last executing test programs: 19m43.351327098s ago: executing program 3 (id=26): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r4, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x18a, &(0x7f0000000200)="$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") chdir(&(0x7f0000000240)='./file0\x00') llistxattr(0x0, 0x0, 0x0) 19m42.154785508s ago: executing program 3 (id=29): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) socket$inet_mptcp(0x2, 0x1, 0x106) 19m40.474646669s ago: executing program 3 (id=32): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) splice(r3, 0x0, r6, 0x0, 0x66, 0xf) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) 19m38.567886976s ago: executing program 3 (id=34): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x2c02) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) pipe(&(0x7f0000000440)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) inotify_init() socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 19m36.77590562s ago: executing program 3 (id=38): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) munlock(&(0x7f0000002000/0x1000)=nil, 0xffffffffdfffdfff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x60, 0x5}]}, 0x10) 19m33.389962674s ago: executing program 3 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x59, 0x249, 0x9f, 0xffffffff, 0x27, 0x8, 0x9}, 0x1c) r3 = openat(0xffffffffffffff9c, 0x0, 0x1d3942, 0x4) io_setup(0x20ff, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, &(0x7f0000002680)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x9, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@generic={0x8, 0x4, 0x2, 0x7, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) 19m17.945241124s ago: executing program 32 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x59, 0x249, 0x9f, 0xffffffff, 0x27, 0x8, 0x9}, 0x1c) r3 = openat(0xffffffffffffff9c, 0x0, 0x1d3942, 0x4) io_setup(0x20ff, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, &(0x7f0000002680)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x9, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@generic={0x8, 0x4, 0x2, 0x7, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) 12m1.955855313s ago: executing program 1 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000"], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa10b4b3cad0fe92d2"], 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) lstat(0x0, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0xd) 12m1.522535724s ago: executing program 1 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$getregs(0xe, 0x0, 0x59f2d97, &(0x7f00000000c0)=""/98) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}}, 0x4000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000abe000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(0xffffffffffffffff, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x4000130, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 12m0.329945453s ago: executing program 1 (id=760): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f0000000500)={0x20080522}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[0x0, 0x0], 0x4) r2 = getpgrp(0x0) ioprio_get$pid(0x207e1e73da1d2d72, r2) socket$tipc(0x1e, 0x5, 0x0) 11m56.38480643s ago: executing program 1 (id=767): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r3) socket$inet6(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) clock_getres(0x2, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2c2c}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 11m54.518736006s ago: executing program 1 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4624, @remote}, 0x10) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) 11m53.370564474s ago: executing program 1 (id=773): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x5) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) splice(r2, 0x0, r5, 0x0, 0x66, 0xf) shutdown(0xffffffffffffffff, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) 11m37.893947295s ago: executing program 33 (id=773): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x5) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) splice(r2, 0x0, r5, 0x0, 0x66, 0xf) shutdown(0xffffffffffffffff, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) 1m14.119265249s ago: executing program 5 (id=1892): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x420008bf) utime(&(0x7f0000000000)='./file0\x00', 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) write$UHID_INPUT(r1, 0x0, 0x0) 1m12.800874239s ago: executing program 5 (id=1896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) listxattr(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(&(0x7f0000000300), 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 1m11.084444498s ago: executing program 5 (id=1898): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 1m9.070538674s ago: executing program 5 (id=1903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 1m6.848189644s ago: executing program 5 (id=1906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) clock_nanosleep(0x9, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000ffdbdf251100000008000100", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4004045}, 0x2a092) 1m3.229592636s ago: executing program 5 (id=1913): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) clock_adjtime(0x17, &(0x7f0000000100)={0x3, 0x7, 0x0, 0xfffffffffffffff6, 0x4, 0x4, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7d, 0xc000000000000000, 0x0, 0x9, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x717, 0x1fc, 0x5, 0x5, 0x6}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}}, 0x0) 48.110884279s ago: executing program 34 (id=1913): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) clock_adjtime(0x17, &(0x7f0000000100)={0x3, 0x7, 0x0, 0xfffffffffffffff6, 0x4, 0x4, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7d, 0xc000000000000000, 0x0, 0x9, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x717, 0x1fc, 0x5, 0x5, 0x6}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}}, 0x0) 16.804678899s ago: executing program 2 (id=1982): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x311380) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x2, 0xfffffffe, 0x0, 0x5}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) lchown(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) 15.530179518s ago: executing program 6 (id=1983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) syz_ublk_setup_io_uring(0x7bb3, &(0x7f0000001e80)={0x0, 0x2391, 0x880, 0x3, 0x2a9}, &(0x7f0000001f00), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x49) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000300000000000000000000000000000000002e00000000000000"], &(0x7f0000000040)=""/249, 0x46, 0x153, 0x6}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x202000) syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 15.337525162s ago: executing program 2 (id=1984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 12.888266958s ago: executing program 2 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x4e, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x120, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23) open_by_handle_at(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="17000000fb"], 0x402800) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) 12.884242278s ago: executing program 0 (id=1988): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) write(r0, &(0x7f0000000100)="d3f76ed5711d1a90b4a64994feeb0525b5a62c4faba3fbdafde38545312abcebecea155fce80eafafe6de81b328b709c70a4e0c7", 0x34) socket$inet6(0xa, 0x80002, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r2, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0) 12.863068168s ago: executing program 6 (id=1989): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) clock_adjtime(0x17, &(0x7f0000000100)={0x3, 0x7, 0x0, 0xfffffffffffffff6, 0x4, 0x4, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7d, 0xc000000000000000, 0x0, 0x9, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x717, 0x1fc, 0x5, 0x5, 0x6}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}}, 0x0) 12.75960114s ago: executing program 4 (id=1990): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') lseek(r3, 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000004300)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833ad0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde463e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921c0000a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd00", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x21, 0x10, 0x0, 0x0, 0x0, 0x6c9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) syz_fuse_handle_req(r4, &(0x7f0000006f00)="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", 0x2000, &(0x7f0000000500)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x25c17c22, 0x40000, 0x4d3c, 0x3, 0x9, 0x0, 0x0, 0x0, 0x4, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, 0x0) io_submit(0x0, 0x0, 0x0) 12.716561282s ago: executing program 7 (id=1991): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) umount2(0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) 11.066987559s ago: executing program 2 (id=1992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 9.71679195s ago: executing program 6 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000010280)=""/4096, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) poll(&(0x7f0000000000)=[{r5, 0x348}], 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r5, r5, 0x8, 0x0, 0x0, 0x3, 0xf6, 0x10cf, 0x5, 0x5, 0x3, 0x1, 'syz0\x00'}) shutdown(r5, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@dellink={0x34, 0x11, 0x82d, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc008}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.422516676s ago: executing program 0 (id=1994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1f0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1f0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x7e51ff628128eca7}, 0x100, 0x20}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xe, 0x0, 0xe, 0x2, 0x400, 0x7, 0x80000000]}}}, {{@ipv6={@mcast2, @local, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0xffff, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5a8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xa2fab000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 9.418969706s ago: executing program 4 (id=1995): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2}]}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) ioctl$VT_DISALLOCATE(r7, 0x5608) close_range(r8, 0xffffffffffffffff, 0x0) 9.132369393s ago: executing program 2 (id=1996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1f0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1f0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x7e51ff628128eca7}, 0x100, 0x20}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xe, 0x0, 0xe, 0x2, 0x400, 0x7, 0x80000000]}}}, {{@ipv6={@mcast2, @local, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0xffff, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5a8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xa2fab000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 8.883249199s ago: executing program 7 (id=1997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1f0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1f0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x7e51ff628128eca7}, 0x100, 0x20}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xe, 0x0, 0xe, 0x2, 0x400, 0x7, 0x80000000]}}}, {{@ipv6={@mcast2, @local, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0xffff, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5a8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xa2fab000) 7.902154701s ago: executing program 4 (id=1998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 7.899950881s ago: executing program 0 (id=1999): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x200000000000000f, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a67c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0x2, 0x9, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6.510980942s ago: executing program 6 (id=2000): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 6.16007945s ago: executing program 2 (id=2001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 6.142524131s ago: executing program 7 (id=2002): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0x2, 0x9, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x14000) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x4, 0x2, {0xa, 0x4e23, 0xb911, @empty, 0x5}}}, 