. [ 1379.786717][T13654] futex_wake_op: syz.0.1802 tries to shift op by 144; fix this program [ 1381.663026][T13662] futex_wake_op: syz.5.1805 tries to shift op by 144; fix this program [ 1382.643271][T13672] tmpfs: Unknown parameter 'quota' [ 1382.809516][T13674] overlayfs: missing 'lowerdir' [ 1383.295523][T13673] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1383.302003][T13673] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1383.344980][T13673] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1383.352805][T13673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1383.358872][T13673] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1383.370435][T13673] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1383.377704][T13673] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1383.384225][T13673] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1383.393113][T13673] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1383.400773][T13673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1383.406749][T13673] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1383.414828][T13673] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1383.422043][T13673] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1383.428328][T13673] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1383.435359][T13673] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1383.749603][T13682] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1810'. [ 1383.761212][T13683] loop5: detected capacity change from 0 to 2415 [ 1383.911979][T13683] loop5: detected capacity change from 2415 to 5631 [ 1385.265273][ T4289] Bluetooth: hci5: command 0x0c1a tx timeout [ 1385.524905][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout [ 1385.751001][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout [ 1385.757212][ T4289] Bluetooth: hci2: command 0x0c1a tx timeout [ 1385.763468][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 1387.583147][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 1388.347268][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 1388.353788][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 1388.354992][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 1388.360609][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 1390.349237][T13722] futex_wake_op: syz.8.1816 tries to shift op by 144; fix this program [ 1390.365669][T13732] futex_wake_op: syz.9.1819 tries to shift op by 144; fix this program [ 1390.957653][T13734] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1391.474252][T13744] futex_wake_op: syz.0.1820 tries to shift op by 144; fix this program [ 1391.744693][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1823'. [ 1392.726018][T13757] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1392.734698][T13757] cramfs: wrong magic [ 1393.611317][T13757] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1824'. [ 1393.840647][T13769] futex_wake_op: syz.9.1826 tries to shift op by 144; fix this program [ 1394.698502][ T26] audit: type=1800 audit(1787347473.075:203): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1829" name="idVendor" dev="configfs" ino=63703 res=0 errno=0 [ 1394.727711][T13757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.736808][T13757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.803110][ T26] audit: type=1800 audit(1787347473.122:204): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1829" name="serialnumber" dev="configfs" ino=63005 res=0 errno=0 [ 1394.871114][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1827'. [ 1394.873984][T13782] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1394.939769][ T26] audit: type=1800 audit(1787347473.122:205): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1829" name="manufacturer" dev="configfs" ino=63006 res=0 errno=0 [ 1395.856112][T13789] tmpfs: Unknown parameter 'quota' [ 1395.871998][T13784] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1830'. [ 1396.224942][T13798] futex_wake_op: syz.9.1831 tries to shift op by 144; fix this program [ 1397.047576][T13801] futex_wake_op: syz.0.1833 tries to shift op by 144; fix this program [ 1403.049584][T13831] futex_wake_op: syz.9.1840 tries to shift op by 144; fix this program [ 1404.594645][T13845] loop9: detected capacity change from 0 to 128 [ 1404.828433][T13845] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1405.602084][T13845] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.064756][T13859] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1406.616990][T13723] Bluetooth: hci0: unexpected event for opcode 0x042c [ 1406.839379][T11728] EXT4-fs (loop9): unmounting filesystem. [ 1406.851221][T13860] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1844'. [ 