0x3a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.440512147s ago: executing program 4 (id=2003): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) clock_adjtime(0x17, &(0x7f0000000100)={0x3, 0x7, 0x0, 0xfffffffffffffff6, 0x4, 0x4, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7d, 0xc000000000000000, 0x0, 0x9, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x717, 0x1fc, 0x5, 0x5, 0x6}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}}, 0x0) 4.151455886s ago: executing program 4 (id=2004): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x80002, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x11, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180000001901000000000000050000000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], 0x0, 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee", 0x15}], 0x1) 4.142106716s ago: executing program 0 (id=2014): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) clock_adjtime(0x17, &(0x7f0000000100)={0x3, 0x7, 0x0, 0xfffffffffffffff6, 0x4, 0x4, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7d, 0xc000000000000000, 0x0, 0x9, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x717, 0x1fc, 0x5, 0x5, 0x6}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}}, 0x0) 4.141682076s ago: executing program 6 (id=2005): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) write(r0, &(0x7f0000000100)="d3f76ed5711d1a90b4a64994feeb0525b5a62c4faba3fbdafde38545312abcebecea155fce80eafafe6de81b328b709c70a4e0c7", 0x34) socket$inet6(0xa, 0x80002, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r2, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0) 3.816214214s ago: executing program 7 (id=2006): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x401, 0x48001051, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) fanotify_mark(r0, 0x80, 0x8, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) 3.063047301s ago: executing program 0 (id=2007): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x3e8a, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000015c0)=[0x0]) io_uring_enter(r1, 0x2947, 0x2d1a, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r5, 0x18, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1.803920069s ago: executing program 7 (id=2008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$MON_IOCT_RING_SIZE(r3, 0x80089203, 0x2000000069b6a) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000680)=ANY=[@ANYRES32], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r5, 0xffffffffffffffff, 0x200000000000000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000008700)='./file0\x00', 0x0, 0x4000) 1.263147392s ago: executing program 6 (id=2009): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') 307.250613ms ago: executing program 4 (id=2010): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x800855, &(0x7f0000000d40)={[{@check_relaxed}, {@mode={'mode', 0x3d, 0x5}}, {@map_off}, {@map_acorn}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uid}, {@uid}, {@unhide}, {@mode={'mode', 0x3d, 0x2}}]}, 0x0, 0xa21, &(0x7f0000000180)="$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") utime(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) syz_clone3(0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)={0x50, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001300)="b461802305624431", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x83a7}, 0x50) 36.605879ms ago: executing program 0 (id=2011): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000001) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000000000000400', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYBLOB="bf8170c13088"]) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000140)=0x5) 0s ago: executing program 7 (id=2012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xa2fab000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 140.712635][ T4717] loop4: detected capacity change from 0 to 512 [ 141.081475][ T4343] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.804845][ T4722] input: syz0 as /devices/virtual/input/input9 [ 142.774392][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 143.416359][ T4343] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.071452][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 145.235478][ T4743] netlink: 72 bytes leftover after parsing attributes in process `syz.0.80'. [ 145.244451][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 146.124095][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 146.174835][ T4713] chnl_net:caif_netlink_parms(): no params data found [ 146.842454][ T4749] can0: slcan on ttyS3. [ 147.154337][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 147.330821][ T4746] can0 (unregistered): slcan off ttyS3. [ 147.562033][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.569457][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.579126][ T4713] device bridge_slave_0 entered promiscuous mode [ 148.724455][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.731676][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.934099][ T4713] device bridge_slave_1 entered promiscuous mode [ 149.264163][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 150.676891][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.714637][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.020480][ T4284] Bluetooth: hci2: command 0x0405 tx timeout [ 152.296349][ T4713] team0: Port device team_slave_0 added [ 152.309378][ T4713] team0: Port device team_slave_1 added [ 154.414599][ T4816] slcan: can't register candev [ 154.419734][ T4816] Falling back ldisc for ttyS3. [ 155.557099][ T4822] slcan: can't register candev [ 155.562897][ T4822] Falling back ldisc for ttyS3. [ 155.795096][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.802120][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.828085][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.763306][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.902389][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.914137][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.019294][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.104612][ T4713] device hsr_slave_0 entered promiscuous mode [ 160.644584][ T4713] device hsr_slave_1 entered promiscuous mode [ 160.653053][ T4713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.672703][ T4713] Cannot create hsr debugfs directory [ 162.510814][ T4343] device hsr_slave_0 left promiscuous mode [ 162.554153][ T4343] device hsr_slave_1 left promiscuous mode [ 162.592263][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.654363][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.720146][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.734575][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.774753][ T4343] device bridge_slave_1 left promiscuous mode [ 162.782541][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.027301][ T4343] device bridge_slave_0 left promiscuous mode [ 163.697401][ T4862] slcan: can't register candev [ 163.702512][ T4862] Falling back ldisc for ttyS3. [ 163.903495][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.361184][ T4343] device veth1_macvtap left promiscuous mode [ 164.389666][ T4343] device veth0_macvtap left promiscuous mode [ 164.409251][ T4343] device veth1_vlan left promiscuous mode [ 164.522190][ T4343] device veth0_vlan left promiscuous mode [ 164.679071][ T4877] NILFS (nullb0): couldn't find nilfs on the device [ 167.036187][ T4891] slcan: can't register candev [ 167.041185][ T4891] Falling back ldisc for ttyS3. [ 168.258630][ T4907] Cannot find set identified by id 0 to match [ 168.444410][ T4905] vivid-007: kernel_thread() failed [ 169.498288][ T4343] team0 (unregistering): Port device team_slave_1 removed [ 169.537708][ T4343] team0 (unregistering): Port device team_slave_0 removed [ 169.572284][ T4343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.609783][ T4343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.879973][ T4343] bond0 (unregistering): Released all slaves [ 173.928122][ T4713] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.974408][ T4713] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.023434][ T4713] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.063760][ T4713] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.399008][ T4935] loop1: detected capacity change from 0 to 8 [ 175.828485][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.855461][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.364925][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.838061][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.876376][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.945473][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.992922][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.000245][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.064818][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.084792][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.104470][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.111639][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.245059][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.263673][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.490029][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.878955][ T4956] slcan: can't register candev [ 177.884807][ T4956] Falling back ldisc for ttyS3. [ 178.127803][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.177822][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.233077][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.328679][ T4963] mmap: syz.4.126 (4963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.460416][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.656199][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.770389][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.919478][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.062087][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.144782][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.170171][ T4990] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.208081][ T4990] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.229189][ T5001] loop1: detected capacity change from 0 to 512 [ 182.399269][ T4400] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.091109][ T5004] input: syz0 as /devices/virtual/input/input10 [ 184.624948][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.632483][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.685677][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.356124][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 185.391257][ T5026] openvswitch: netlink: Flow key attr not present in new flow. [ 188.796323][ T5059] can0: slcan on ttyS3. [ 189.146965][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.374715][ T5050] can0 (unregistered): slcan off ttyS3. [ 189.387156][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.000505][ T5066] slcan: can't register candev [ 190.007470][ T5066] Falling back ldisc for ttyS3. [ 190.236806][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.246999][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.305047][ T4713] device veth0_vlan entered promiscuous mode [ 190.315909][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.403218][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.611493][ T4713] device veth1_vlan entered promiscuous mode [ 191.320044][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.355418][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.445133][ T4713] device veth0_macvtap entered promiscuous mode [ 191.735462][ T4713] device veth1_macvtap entered promiscuous mode [ 192.031406][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.064275][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.104402][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.164007][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.173889][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.204305][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.223981][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.264134][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.296772][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.339018][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.348407][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.365133][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.386461][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.407925][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.434396][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.454059][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.474049][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.494104][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.514904][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.543984][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.563993][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.585462][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.604618][ T4713] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.613498][ T4713] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.623803][ T4713] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.641621][ T4713] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.691071][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.700870][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.204782][ T4651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.212670][ T4651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.230403][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.252411][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.318305][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.361588][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.706244][ T5103] can0: slcan on ttyS3. [ 194.329661][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.339028][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.834152][ T5093] can0 (unregistered): slcan off ttyS3. [ 199.841433][ T5126] loop4: detected capacity change from 0 to 512 [ 199.973658][ T5126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 200.004175][ T5126] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.812300][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.822375][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.988084][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.997360][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.732397][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 201.754478][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.227715][ T5149] slcan: can't register candev [ 202.232721][ T5149] Falling back ldisc for ttyS3. [ 202.971579][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 202.977635][ T4479] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.362821][ T5161] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 203.804768][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 203.986884][ T4479] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.610166][ T4479] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.884060][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 206.208555][ T4479] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.524103][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 207.075775][ T5138] chnl_net:caif_netlink_parms(): no params data found [ 207.964157][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 209.980496][ T5207] slcan: can't register candev [ 209.985552][ T5207] Falling back ldisc for ttyS3. [ 210.040115][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.102136][ T5138] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.162442][ T5138] device bridge_slave_0 entered promiscuous mode [ 210.179811][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 210.220373][ T5206] loop4: detected capacity change from 0 to 4096 [ 210.256699][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.263872][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.355824][ T5138] device bridge_slave_1 entered promiscuous mode [ 210.484779][ T5138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.549707][ T5138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.579493][ T5138] team0: Port device team_slave_0 added [ 210.589056][ T5138] team0: Port device team_slave_1 added [ 212.142041][ T5223] NILFS (nullb0): couldn't find nilfs on the device [ 212.551455][ T5138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.572471][ T5138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.102932][ T5138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.203479][ T5218] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 213.335562][ T5138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.342729][ T5138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.450961][ T5218] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 213.579673][ T5218] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 213.747745][ T5138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.879910][ T5240] Cannot find set identified by id 0 to match [ 214.787468][ T5138] device hsr_slave_0 entered promiscuous mode [ 214.795671][ T5138] device hsr_slave_1 entered promiscuous mode [ 214.804306][ T5138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.822974][ T5138] Cannot create hsr debugfs directory [ 218.338877][ T5269] can0: slcan on ttyS3. [ 219.084879][ T5266] can0 (unregistered): slcan off ttyS3. [ 220.723196][ T5279] slcan: can't register candev [ 220.728240][ T5279] Falling back ldisc for ttyS3. [ 221.523633][ T5287] can0: slcan on ttyS3. [ 221.990456][ T5281] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 221.998788][ T5282] can0 (unregistered): slcan off ttyS3. [ 224.119587][ T5315] Zero length message leads to an empty skb [ 224.334410][ T5319] loop0: detected capacity change from 0 to 512 [ 224.346626][ T4363] Bluetooth: Error in BCSP hdr checksum [ 224.423623][ T5319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 224.559740][ T4479] device hsr_slave_0 left promiscuous mode [ 224.582504][ T4479] device hsr_slave_1 left promiscuous mode [ 224.596916][ T33] Bluetooth: Error in BCSP hdr checksum [ 224.619673][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.635849][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.672471][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.712490][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.740726][ T4479] device bridge_slave_1 left promiscuous mode [ 224.762032][ T4479] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.834933][ T4479] device bridge_slave_0 left promiscuous mode [ 224.844642][ T4479] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.029739][ T4479] device veth1_macvtap left promiscuous mode [ 225.043199][ T4479] device veth0_macvtap left promiscuous mode [ 225.057928][ T4479] device veth1_vlan left promiscuous mode [ 225.071083][ T4479] device veth0_vlan left promiscuous mode [ 227.034022][ T4281] Bluetooth: hci2: command 0x1003 tx timeout [ 227.041483][ T4284] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 227.853629][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 228.007507][ T5344] slcan: can't register candev [ 228.012531][ T5344] Falling back ldisc for ttyS3. [ 228.766622][ T5355] loop4: detected capacity change from 0 to 8 [ 231.215430][ T4479] team0 (unregistering): Port device team_slave_1 removed [ 231.325737][ T4479] team0 (unregistering): Port device team_slave_0 removed [ 231.459745][ T4479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.642171][ T4479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.029354][ T4479] bond0 (unregistering): Released all slaves [ 235.458404][ T5138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.519522][ T5138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.623763][ T5138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.954152][ T5138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.620603][ T5392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 238.959715][ T5400] can0: slcan on ttyS3. [ 239.210062][ T5138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.254398][ T5400] can0 (unregistered): slcan off ttyS3. [ 239.986042][ T5404] can0: slcan on ttyS3. [ 240.044912][ T5404] can0 (unregistered): slcan off ttyS3. [ 240.084443][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.098113][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.310186][ T5138] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.328076][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.345776][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.356448][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.363619][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.381042][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.393845][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.407956][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.415185][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.766049][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.023356][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.042517][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.070847][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.090918][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.113612][ T5138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.135336][ T5138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.212254][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.239602][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.255628][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.268666][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.280382][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.293857][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.308545][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.319165][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.593817][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.602303][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.617961][ T5138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.091164][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.107484][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.137415][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.152352][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.162241][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.176110][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.185280][ T5138] device veth0_vlan entered promiscuous mode [ 242.209103][ T5138] device veth1_vlan entered promiscuous mode [ 242.222994][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.260424][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.271821][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.293934][ T5138] device veth0_macvtap entered promiscuous mode [ 242.312570][ T5138] device veth1_macvtap entered promiscuous mode [ 242.332979][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.351517][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.364987][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.383735][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.393693][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.409220][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.419299][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.430052][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.441630][ T5138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.450814][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.466407][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.475105][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.485103][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.504862][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.516063][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.528106][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.538818][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.549151][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.559977][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.570276][ T5138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.580920][ T5138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.595634][ T5138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.608656][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.618947][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.631475][ T5138] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.640784][ T5138] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.656193][ T5138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.669457][ T5138] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.746934][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.764514][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.783207][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.819900][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.833380][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.842135][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.950750][ T5443] loop0: detected capacity change from 0 to 2048 [ 244.531597][ T5443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.107151][ T5496] can0: slcan on ttyS3. [ 