1407.274065][T13875] futex_wake_op: syz.8.1847 tries to shift op by 144; fix this program [ 1409.921534][T13884] futex_wake_op: syz.9.1846 tries to shift op by 144; fix this program [ 1410.663331][T13894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1852'. [ 1411.522457][T13897] loop8: detected capacity change from 0 to 512 [ 1411.624625][T13908] tmpfs: Unknown parameter 'quota' [ 1411.881217][T13897] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1411.980392][T13897] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1414.685859][T13939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1860'. [ 1414.754369][T13942] netlink: 'syz.7.1858': attribute type 2 has an invalid length. [ 1417.063262][T10656] EXT4-fs (loop8): unmounting filesystem. [ 1417.284500][T13958] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1417.295164][T13958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1418.557325][T13968] futex_wake_op: syz.0.1865 tries to shift op by 144; fix this program [ 1419.644946][T13969] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1866'. [ 1419.904333][T13979] futex_wake_op: syz.0.1867 tries to shift op by 144; fix this program [ 1421.016382][T13987] tmpfs: Unknown parameter 'quota' [ 1421.610283][T13996] futex_wake_op: syz.7.1864 tries to shift op by 144; fix this program [ 1422.875869][T14003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1872'. [ 1425.132858][T14025] tipc: Started in network mode [ 1425.137840][T14025] tipc: Node identity ac14140f, cluster identity 4711 [ 1425.145442][T14025] tipc: New replicast peer: 172.30.0.6 [ 1425.152993][T14025] tipc: Enabled bearer , priority 10 [ 1425.160546][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1874'. [ 1425.169586][T14025] tipc: Disabling bearer [ 1429.819129][T14045] futex_wake_op: syz.7.1877 tries to shift op by 144; fix this program [ 1429.840713][T14050] futex_wake_op: syz.5.1876 tries to shift op by 144; fix this program [ 1431.959483][T14058] futex_wake_op: syz.8.1880 tries to shift op by 144; fix this program [ 1432.711204][T14063] tmpfs: Unknown parameter 'quota' [ 1432.859433][T14062] IPVS: stopping master sync thread 14068 ... [ 1432.864891][T14068] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1432.925327][T14069] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1884'. [ 1432.940620][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1883'. [ 1434.980581][T14090] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1886'. [ 1436.914901][T14102] futex_wake_op: syz.8.1891 tries to shift op by 144; fix this program [ 1440.582687][T14120] futex_wake_op: syz.9.1882 tries to shift op by 144; fix this program [ 1440.603467][T14121] futex_wake_op: syz.8.1894 tries to shift op by 144; fix this program [ 1441.542426][T14133] tmpfs: Unknown parameter 'quota' [ 1442.290598][T14137] block device autoloading is deprecated and will be removed. [ 1442.656823][T14138] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1896'. [ 1442.702149][ T7736] block nbd0: Attempted send on invalid socket [ 1442.708860][ T7736] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1442.835011][T13723] Bluetooth: hci0: command 0x0406 tx timeout [ 1445.037937][T14142] device bond1 entered promiscuous mode [ 1445.065671][T14142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1445.432788][T14174] loop0: detected capacity change from 0 to 1024 [ 1445.443015][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1445.593453][T14174] EXT4-fs: Invalid want_extra_isize 7 [ 1445.626675][T14178] futex_wake_op: syz.5.1903 tries to shift op by 144; fix this program [ 1447.403522][T14189] futex_wake_op: syz.5.1906 tries to shift op by 144; fix this program [ 1448.375366][T14194] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1901'. [ 1448.578620][T14196] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1908'. [ 1448.727833][T14201] tmpfs: Unknown parameter 'quota' [ 1449.079565][T14200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1907'. [ 1450.492155][T14227] loop0: detected capacity change from 0 to 512 [ 1451.136008][T14227] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1451.244038][T14227] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.725697][T14228] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1453.507616][T14263] futex_wake_op: syz.7.1916 tries to shift op by 144; fix this program [ 1455.830072][T14268] overlayfs: failed to clone lowerpath [ 1456.097778][T14272] loop8: detected capacity change from 0 to 256 [ 1456.203397][T14093] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1457.754891][T14284] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1921'. [ 1457.872719][T14288] tmpfs: Unknown parameter 'quota' [ 1458.762266][T14295] tmpfs: Unknown parameter 'quota' [ 1459.106648][T13109] EXT4-fs (loop0): unmounting filesystem. [ 1459.483969][T14317] tmpfs: Unknown parameter 'quota' [ 1460.834848][T14323] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1920'. [ 1461.858387][T14341] loop0: detected capacity change from 0 to 1024 [ 1462.335027][T14342] futex_wake_op: syz.5.1929 tries to shift op by 144; fix this program [ 1462.714583][ T4320] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 1462.724712][T14341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1464.180404][T13109] EXT4-fs (loop0): unmounting filesystem. [ 1464.625152][T14370] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1934'. [ 1465.409057][T14368] tmpfs: Unknown parameter 'quota' [ 1467.123167][T14380] futex_wake_op: syz.5.1937 tries to shift op by 144; fix this program [ 1467.835752][T14382] loop8: detected capacity change from 0 to 256 [ 1467.898238][T14385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1939'. [ 1467.910096][T14382] FAT-fs (loop8): Directory bread(block 64) failed [ 1467.946303][T14382] FAT-fs (loop8): Directory bread(block 65) failed [ 1467.975252][T14382] FAT-fs (loop8): Directory bread(block 66) failed [ 1468.007441][T14382] FAT-fs (loop8): Directory bread(block 67) failed [ 1468.022569][T14382] FAT-fs (loop8): Directory bread(block 68) failed [ 1468.078811][T14382] FAT-fs (loop8): Directory bread(block 69) failed [ 1468.097508][T14382] FAT-fs (loop8): Directory bread(block 70) failed [ 1468.115172][T14382] FAT-fs (loop8): Directory bread(block 71) failed [ 1468.158403][T14371] device bridge_slave_1 left promiscuous mode [ 1468.165049][T14382] FAT-fs (loop8): Directory bread(block 72) failed [ 1468.186136][T14382] FAT-fs (loop8): Directory bread(block 73) failed [ 1468.195683][T14371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.230241][T14371] device bridge_slave_0 left promiscuous mode [ 1468.252751][T14371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.952378][T14395] tmpfs: Unknown parameter 'quota' [ 1469.400404][T14407] futex_wake_op: syz.5.1943 tries to shift op by 144; fix this program [ 1471.493000][T14415] loop9: detected capacity change from 0 to 1024 [ 1471.504247][T14418] tmpfs: Unknown parameter 'quota' [ 1474.042444][T14415] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1474.082486][T14433] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1948'. [ 1474.846696][ T26] audit: type=1800 audit(1788401242.985:206): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1944" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1474.915539][T11728] EXT4-fs (loop9): unmounting filesystem. [ 1476.185620][T14448] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1950'. [ 1477.401762][T14457] PKCS7: Unknown OID: [4] 0.0 [ 1477.406780][T14457] PKCS7: Only support pkcs7_signedData type [ 1477.452423][T14457] xt_policy: output policy not valid in PREROUTING and INPUT [ 1478.212647][T14463] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1480.578109][T14481] loop0: detected capacity change from 0 to 4096 [ 1481.108390][T14481] ntfs: volume version 3.1. [ 1481.775762][T14489] tmpfs: Unknown parameter 'quota' [ 1482.293345][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1956'. [ 1484.621008][T14507] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1962'. [ 1486.667227][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1967'. [ 1488.619192][T14531] futex_wake_op: syz.7.1968 tries to shift op by 144; fix this program [ 1489.133933][T14534] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1492.684176][T14561] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1976'. [ 1494.650265][T14596] futex_wake_op: syz.5.1982 tries to shift op by 144; fix this program [ 1495.739419][T14603] futex_wake_op: syz.8.1985 tries to shift op by 144; fix this program [ 1497.739628][T14616] 9pnet_fd: p9_fd_create_tcp (14616): problem connecting socket to 127.0.0.1 [ 1501.061561][T14645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1501.887353][T14637] ./file0: Can't open blockdev [ 1503.185863][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1996'. [ 1504.096823][T14672] futex_wake_op: syz.8.1997 tries to shift op by 144; fix this program [ 1506.149051][T14702] loop8: detected capacity change from 0 to 40427 [ 1507.530839][T14702] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1507.538654][T14702] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1507.563308][T14702] F2FS-fs (loop8): invalid crc value [ 1508.898668][T14702] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-4) [ 1509.252131][ T26] audit: type=1326 audit(1789450874.908:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.7.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b9e019 code=0x7ffc0000 [ 1509.370117][ T26] audit: type=1326 audit(1789450874.908:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.7.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b9e019 code=0x7ffc0000 [ 1509.429473][ T26] audit: type=1326 audit(1789450875.065:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.7.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fba14b9e019 code=0x7ffc0000 [ 1509.597266][T14711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1509.605474][T14711] IPv6: NLM_F_CREATE should be set when creating new route [ 1509.639143][ T26] audit: type=1326 audit(1789450875.065:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.7.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b9e019 code=0x7ffc0000 [ 1509.754893][ T26] audit: type=1326 audit(1789450875.065:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.7.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b9e019 code=0x7ffc0000 [ 1509.875784][ T26] audit: type=1326 audit(1789450875.065:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.7.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fba14b9e019 code=0x7ffc0000 [ 1510.664417][T14723] futex_wake_op: syz.9.2006 tries to shift op by 144; fix this program [ 1510.714287][ T26] audit: type=1326 audit(1789450875.065:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.7.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b9e019 code=0x7ffc0000 [ 1510.739026][T14727] futex_wake_op: syz.5.2005 tries to shift op by 144; fix this program [ 1511.553059][ T26] audit: type=1326 audit(1789450875.065:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.7.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b9e019 code=0x7ffc0000 [ 1511.601215][ T26] audit: type=1326 audit(1789450875.065:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.7.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fba14b9e019 code=0x7ffc0000 [ 1512.088579][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1512.712292][ T26] audit: type=1326 audit(1789450875.065:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.7.2003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b9e019 code=0x7ffc0000 [ 1515.475951][T14745] ./file0: Can't open blockdev [ 1515.702939][T14769] futex_wake_op: syz.8.2012 tries to shift op by 144; fix this program [ 1516.611232][T14772] futex_wake_op: syz.7.2013 tries to shift op by 144; fix this program [ 1517.578207][T14777] loop8: detected capacity change from 0 to 512 [ 1517.599549][T14777] EXT4-fs: Mount option(s) incompatible with ext2 [ 1518.298268][T14781] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1518.317189][T14784] usb usb7: usbfs: process 14784 (syz.8.2014) did not claim interface 0 before use [ 1519.924502][T14796] futex_wake_op: syz.5.2018 tries to shift op by 144; fix this program [ 1519.940242][T14795] futex_wake_op: syz.0.2019 tries to shift op by 144; fix this program [ 1522.582707][T14835] futex_wake_op: syz.7.2025 tries to shift op by 144; fix this program [ 1523.756609][T14847] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1523.765423][T14847] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1523.774632][T14847] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1527.637313][T14870] loop9: detected capacity change from 0 to 512 [ 1529.043175][T14870] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1529.055184][T14870] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 1529.065330][T14870] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.2028: Corrupt directory, running e2fsck is recommended [ 1529.168075][T14870] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1529.238879][T14867] overlayfs: failed to clone upperpath [ 1529.248742][T14870] EXT4-fs error (device loop9): ext4_iget_extra_inode:4763: inode #15: comm syz.9.2028: corrupted in-inode xattr [ 1529.262465][T14870] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.2028: couldn't read orphan inode 15 (err -117) [ 1529.275129][T14870] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1529.287539][T14870] EXT4-fs (loop9): unmounting filesystem. [ 1529.743966][T14878] tmpfs: Unknown parameter 'quota' [ 1529.817186][T14882] futex_wake_op: syz.9.2031 tries to shift op by 144; fix this program [ 1531.619885][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2034'. [ 1532.858694][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2030'. [ 1534.255736][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 1534.255901][ T26] audit: type=1326 audit(1789452945.961:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.7.2038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba14b9e019 code=0x0 [ 1534.423077][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2039'. [ 1534.636753][T14928] fuse: Bad value