249.864796][ T5492] can0 (unregistered): slcan off ttyS3. [ 255.752228][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.759022][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.581923][ T5558] loop2: detected capacity change from 0 to 8 [ 259.419010][ T5565] can0: slcan on ttyS3. [ 260.416050][ T5561] can0 (unregistered): slcan off ttyS3. [ 260.927439][ T5575] can0: slcan on ttyS3. [ 261.454784][ T5569] can0 (unregistered): slcan off ttyS3. [ 266.538299][ T5606] loop4: detected capacity change from 0 to 2048 [ 267.183779][ T5606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.275639][ T5616] loop1: detected capacity change from 0 to 2048 [ 269.493321][ T5616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.899687][ T5664] can0: slcan on ttyS3. [ 275.967357][ T5651] can0 (unregistered): slcan off ttyS3. [ 283.120024][ T5746] loop5: detected capacity change from 0 to 8 [ 283.761360][ T5745] can0: slcan on ttyS3. [ 285.148259][ T5742] loop1: detected capacity change from 0 to 2048 [ 285.180602][ T5742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.224716][ T5732] can0 (unregistered): slcan off ttyS3. [ 291.205524][ T5793] loop5: detected capacity change from 0 to 2048 [ 291.644022][ T5793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.610284][ T5822] loop0: detected capacity change from 0 to 8 [ 294.264455][ T5838] loop0: detected capacity change from 0 to 8 [ 294.463664][ T5842] Cannot find set identified by id 0 to match [ 298.762084][ T5876] can0: slcan on ttyS3. [ 300.234225][ T5882] loop4: detected capacity change from 0 to 2048 [ 300.324883][ T5882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.344818][ T5866] can0 (unregistered): slcan off ttyS3. [ 303.661882][ T5908] can0: slcan on ttyS3. [ 304.524181][ T5900] can0 (unregistered): slcan off ttyS3. [ 308.902198][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 312.147715][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 312.190960][ T5961] loop5: detected capacity change from 0 to 2048 [ 312.290510][ T5961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.352706][ T5956] can0: slcan on ttyS3. [ 312.664269][ T5954] can0 (unregistered): slcan off ttyS3. [ 314.344498][ T5972] can0: slcan on ttyS3. [ 315.114259][ T5965] can0 (unregistered): slcan off ttyS3. [ 317.088125][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.094742][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.813855][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 322.326438][ T4284] Bluetooth: hci5: command 0x0405 tx timeout [ 322.486648][ T6037] can0: slcan on ttyS3. [ 323.624029][ T6030] can0 (unregistered): slcan off ttyS3. [ 324.452460][ T4284] Bluetooth: hci5: command 0x0406 tx timeout [ 325.624184][ T5713] block nbd0: Attempted send on invalid socket [ 325.630649][ T5713] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 325.641953][ T5713] block nbd0: Attempted send on invalid socket [ 325.651168][ T5713] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 325.661425][ T6059] Mount JFS Failure: -5 [ 326.632400][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 328.755564][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 329.198270][ T6086] can0: slcan on ttyS3. [ 330.626411][ T6082] can0 (unregistered): slcan off ttyS3. [ 331.629836][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.353'. [ 333.774468][ T6122] slcan: can't register candev [ 333.779560][ T6122] Falling back ldisc for ttyS3. [ 334.823332][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.358'. [ 337.273349][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 338.663957][ T6163] can0: slcan on ttyS3. [ 340.174256][ T6157] can0 (unregistered): slcan off ttyS3. [ 341.746682][ T6174] loop4: detected capacity change from 0 to 2048 [ 341.970086][ T6174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.330499][ T5713] block nbd2: Attempted send on invalid socket [ 342.337718][ T5713] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 342.350062][ T5713] block nbd2: Attempted send on invalid socket [ 342.356384][ T5713] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 342.366167][ T6184] Mount JFS Failure: -5 [ 349.402079][ T6216] loop4: detected capacity change from 0 to 2048 [ 349.802815][ T6216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.637024][ T6225] loop5: detected capacity change from 0 to 2048 [ 351.979214][ T6225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.255015][ T6276] loop5: detected capacity change from 0 to 2048 [ 358.286866][ T6276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.645646][ T6298] loop0: detected capacity change from 0 to 2048 [ 360.697707][ T6298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.015757][ T6331] loop5: detected capacity change from 0 to 2048 [ 369.280249][ T6331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.009497][ T6358] loop1: detected capacity change from 0 to 2048 [ 372.161486][ T6358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.341070][ T6395] can0: slcan on ttyS3. [ 375.894325][ T6388] can0 (unregistered): slcan off ttyS3. [ 378.604297][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610699][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.114359][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 383.828146][ T6443] loop4: detected capacity change from 0 to 2048 [ 383.855231][ T6443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.020977][ T6485] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 389.451517][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 390.103765][ T6498] loop4: detected capacity change from 0 to 2048 [ 390.447227][ T6498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.066545][ T6523] loop2: detected capacity change from 0 to 2048 [ 392.189343][ T6523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.322040][ T6534] zram0: detected capacity change from 0 to 8 [ 398.224984][ T6576] loop2: detected capacity change from 0 to 2048 [ 398.274436][ T6576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.548428][ T6583] loop4: detected capacity change from 0 to 2048 [ 398.618033][ T6583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.573379][ T6587] loop1: detected capacity change from 0 to 4096 [ 399.799641][ T4356] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.945627][ T6591] can0: slcan on ttyS3. [ 401.474222][ T6588] can0 (unregistered): slcan off ttyS3. [ 401.707355][ T95] block nbd5: Attempted send on invalid socket [ 401.713654][ T95] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.724747][ T95] block nbd5: Attempted send on invalid socket [ 401.731365][ T95] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.741992][ T6601] Mount JFS Failure: -5 [ 404.469482][ T6611] zram: Cannot change disksize for initialized device [ 409.656673][ T6648] can0: slcan on ttyS3. [ 410.215665][ T6643] can0 (unregistered): slcan off ttyS3. [ 419.725596][ T6718] gfs2: gfs2 mount does not exist [ 428.006723][ T6772] can0: slcan on ttyS3. [ 429.644196][ T6770] can0 (unregistered): slcan off ttyS3. [ 430.055498][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 436.213051][ T6822] can0: slcan on ttyS3. [ 436.804086][ T6810] can0 (unregistered): slcan off ttyS3. [ 436.951590][ T6825] loop4: detected capacity change from 0 to 2048 [ 437.214763][ T6825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 437.447197][ T6835] loop1: detected capacity change from 0 to 64 [ 437.450335][ T6835] hfs: unable to parse mount options [ 439.687776][ T5181] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 439.966954][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.973318][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.643036][ T6848] can0: slcan on ttyS3. [ 441.764525][ T6844] can0 (unregistered): slcan off ttyS3. [ 444.268320][ T6861] can0: slcan on ttyS3. [ 444.744301][ T6857] can0 (unregistered): slcan off ttyS3. [ 445.611988][ T6877] can0: slcan on ttyS3. [ 446.634996][ T6868] can0 (unregistered): slcan off ttyS3. [ 448.413647][ T6897] loop2: detected capacity change from 0 to 4096 [ 448.531686][ T6899] loop4: detected capacity change from 0 to 2048 [ 448.538768][ T4400] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 448.626950][ T6899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.566279][ T6913] can0: slcan on ttyS3. [ 454.985020][ T6907] can0 (unregistered): slcan off ttyS3. [ 456.459457][ T6932] can0: slcan on ttyS3. [ 457.973974][ T6923] can0 (unregistered): slcan off ttyS3. [ 458.602635][ T6945] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 458.873317][ T6958] can0: slcan on ttyS3. [ 459.804596][ T6948] can0 (unregistered): slcan off ttyS3. [ 462.898022][ T6978] loop5: detected capacity change from 0 to 2048 [ 463.150867][ T6978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.415890][ T6995] can0: slcan on ttyS3. [ 465.364136][ T6996] can0 (unregistered): slcan off ttyS3. [ 466.008175][ T7012] can0: slcan on ttyS3. [ 467.671432][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.566'. [ 467.744748][ T7005] can0 (unregistered): slcan off ttyS3. [ 468.235411][ T7023] can0: slcan on ttyS3. [ 468.474027][ T7019] can0 (unregistered): slcan off ttyS3. [ 472.084506][ T7065] Invalid ELF header magic: != ELF [ 473.746902][ T7076] can0: slcan on ttyS3. [ 474.464004][ T7072] can0 (unregistered): slcan off ttyS3. [ 474.539815][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.578'. [ 474.910980][ T7088] can0: slcan on ttyS3. [ 474.995274][ T7087] can0 (unregistered): slcan off ttyS3. [ 475.183677][ T7080] loop5: detected capacity change from 0 to 2048 [ 475.322564][ T7080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.681109][ T7105] loop1: detected capacity change from 0 to 2048 [ 477.025886][ T7105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.495710][ T7134] can0: slcan on ttyS3. [ 480.998785][ T7139] gfs2: gfs2 mount does not exist [ 481.504240][ T7132] can0 (unregistered): slcan off ttyS3. [ 481.999973][ T7149] can0: slcan on ttyS3. [ 482.234060][ T7143] can0 (unregistered): slcan off ttyS3. [ 483.996636][ T7163] loop5: detected capacity change from 0 to 2048 [ 484.091279][ T7163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.648660][ T7187] can0: slcan on ttyS3. [ 487.475969][ T7184] can0 (unregistered): slcan off ttyS3. [ 488.215512][ T7194] can0: slcan on ttyS3. [ 489.468201][ T7193] can0 (unregistered): slcan off ttyS3. [ 489.538557][ T7209] can0: slcan on ttyS3. [ 489.874309][ T7195] can0 (unregistered): slcan off ttyS3. [ 490.440614][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 490.865579][ T7235] se_dev->se_dev_ptr already set for storage object [ 493.344801][ T7243] loop5: detected capacity change from 0 to 4096 [ 493.430605][ T4400] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 496.391788][ T7258] can0: slcan on ttyS3. [ 496.504092][ T7257] can0 (unregistered): slcan off ttyS3. [ 497.599382][ T7271] can0: slcan on ttyS3. [ 498.064108][ T7269] can0 (unregistered): slcan off ttyS3. [ 498.290883][ T7278] blktrace: Concurrent blktraces are not allowed on loop4 [ 501.519666][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.526063][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.832441][ T7310] can0: slcan on ttyS3. [ 502.894105][ T7308] can0 (unregistered): slcan off ttyS3. [ 503.165781][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 504.071104][ T7336] can0: slcan on ttyS3. [ 504.454172][ T7334] can0 (unregistered): slcan off ttyS3. [ 505.361579][ T7342] can0: slcan on ttyS3. [ 505.414363][ T7341] can0 (unregistered): slcan off ttyS3. [ 505.845834][ T7352] loop0: detected capacity change from 0 to 512 [ 506.131141][ T7352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 506.140682][ T7352] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.784816][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 508.575362][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'. [ 508.847267][ T7373] can0: slcan on ttyS3. [ 508.914055][ T7372] can0 (unregistered): slcan off ttyS3. [ 511.598475][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 512.415940][ T7398] slcan: can't register candev [ 512.420959][ T7398] Falling back ldisc for ttyS3. [ 515.516042][ T7424] can0: slcan on ttyS3. [ 515.884137][ T7422] can0 (unregistered): slcan off ttyS3. [ 517.761839][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 517.880841][ T7451] loop1: detected capacity change from 0 to 8 [ 518.457061][ T7451] SQUASHFS error: lzo decompression failed, data probably corrupt [ 518.466450][ T7451] SQUASHFS error: Failed to read block 0x91: -5 [ 518.472747][ T7451] SQUASHFS error: Unable to read metadata cache entry [8f] [ 518.480093][ T7451] SQUASHFS