for 'fd' [ 1535.972956][T14937] loop8: detected capacity change from 0 to 512 [ 1536.247152][T14937] EXT4-fs error (device loop8): __ext4_iget:5102: inode #11: block 16777240: comm syz.8.2040: invalid block [ 1536.262089][T14937] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.2040: couldn't read orphan inode 11 (err -117) [ 1536.277119][T14937] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1536.624112][T10656] EXT4-fs (loop8): unmounting filesystem. [ 1538.292717][T14964] raw_sendmsg: syz.9.2043 forgot to set AF_INET. Fix it! [ 1538.646605][T13723] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 1539.019650][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2044'. [ 1539.157073][T14972] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1539.445879][T14972] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1539.814227][T14986] tmpfs: Unknown parameter 'quota' [ 1541.464165][T14981] tmpfs: Unknown parameter 'quota' [ 1541.686320][T14967] team0: Port device team_slave_0 removed [ 1541.695338][T14961] netlink: 'syz.7.2042': attribute type 13 has an invalid length. [ 1541.899049][T14999] futex_wake_op: syz.0.2048 tries to shift op by 144; fix this program [ 1542.053968][T14961] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1543.087652][T14961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1543.136481][T14961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1544.810634][T15015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2052'. [ 1545.082414][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2053'. [ 1545.100773][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2053'. [ 1545.109910][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2053'. [ 1545.120761][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2053'. [ 1545.129942][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2053'. [ 1545.148753][T15017] 9pnet_virtio: no channels available for device syz [ 1549.182303][T15044] tmpfs: Unknown parameter 'quota' [ 1549.571940][T15063] futex_wake_op: syz.5.2062 tries to shift op by 144; fix this program [ 1551.048981][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2063'. [ 1551.995570][T15049] ./file0: Can't open blockdev [ 1552.596756][T13723] Bluetooth: hci2: unexpected subevent 0x06 length: 18 > 10 [ 1552.685896][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1552.694023][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1552.703401][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1552.711926][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1552.719534][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1553.223876][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1553.245747][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1553.297100][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1553.339330][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1553.346801][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1553.420694][T15089] futex_wake_op: syz.5.2068 tries to shift op by 144; fix this program [ 1553.508580][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1553.556837][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1553.605138][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1553.657313][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1553.987392][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1554.300184][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1554.830345][T13723] Bluetooth: hci2: command 0x2021 tx timeout [ 1554.837061][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1554.844498][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1554.852389][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1554.860075][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1554.870153][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1554.877721][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1554.886882][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1554.925705][T15093] tmpfs: Unknown parameter 'quota' [ 1555.141739][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.181537][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.221914][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.609141][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.803513][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.811322][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.818880][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.826759][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.835011][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.842824][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.850353][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.858290][