error: Unable to read inode 0x11f [ 519.169630][ T7459] can0: slcan on ttyS3. [ 519.533984][ T7455] can0 (unregistered): slcan off ttyS3. [ 522.112614][ T7478] can0: slcan on ttyS3. [ 522.388705][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 522.454228][ T7476] can0 (unregistered): slcan off ttyS3. [ 522.880054][ T7488] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 522.890835][ T7488] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 523.573424][ T7490] loop1: detected capacity change from 0 to 512 [ 523.716410][ T7490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 523.725920][ T7490] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.115327][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 525.584441][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.676'. [ 527.118292][ T7516] can0: slcan on ttyS3. [ 527.574955][ T7515] can0 (unregistered): slcan off ttyS3. [ 528.605672][ T7533] can0: slcan on ttyS3. [ 529.493983][ T7528] can0 (unregistered): slcan off ttyS3. [ 530.209601][ T7541] tipc: Started in network mode [ 530.215243][ T7541] tipc: Node identity ac14140f, cluster identity 4711 [ 530.226995][ T7541] tipc: New replicast peer: 172.30.0.2 [ 530.234299][ T7541] tipc: Enabled bearer , priority 10 [ 532.086995][ T14] tipc: Node number set to 2886997007 [ 532.219782][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 533.864859][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'. [ 533.878625][ T7572] can0: slcan on ttyS3. [ 533.964313][ T7571] can0 (unregistered): slcan off ttyS3. [ 535.827330][ T7584] No such timeout policy "syz1" [ 536.189870][ T7589] can0: slcan on ttyS3. [ 536.754235][ T7578] can0 (unregistered): slcan off ttyS3. [ 541.210799][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'. [ 541.298779][ T7628] can0: slcan on ttyS3. [ 541.422540][ T7627] can0 (unregistered): slcan off ttyS3. [ 542.224835][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 542.941544][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 547.778183][ T7688] can0: slcan on ttyS3. [ 547.790821][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 548.603691][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.721'. [ 548.634390][ T7682] can0 (unregistered): slcan off ttyS3. [ 551.387056][ T7730] can0: slcan on ttyS3. [ 552.084149][ T7728] can0 (unregistered): slcan off ttyS3. [ 552.404177][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 552.975696][ T7745] can0: slcan on ttyS3. [ 554.154283][ T7747] No such timeout policy "syz1" [ 554.310666][ T7743] can0 (unregistered): slcan off ttyS3. [ 554.801534][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.735'. [ 562.352255][ T7807] loop5: detected capacity change from 0 to 128 [ 562.370257][ T7807] EXT4-fs: Ignoring removed orlov option [ 562.480338][ T7807] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 562.492399][ T7807] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 563.002584][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.002656][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.239607][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 564.604401][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 566.162852][ T7846] loop2: detected capacity change from 0 to 8192 [ 569.681082][ T7865] can0: slcan on ttyS3. [ 569.894510][ T7871] can0 (unregistered): slcan off ttyS3. [ 572.750235][ T7889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.242827][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.765'. [ 575.583861][ T7913] loop2: detected capacity change from 0 to 8 [ 576.837045][ T7913] SQUASHFS error: lzo decompression failed, data probably corrupt [ 576.845177][ T7913] SQUASHFS error: Failed to read block 0x91: -5 [ 576.851531][ T7913] SQUASHFS error: Unable to read metadata cache entry [8f] [ 576.858869][ T7913] SQUASHFS error: Unable to read inode 0x11f [ 577.507886][ T7930] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 577.518816][ T7930] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 578.230496][ T7933] tipc: Started in network mode [ 578.235792][ T7933] tipc: Node identity ac14140f, cluster identity 4711 [ 578.246938][ T7933] tipc: New replicast peer: 172.30.0.1 [ 578.255460][ T7933] tipc: Enabled bearer , priority 10 [ 580.080635][ T6006] tipc: Node number set to 2886997007 [ 581.794361][ T7943] can0: slcan on ttyS3. [ 582.044354][ T7943] can0 (unregistered): slcan off ttyS3. [ 582.179070][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 590.101657][ T7991] loop2: detected capacity change from 0 to 512 [ 590.120145][ T7992] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 590.131084][ T7992] F2FS-fs (loop0): Unable to read 1th superblock [ 590.138197][ T7992] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 590.148303][ T7992] F2FS-fs (loop0): Unable to read 2th superblock [ 590.430698][ T7991] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 590.440457][ T7991] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.970844][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 593.715670][ T8019] loop5: detected capacity change from 0 to 128 [ 593.798906][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'. [ 595.396417][ T8031] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.414104][ T8031] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.423325][ T8031] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.431609][ T8031] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.441309][ T8031] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 595.449012][ T8031] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 597.483992][ T8031] Bluetooth: hci2: command 0x0409 tx timeout [ 597.669144][ T8049] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 597.680048][ T8049] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 599.564679][ T8031] Bluetooth: hci2: command 0x041b tx timeout [ 602.275883][ T8031] Bluetooth: hci2: command 0x040f tx timeout [ 602.452087][ T4363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.682270][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.803'. [ 602.693116][ T8030] chnl_net:caif_netlink_parms(): no params data found [ 602.899065][ T4363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.290003][ T4363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.135687][ T8088] tipc: Started in network mode [ 604.358701][ T8031] Bluetooth: hci2: command 0x0419 tx timeout [ 604.999308][ T8088] tipc: Node identity ac14140f, cluster identity 4711 [ 605.044507][ T8088] tipc: New replicast peer: 172.30.0.5 [ 605.050194][ T8088] tipc: Enabled bearer , priority 10 [ 605.226679][ T4363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.082936][ T5111] tipc: Node number set to 2886997007 [ 607.091691][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.102374][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.159979][ T8030] device bridge_slave_0 entered promiscuous mode [ 607.247113][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.287526][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.458660][ T8030] device bridge_slave_1 entered promiscuous mode [ 607.583555][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.656656][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.772220][ T8030] team0: Port device team_slave_0 added [ 607.819217][ T8030] team0: Port device team_slave_1 added [ 607.920439][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.939133][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.965147][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.024279][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.041418][ T4363] tipc: Disabling bearer [ 608.060301][ T4363] tipc: Left network mode [ 608.068366][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.076574][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.102494][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.115937][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.908520][ T8131] loop5: detected capacity change from 0 to 8192 [ 609.647545][ T8137] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 609.658561][ T8137] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 610.190429][ T8030] device hsr_slave_0 entered promiscuous mode [ 610.436642][ T8145] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 610.446049][ T8145] F2FS-fs (loop4): Unable to read 1th superblock [ 610.453097][ T8145] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 610.462494][ T8145] F2FS-fs (loop4): Unable to read 2th superblock [ 612.661476][ T8152] loop0: detected capacity change from 0 to 1024 [ 613.203181][ T8030] device hsr_slave_1 entered promiscuous mode [ 613.253431][ T8030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.307006][ T8030] Cannot create hsr debugfs directory [ 613.464403][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'. [ 618.612549][ T8030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 619.057685][ T8030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 619.452641][ T8200] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 619.462052][ T8200] F2FS-fs (loop5): Unable to read 1th superblock [ 619.470214][ T8200] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 619.479599][ T8200] F2FS-fs (loop5): Unable to read 2th superblock [ 620.191108][ T8030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 620.237124][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 620.458040][ T8030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 620.541181][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.828'. [ 622.929335][ T8205] tipc: Started in network mode [ 622.935421][ T8205] tipc: Node identity ac14140f, cluster identity 4711 [ 622.942382][ T8205] tipc: New replicast peer: 172.30.0.3 [ 622.948044][ T8205] tipc: Enabled bearer , priority 10 [ 624.029292][ T8230] loop5: detected capacity change from 0 to 512 [ 624.288084][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.294667][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.439359][ T8230] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 625.448832][ T8230] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.484696][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 626.582407][ T7641] tipc: Node number set to 2886997007 [ 626.934379][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.671634][ T4363] device hsr_slave_0 left promiscuous mode [ 628.379395][ T4363] device hsr_slave_1 left promiscuous mode [ 628.404688][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.412194][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.431021][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.649060][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.131368][ T4363] device bridge_slave_1 left promiscuous mode [ 629.146706][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.186480][ T4363] device bridge_slave_0 left promiscuous mode [ 629.219459][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.556397][ T4363] device veth1_macvtap left promiscuous mode [ 629.575070][ T4363] device veth0_macvtap left promiscuous mode [ 629.581367][ T4363] device veth1_vlan left promiscuous mode [ 629.622501][ T4363] device veth0_vlan left promiscuous mode [ 633.800309][ T8314] loop4: detected capacity change from 0 to 512 [ 633.930417][ T8314] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 633.940131][ T8314] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.215020][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 637.459933][ T8342] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 638.075172][ T5713] block nbd5: Attempted send on invalid socket [ 638.085304][ T5713] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.118945][ T5713] block nbd5: Attempted send on invalid socket [ 638.126441][ T5713] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.147789][ T8351] Mount JFS Failure: -5 [ 638.634982][ T4363] team0 (unregistering): Port device team_slave_1 removed [ 638.681312][ T4363] team0 (unregistering): Port device team_slave_0 removed [ 638.728782][ T4363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.780254][ T4363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.130831][ T4363] bond0 (unregistering): Released all slaves [ 639.242212][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 639.258050][ T8030] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.292816][ T8345] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 639.340544][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 639.353901][ T8345] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 639.363288][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.387156][ T8345] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 