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.866070][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.873590][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.881805][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.889691][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.898501][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1555.906020][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1556.580544][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1556.587998][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1556.737024][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1556.771566][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1556.815570][T15108] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2071'. [ 1556.830763][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1556.838184][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1556.901492][T15112] tmpfs: Unknown parameter 'quota' [ 1556.919689][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1556.955848][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.009378][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.060399][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.109979][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.127321][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.144460][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.151911][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.180049][T15119] loop8: detected capacity change from 0 to 256 [ 1557.194519][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.208278][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.361466][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.427386][T15124] hub 8-0:1.0: USB hub found [ 1557.434757][T15124] hub 8-0:1.0: 1 port detected [ 1557.522723][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.530393][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.538030][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.546110][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1557.553752][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.147140][T15121] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1558.155497][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.192701][T15119] FAT-fs (loop8): Directory bread(block 64) failed [ 1558.194550][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.215144][T15119] FAT-fs (loop8): Directory bread(block 65) failed [ 1558.227260][T15119] FAT-fs (loop8): Directory bread(block 66) failed [ 1558.242199][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.255281][T15119] FAT-fs (loop8): Directory bread(block 67) failed [ 1558.264732][T15127] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2077'. [ 1558.298642][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.318762][T15119] FAT-fs (loop8): Directory bread(block 68) failed [ 1558.335483][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.342955][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.363934][T15119] FAT-fs (loop8): Directory bread(block 69) failed [ 1558.379001][T15119] FAT-fs (loop8): Directory bread(block 70) failed [ 1558.386078][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.406193][T15119] FAT-fs (loop8): Directory bread(block 71) failed [ 1558.413716][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.421158][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.433583][T15119] FAT-fs (loop8): Directory bread(block 72) failed [ 1558.443909][T15119] FAT-fs (loop8): Directory bread(block 73) failed [ 1558.461245][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.476343][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.490435][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.514237][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.664982][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.672862][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.680304][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.688026][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.707677][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.716462][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.723902][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.732207][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1558.742750][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1559.164038][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1559.172397][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1559.180133][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1559.187719][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1559.195542][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1559.209958][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1559.235618][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1559.245906][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1559.253346][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1559.275872][ T22] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1560.357904][T15143] futex_wake_op: syz.9.2081 tries to shift op by 144; fix this program [ 1563.205289][T15162] tmpfs: Unknown parameter 'quota' [ 1563.493771][T15140] fido_id[15140]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1564.339486][T15171] tmpfs: Unknown parameter 'quota' [ 1564.473118][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2087'. [ 1566.785458][T15190] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2089'. [ 1567.667726][T15195] futex_wake_op: syz.7.2090 tries to shift op by 144; fix this program [ 1568.969504][T15205] loop9: detected capacity change from 0 to 512 [ 1569.455174][T15205] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1569.468201][T15205] EXT4-fs (loop9): DAX unsupported by block device. [ 1570.059662][T15215] futex_wake_op: syz.8.2094 tries to shift op by 144; fix this program [ 1570.889953][T15219] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2096'. [ 1572.479088][T15229] tmpfs: Unknown parameter 'quota' [ 1572.782118][T15234] futex_wake_op: syz.5.2100 tries to shift op by 144; fix this program [ 1573.808670][T15242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2101'. [ 1575.598006][T15247] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2104'. [ 1575.906656][T15250] futex_wake_op: syz.5.2103 tries to shift op by 144; fix this program [ 1578.479213][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1579.113706][T15263] Can't find ip_set type ho# [ 1581.265592][T15284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2110'. [ 1582.561323][T13723] Bluetooth: hci5: unexpected subevent 0x06 length: 18 > 10 [ 1583.156704][ T4288] Bluetooth: hci2: unexpected event for opcode 0x200c [ 1583.176667][T15298] tmpfs: Unknown parameter 'quota' [ 1583.249179][T15305] futex_wake_op: syz.8.2113 tries to shift op by 144; fix this program [ 1584.827810][ T4288] Bluetooth: hci5: command 0x2021 tx timeout [ 1587.718217][T15322] futex_wake_op: syz.5.2120 tries to shift op by 144; fix this program [ 1590.347230][T15348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2125'. [ 1590.629411][T15350] tmpfs: Unknown parameter 'quota' [ 1591.152359][T15361] futex_wake_op: syz.0.2129 tries to shift op by 144; fix this program [ 1591.407908][T15364] lo speed is unknown, defaulting to 1000 [ 1592.905176][T15368] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2131'. [ 1593.240428][T15371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2132'. [ 1595.154071][T15382] [ 1595.156458][T15382] ====================================================== [ 1595.163496][T15382] WARNING: possible circular locking dependency detected [ 1595.170550][T15382] syzkaller #0 Not tainted [ 1595.174983][T15382] ------------------------------------------------------ [ 1595.182106][T15382] syz.0.2135/15382 is trying to acquire lock: [ 1595.188202][T15382] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 1595.198121][T15382] [ 1595.198121][T15382] but task is already holding lock: [ 1595.205519][T15382] ffff888070ed8b70 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 1595.215285][T15382] [ 1595.215285][T15382] which lock already depends on the new lock. [ 1595.215285][T15382] [ 1595.225799][T15382] [ 1595.225799][T15382] the existing dependency chain (in reverse order) is: [ 1595.234834][T15382] [ 1595.234834][T15382] -> #2 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 1595.243558][T15382] down_write+0x36/0x60 [ 1595.248374][T15382] configfs_depend_item_unlocked+0x14f/0x430 [ 1595.254918][T15382] usbg_make_tpg+0x1f3/0x580 [ 1595.260241][T15382] target_fabric_make_tpg+0xa0/0x6d0 [ 1595.266150][T15382] configfs_mkdir+0x511/0x9e0 [ 1595.271385][T15382] vfs_mkdir+0x386/0x570 [ 1595.276182][T15382] do_mkdirat+0x1d8/0x440 [ 1595.281075][T15382] __x64_sys_mkdir+0x6a/0x80 [ 1595.286215][T15382] do_syscall_64+0x4c/0xa0 [ 1595.291219][T15382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.297726][T15382] [ 1595.297726][T15382] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 1595.305411][T15382] __mutex_lock+0x12d/0xae0 [ 1595.310476][T15382] tcm_set_name+0x26/0x90 [ 1595.315359][T15382] function_make+0x195/0x350 [ 1595.320565][T15382] configfs_mkdir+0x511/0x9e0 [ 1595.325822][T15382] vfs_mkdir+0x386/0x570 [ 1595.330622][T15382] do_mkdirat+0x1d8/0x440 [ 1595.335511][T15382] __x64_sys_mkdir+0x6a/0x80 [ 1595.340653][T15382] do_syscall_64+0x4c/0xa0 [ 1595.345633][T15382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.352090][T15382] [ 