639.462779][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 640.004691][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 640.049623][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.056917][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.152192][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 641.480436][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 641.489441][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.496669][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.506023][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 641.516057][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 641.525442][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 641.535389][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 641.706897][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 641.866369][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 642.223662][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 642.274594][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 642.310862][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 642.451288][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 642.621989][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'. [ 643.319485][ T8030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.570861][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 643.596660][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 643.628039][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.818482][ T8389] can0: slcan on ttyS3. [ 644.025046][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 645.957459][ T8382] can0 (unregistered): slcan off ttyS3. [ 647.665547][ T8418] loop4: detected capacity change from 0 to 512 [ 648.296280][ T8418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 648.344047][ T8418] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.785919][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 649.145674][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 649.319988][ T8030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.632034][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 651.128096][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.874'. [ 652.925906][ T8465] Config c/1 of g_uac2 needs at least one function. [ 652.933368][ T8465] udc usbip-vudc.0: failed to start g_uac2: -22 [ 653.155915][ T8465] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 653.197325][ T8465] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 653.301410][ T8468] udc usbip-vudc.0: soft-connect without a gadget driver [ 654.430056][ T8485] loop4: detected capacity change from 0 to 128 [ 654.485664][ T8482] can0: slcan on ttyS3. [ 657.404309][ T8474] can0 (unregistered): slcan off ttyS3. [ 661.729054][ T8031] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 661.769439][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 661.778916][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 661.845785][ T8031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 661.854644][ T8031] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 661.867724][ T8031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 664.398346][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 666.447236][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 668.524061][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 668.691022][ T8575] loop2: detected capacity change from 0 to 512 [ 670.086067][ T8575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 670.095865][ T8575] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.603925][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 670.800873][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 670.980569][ T8591] can0: slcan on ttyS3. [ 671.231396][ T8529] chnl_net:caif_netlink_parms(): no params data found [ 672.304012][ T8580] can0 (unregistered): slcan off ttyS3. [ 673.172641][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.203487][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.332024][ T8529] device bridge_slave_0 entered promiscuous mode [ 673.665019][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.672232][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.695281][ T8529] device bridge_slave_1 entered promiscuous mode [ 673.857465][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.869581][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.921246][ T8529] team0: Port device team_slave_0 added [ 673.931361][ T8529] team0: Port device team_slave_1 added [ 673.958655][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.966141][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.003943][ T8529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.067141][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.078996][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.105999][ T8529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.172424][ T8529] device hsr_slave_0 entered promiscuous mode [ 674.179999][ T8529] device hsr_slave_1 entered promiscuous mode [ 674.187697][ T8529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.195868][ T8529] Cannot create hsr debugfs directory [ 674.318138][ T47] device hsr_slave_0 left promiscuous mode [ 674.326161][ T47] device hsr_slave_1 left promiscuous mode [ 674.332898][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.341233][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.357869][ T47] device bridge_slave_1 left promiscuous mode [ 674.368769][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.380414][ T47] device bridge_slave_0 left promiscuous mode [ 674.396524][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.898013][ T47] team0 (unregistering): Port device team_slave_1 removed [ 674.987732][ T47] team0 (unregistering): Port device team_slave_0 removed [ 675.036824][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.087881][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.388734][ T47] bond0 (unregistering): Released all slaves [ 676.104437][ T8529] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 676.122384][ T8529] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 676.143430][ T8529] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 676.153624][ T8529] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 676.273556][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.299588][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 676.309626][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 676.321646][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.338793][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 676.351589][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 676.361868][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.369089][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.384900][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 676.396033][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 676.404812][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.411957][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.420416][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 676.450181][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 676.462039][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 676.472732][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 676.492280][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 676.501693][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 676.511000][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 676.521229][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 676.538647][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 676.548292][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 676.567632][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 676.576955][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 676.592419][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 676.941238][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 676.949785][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 676.965721][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.399382][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 677.415282][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 677.452842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 677.462897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 677.477433][ T8529] device veth0_vlan entered promiscuous mode [ 677.487657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 677.496967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 677.516015][ T8529] device veth1_vlan entered promiscuous mode [ 677.530314][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 677.572677][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 677.582540][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 677.603051][ T8529] device veth0_macvtap entered promiscuous mode [ 677.621474][ T8529] device veth1_macvtap entered promiscuous mode [ 677.642865][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.655584][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.665838][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.677052][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.687259][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.699683][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.710068][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.720834][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.733821][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.749506][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.760118][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.770512][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.783423][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.793421][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.804632][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.814633][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.825187][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.836790][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.845517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 677.854598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 677.862978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 677.871816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 677.881797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 677.891963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 677.912356][ T8529] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.921409][ T8529] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.930267][ T8529] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.939769][ T8529] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.042991][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.064672][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.075517][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 678.108559][ T4477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.119490][ T4477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.140821][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 679.096782][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'. [ 679.696543][ T8716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.373334][ T8719] loop6: detected capacity change from 0 to 512 [ 681.546291][ T8719] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 681.555871][ T8719] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.360469][ T8529] EXT4-fs (loop6): unmounting filesystem. [ 685.542569][ T8742] loop0: detected capacity change from 0 to 512 [ 685.669388][ T8742] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 685.678850][ T8742] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.727909][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.734964][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.378257][ T8767] 9pnet_fd: Insufficient options for proto=fd [ 687.912582][ T8769] loop4: detected capacity change from 0 to 8192 [ 688.402579][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 693.099311][ T8820] 9pnet_fd: Insufficient options for proto=fd [ 694.362212][ T8839] loop0: detected capacity change from 0 to 8192 [ 698.624476][ T8862] loop2: detected capacity change from 0 to 512 [ 700.019384][ T8862] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 700.030274][ T8862] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.752505][ T8890] 9pnet_fd: Insufficient options for proto=fd [ 702.408800][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 704.131463][ T8920] can0: slcan on ttyS3. [ 706.080921][ T8932] loop6: detected capacity change from 0 to 8192 [ 706.095180][ T8914] can0 (unregistered): slcan off ttyS3. [ 706.638553][ T8941] 9pnet_fd: Insufficient options for proto=fd [ 707.789761][ T8954] loop2: detected capacity change from 0 to 512 [ 710.119491][ T8954] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 710.129111][ T8954] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.944810][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 712.262582][ T8988] loop5: detected capacity change from 0 to 512 [ 712.430194][ T8988] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 712.439707][ T8988] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.317211][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 714.190647][ T9005] can0: slcan on ttyS3. [ 715.034753][ T8998] can0 (unregistered): slcan off ttyS3. [ 716.846654][ T9029] loop0: detected capacity change from 0 to 8192 [ 722.297633][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.983'. [ 723.076162][ T9074] can0: slcan on ttyS3. [ 723.814847][ T9068] can0 (unregistered): slcan off ttyS3. [ 728.064733][ T9140] can0: slcan on ttyS3. [ 728.674876][ T9129] can0 (unregistered): slcan off ttyS3. [ 729.312018][ T9155] 9pnet_fd: Insufficient options for proto=fd [ 730.085898][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 732.652344][ T9198] can0: slcan on ttyS3. [ 733.404106][ T9190] can0 (unregistered): slcan off ttyS3. [ 733.650645][ T9206] 9pnet_fd: Insufficient options for proto=fd [ 735.751933][ T9217] loop6: detected capacity change from 0 to 512 [ 735.914310][ T9217] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 735.924089][ T9217] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.568999][ T8529] EXT4-fs (loop6): unmounting filesystem. [ 739.421780][ T9264] can0: slcan on ttyS3. [ 740.469436][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 740.669373][ T9234] can0 (unregistered): slcan off ttyS3. [ 740.750428][ T9285] 9pnet_fd: Insufficient options for proto=fd [ 741.995495][ T9295] 9pnet_fd: Insufficient options for proto=fd [ 743.139668][ T9309] 9pnet_fd: Insufficient options for proto=fd [ 746.249596][ T9339] 9pnet_fd: Insufficient options for proto=fd [ 747.308320][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.315135][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.280534][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1051'. [ 751.637483][ T9394] can0: slcan on ttyS3. [ 751.955256][ T9394] can0 (unregistered): slcan off ttyS3. [ 753.367817][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1065'. [ 753.589575][ T9424] 9pnet_fd: Insufficient options for proto=fd [ 758.117942][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'. [ 758.535570][ T9477] 9pnet_fd: Insufficient options for proto=fd [ 764.427957][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 774.094013][ T9628] can0: slcan on ttyS3. [ 775.044001][ T9617] can0 (unregistered): slcan off ttyS3. [ 776.444900][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1120'. [ 781.322308][ T9704] can0: slcan on ttyS3. [ 781.504127][ T9690] can0 (unregistered): slcan off ttyS3. [ 783.372060][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 785.442481][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 788.088253][ T9774] can0: slcan on ttyS3. [ 788.243885][ T9750] can0 (unregistered): slcan off ttyS3. [ 788.844740][ T9779] can0: slcan on ttyS3. [ 789.655026][ T9773] can0 (unregistered): slcan off ttyS3. [ 796.312902][ T9849] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1163'. [ 798.446026][ T9862] can0: slcan on ttyS3. [ 798.663808][ T9862] can0 (unregistered): slcan off ttyS3. [ 798.994572][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1170'. [ 802.371182][ T9910] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1175'. [ 806.032846][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'. [ 807.353195][ T9968] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1186'. [ 808.617268][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.623845][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.182559][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 816.005879][T10049] kAFS: No cell specified [ 818.353199][T10066] afs: Unknown parameter 'dy' [ 818.434860][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1207'. [ 823.423613][T10105] kAFS: No cell specified [ 824.162409][T10111] afs: Unknown parameter 'dy' [ 832.117669][T10156] afs: Unknown parameter 'dy' [ 835.306344][T10177] loop4: detected capacity change from 0 to 1024 [ 838.389803][T10186] kAFS: No cell specified [ 849.313755][T10245] kAFS: No cell specified [ 855.133435][T10294] kAFS: No cell specified [ 862.537331][T10348] kAFS: No cell specified [ 870.046692][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.053093][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.230530][T10395] kAFS: No cell specified [ 878.447569][T10447] afs: Unknown parameter 'dy' [ 879.853097][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'. [ 882.051212][T10474] can0: slcan on ttyS3. [ 882.104728][T10473] can0 (unregistered): slcan off ttyS3. [ 883.483405][T10495] afs: Unknown parameter 'dy' [ 885.636741][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 888.028433][T10528] can0: slcan on ttyS3. [ 888.449872][T10526] can0 (unregistered): slcan off ttyS3. [ 889.666183][T10537] loop2: detected capacity change from 0 to 512 [ 890.358221][T10537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 890.981688][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 892.211821][T10561] afs: Unknown parameter 'dy' [ 893.191222][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 895.495821][T10584] can0: slcan on ttyS3. [ 896.074245][T10579] can0 (unregistered): slcan off ttyS3. [ 902.310173][T10661] loop6: detected capacity change from 0 to 2048 [ 902.325518][T10659] can0: slcan on ttyS3. [ 902.369235][T10661] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 903.273959][T10653] can0 (unregistered): slcan off ttyS3. [ 913.154209][T10712] can0: slcan on ttyS3. [ 913.943872][T10704] can0 (unregistered): slcan off ttyS3. [ 914.810305][T10723] loop5: detected capacity change from 0 to 1024 [ 917.517837][T10750] tipc: Enabling of bearer rejected, failed to enable media [ 918.531663][T10760] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 920.205612][T10764] Config c/1 of g_uac2 needs at least one function. [ 920.232798][T10764] udc usbip-vudc.0: failed to start g_uac2: -22 [ 920.248758][T10764] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 920.287284][T10764] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 920.312189][T10765] udc usbip-vudc.0: soft-connect without a gadget driver [ 924.544766][T10801] loop6: detected capacity change from 0 to 1024 [ 928.858532][T10823] can0: slcan on ttyS3. [ 929.594441][T10818] can0 (unregistered): slcan off ttyS3. [ 931.487210][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.493812][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.581123][T10837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 931.588858][T10837] IPv6: NLM_F_CREATE should be set when creating new route [ 931.596296][T10837] IPv6: NLM_F_CREATE should be set when creating new route [ 931.603521][T10837] IPv6: NLM_F_CREATE should be set when creating new route [ 931.781758][T10837] process 'syz.4.1400' launched '/dev/fd/5' with NULL argv: empty string added [ 933.598430][T10845] loop2: detected capacity change from 0 to 256 [ 933.727909][T10845] exfat: Deprecated parameter 'utf8' [ 934.650886][T10845] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 936.261836][T10878] tipc: Enabling of bearer rejected, already enabled [ 937.228764][T10883] can0: slcan on ttyS3. [ 939.843863][T10869] can0 (unregistered): slcan off ttyS3. [ 941.799798][T10916] loop5: detected capacity change from 0 to 8 [ 942.343400][T10913] SQUASHFS error: Unable to read directory block [631:26] [ 943.134200][T10920] loop6: detected capacity change from 0 to 256 [ 943.141554][T10920] exfat: Deprecated parameter 'utf8' [ 943.165349][T10920] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 944.521797][T10936] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1420'. [ 945.695126][T10956] tipc: Enabling of bearer rejected, failed to enable media [ 946.220133][T10957] loop5: detected capacity change from 0 to 2048 [ 948.084745][T10959] loop2: detected capacity change from 0 to 1024 [ 948.155042][T10957] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 949.149120][T10971] can0: slcan on ttyS3. [ 949.897082][T10967] loop5: detected capacity change from 0 to 1024 [ 949.964145][T10965] can0 (unregistered): slcan off ttyS3. [ 950.152111][T10967] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 950.196693][T10967] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz.5.1425: inode #12: comm syz.5.1425: iget: illegal inode # [ 950.357856][T10967] EXT4-fs (loop5): Remounting filesystem read-only [ 952.042523][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 952.158571][T10980] netlink: 'syz.6.1428': attribute type 2 has an invalid length. [ 952.167070][T10980] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1428'. [ 953.626888][T11017] loop5: detected capacity change from 0 to 512 [ 953.736557][T11017] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 956.042219][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 956.252388][T11036] loop2: detected capacity change from 0 to 1024 [ 964.209874][T11084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 964.217465][T11084] IPv6: NLM_F_CREATE should be set when creating new route [ 964.225034][T11084] IPv6: NLM_F_CREATE should be set when creating new route [ 964.232409][T11084] IPv6: NLM_F_CREATE should be set when creating new route [ 967.328789][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 969.969345][T11128] netlink: 'syz.5.1461': attribute type 2 has an invalid length. [ 969.988267][T11128] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1461'. [ 972.214802][T11159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 972.222322][T11159] IPv6: NLM_F_CREATE should be set when creating new route [ 972.229707][T11159] IPv6: NLM_F_CREATE should be set when creating new route [ 972.236973][T11159] IPv6: NLM_F_CREATE should be set when creating new route [ 976.446711][T11200] loop4: detected capacity change from 0 to 4096 [ 978.387338][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1481'. [ 978.891695][T11223] loop0: detected capacity change from 0 to 2048 [ 978.968395][T11223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 981.626388][T11239] netlink: 'syz.4.1487': attribute type 2 has an invalid length. [ 981.634622][T11239] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1487'. [ 984.111134][T11261] loop2: detected capacity change from 0 to 1024 [ 984.920449][T11261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 985.000276][T11261] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.1492: inode #12: comm syz.2.1492: iget: illegal inode # [ 985.132844][T11261] EXT4-fs (loop2): Remounting filesystem read-only [ 985.542500][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 985.765780][T11288] loop4: detected capacity change from 0 to 128 [ 986.211429][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.220525][T11292] FAT-fs (loop4): Filesystem has been set read-only [ 986.232213][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.241055][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.259401][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.268254][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.276956][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.285694][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.294366][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.303537][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.312935][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.321694][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.331270][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.340736][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.349558][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.358292][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.366981][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.375690][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.384445][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.394207][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.402857][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.411593][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.420667][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.429380][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.438155][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.446972][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.455722][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.464526][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.473888][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.482618][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.491350][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.500559][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.574196][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.582751][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.591307][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.599827][T11292] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 