1595.352090][T15382] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1595.360384][T15382] __lock_acquire+0x2d18/0x7c40 [ 1595.365850][T15382] lock_acquire+0x1bb/0x4a0 [ 1595.370908][T15382] __mutex_lock+0x12d/0xae0 [ 1595.375970][T15382] configfs_rmdir+0x638/0x980 [ 1595.381198][T15382] vfs_rmdir+0x34e/0x4a0 [ 1595.385987][T15382] do_rmdir+0x29a/0x5c0 [ 1595.390700][T15382] __x64_sys_rmdir+0x45/0x50 [ 1595.395849][T15382] do_syscall_64+0x4c/0xa0 [ 1595.400857][T15382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.407396][T15382] [ 1595.407396][T15382] other info that might help us debug this: [ 1595.407396][T15382] [ 1595.417651][T15382] Chain exists of: [ 1595.417651][T15382] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#21 [ 1595.417651][T15382] [ 1595.432386][T15382] Possible unsafe locking scenario: [ 1595.432386][T15382] [ 1595.439855][T15382] CPU0 CPU1 [ 1595.445235][T15382] ---- ---- [ 1595.450623][T15382] lock(&sb->s_type->i_mutex_key#21); [ 1595.456120][T15382] lock(&opts->dep_lock); [ 1595.463079][T15382] lock(&sb->s_type->i_mutex_key#21); [ 1595.471093][T15382] lock(gadget_subsys.su_mutex); [ 1595.476242][T15382] [ 1595.476242][T15382] *** DEADLOCK *** [ 1595.476242][T15382] [ 1595.484404][T15382] 3 locks held by syz.0.2135/15382: [ 1595.489617][T15382] #0: ffff8881466b6460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1595.498958][T15382] #1: ffff888054e1f3f0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0 [ 1595.509831][T15382] #2: ffff888070ed8b70 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 1595.519983][T15382] [ 1595.519983][T15382] stack backtrace: [ 1595.525896][T15382] CPU: 1 PID: 15382 Comm: syz.0.2135 Not tainted syzkaller #0 [ 1595.533375][T15382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1595.543471][T15382] Call Trace: [ 1595.546783][T15382] [ 1595.549742][T15382] dump_stack_lvl+0x188/0x24e [ 1595.554472][T15382] ? load_image+0x410/0x410 [ 1595.559030][T15382] ? show_regs_print_info+0x12/0x12 [ 1595.564268][T15382] ? print_circular_bug+0x12b/0x1a0 [ 1595.569502][T15382] check_noncircular+0x296/0x330 [ 1595.574493][T15382] ? add_chain_block+0x9b0/0x9b0 [ 1595.579464][T15382] ? lockdep_lock+0xf1/0x1f0 [ 1595.584142][T15382] ? _find_first_zero_bit+0xd2/0x100 [ 1595.589561][T15382] __lock_acquire+0x2d18/0x7c40 [ 1595.594465][T15382] ? __lock_acquire+0x7c40/0x7c40 [ 1595.599531][T15382] ? lock_chain_count+0x20/0x20 [ 1595.604435][T15382] ? verify_lock_unused+0x140/0x140 [ 1595.609682][T15382] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1595.615614][T15382] ? lockdep_hardirqs_on+0x94/0x140 [ 1595.620841][T15382] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1595.626765][T15382] ? _raw_spin_unlock+0x40/0x40 [ 1595.631643][T15382] ? __schedule+0x1087/0x4030 [ 1595.636376][T15382] lock_acquire+0x1bb/0x4a0 [ 1595.640909][T15382] ? configfs_rmdir+0x638/0x980 [ 1595.645805][T15382] ? __might_sleep+0xd0/0xd0 [ 1595.650498][T15382] ? read_lock_is_recursive+0x10/0x10 [ 1595.655911][T15382] __mutex_lock+0x12d/0xae0 [ 1595.660465][T15382] ? configfs_rmdir+0x638/0x980 [ 1595.665365][T15382] ? configfs_rmdir+0x638/0x980 [ 1595.670261][T15382] ? dput+0x37/0x1d0 [ 1595.674211][T15382] ? mutex_lock_nested+0x10/0x10 [ 1595.679184][T15382] ? __lock_acquire+0x7c40/0x7c40 [ 1595.684259][T15382] ? lockref_put_or_lock+0x6e/0xb0 [ 1595.689410][T15382] ? __rcu_read_unlock+0x78/0xd0 [ 1595.694470][T15382] ? dput+0x37/0x1d0 [ 1595.698422][T15382] configfs_rmdir+0x638/0x980 [ 1595.703151][T15382] vfs_rmdir+0x34e/0x4a0 [ 1595.707427][T15382] do_rmdir+0x29a/0x5c0 [ 1595.711610][T15382] ? d_delete_notify+0x150/0x150 [ 1595.716607][T15382] ? getname_flags+0x206/0x500 [ 1595.721412][T15382] __x64_sys_rmdir+0x45/0x50 [ 1595.726043][T15382] do_syscall_64+0x4c/0xa0 [ 1595.730499][T15382] ? clear_bhb_loop+0x60/0xb0 [ 1595.735208][T15382] ? clear_bhb_loop+0x60/0xb0 [ 1595.739914][T15382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.745857][T15382] RIP: 0033:0x7fae4279e019 [ 1595.750306][T15382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.770043][T15382] RSP: 002b:00007fae435b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1595.778489][T15382] RAX: ffffffffffffffda RBX: 00007fae42a26090 RCX: 00007fae4279e019 [ 1595.786494][T15382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 1595.794514][T15382] RBP: 00007fae4283500c R08: 0000000000000000 R09: 0000000000000000 [ 1595.802539][T15382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1595.810535][T15382] R13: 00007fae42a26128 R14: 00007fae42a26090 R15: 00007ffe536281b8 [ 1595.818633][T15382] [ 1596.203578][T15395] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2137'. [ 1596.391251][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2136'.