986.613152][ T27] audit: type=1800 audit(1785567771.507:2): pid=11292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1500" name="file1" dev="loop4" ino=1048627 res=0 errno=0 [ 987.406383][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1504'. [ 992.934341][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.940833][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.516071][T11359] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 994.912440][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'. [ 998.024404][T11402] loop0: detected capacity change from 0 to 128 [ 998.393523][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.402296][T11404] FAT-fs (loop0): Filesystem has been set read-only [ 998.410040][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.419788][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.428826][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.437559][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.456439][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.465179][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.473883][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.483094][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.492579][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.501277][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.510032][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.518829][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.527602][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.536531][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.547338][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.555999][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.564692][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.574395][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.583023][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.592410][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.601834][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.610588][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.619306][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.627985][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.636685][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.645398][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.654898][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.663696][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.672421][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.681099][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.689773][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.701345][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.710010][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.718692][T11404] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 998.835828][ T27] audit: type=1800 audit(1785567783.737:3): pid=11404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1529" name="file1" dev="loop0" ino=1048628 res=0 errno=0 [ 1001.237031][T11433] tipc: Enabling of bearer rejected, already enabled [ 1003.065023][T11444] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1539'. [ 1005.568788][T11454] loop2: detected capacity change from 0 to 128 [ 1006.255776][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.264464][T11463] FAT-fs (loop2): Filesystem has been set read-only [ 1006.272059][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.280778][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.289499][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.298165][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.318755][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.327586][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.336312][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.346789][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.356708][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.365824][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.374551][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.383417][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.392317][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.401058][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.409811][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.430180][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.438792][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.447568][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.456138][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.464672][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.473208][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.481897][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.490579][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.499331][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.508312][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.516874][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.526356][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.535007][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.543666][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.552172][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.560768][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.569382][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.577976][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.586521][T11463] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1006.613713][ T27] audit: type=1800 audit(1785567791.497:4): pid=11463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1542" name="file1" dev="loop2" ino=1048629 res=0 errno=0 [ 1010.096810][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1554'. [ 1014.049549][T11527] 9pnet_fd: Insufficient options for proto=fd [ 1021.578291][T11582] 9pnet_fd: Insufficient options for proto=fd [ 1022.372197][T11588] loop2: detected capacity change from 0 to 128 [ 1022.658316][ T4400] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1023.342556][T11588] loop2: detected capacity change from 0 to 512 [ 1023.354192][ T4400] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1023.556555][T11588] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1023.605195][T11588] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1023.654369][T11588] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1023.701397][T11588] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1575: Invalid block bitmap block 0 in block_group 0 [ 1023.737601][T11588] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1023.767954][T11588] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1575: attempt to clear invalid blocks 983261 len 1 [ 1023.968796][T11605] loop0: detected capacity change from 0 to 512 [ 1024.732431][T11605] EXT4-fs (loop0): 1 truncate cleaned up [ 1024.738279][T11605] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1024.788956][T11588] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1575: Invalid inode table block 0 in block_group 0 [ 1024.817132][T11588] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1024.834630][T11588] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1024.853887][T11588] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1575: Invalid inode table block 0 in block_group 0 [ 1025.286773][T11588] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1025.361772][T11588] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.1575: mark_inode_dirty error [ 1025.431795][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 1025.491302][T11588] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1025.524242][T11588] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1575: Invalid inode table block 0 in block_group 0 [ 1025.558313][T11588] EXT4-fs (loop2): 1 truncate cleaned up [ 1025.571695][T11588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1025.692817][T11621] loop5: detected capacity change from 0 to 128 [ 1025.761001][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 1026.167940][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.176586][T11627] FAT-fs (loop5): Filesystem has been set read-only [ 1026.184271][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.192935][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.201824][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.210497][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.229000][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.237775][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.246455][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.255529][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.265031][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.274895][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.283799][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.292536][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.301269][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.310002][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.318729][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.327443][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.336229][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.347562][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.356294][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.365166][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.374419][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.383226][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.391929][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.400634][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.409313][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.418067][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.438033][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.446852][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.455559][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.465025][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.473784][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.482492][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.491207][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.499953][T11627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1026.798474][ T27] audit: type=1800 audit(1785567811.487:5): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1583" name="file1" dev="loop5" ino=1048630 res=0 errno=0 [ 1027.681792][T11644] 9pnet_fd: Insufficient options for proto=fd [ 1031.802839][T11679] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1032.890216][T11688] can0: slcan on ttyS3. [ 1033.550327][T11687] loop2: detected capacity change from 0 to 256 [ 1033.628963][T11687] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1033.760632][ T27] audit: type=1800 audit(1785567818.657:6): pid=11687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1600" name="file2" dev="loop2" ino=1048631 res=0 errno=0 [ 1033.836108][T11680] can0 (unregistered): slcan off ttyS3. [ 1035.063835][ T27] audit: type=1800 audit(1785567819.907:7): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1600" name="file2" dev="loop2" ino=1048631 res=0 errno=0 [ 1046.924433][T11763] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1047.297960][T11765] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1621'. [ 1054.367091][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.373814][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.589884][T11831] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1634'. [ 1063.220115][T11886] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1648'. [ 1063.699208][T11888] can0: slcan on ttyS3. [ 1064.805277][T11896] loop5: detected capacity change from 0 to 512 [ 1064.855689][T11884] can0 (unregistered): slcan off ttyS3. [ 1068.297780][T11896] EXT4-fs: error -4 creating inode table initialization thread [ 1068.309293][T11896] EXT4-fs (loop5): mount failed [ 1071.622481][T11949] can0: slcan on ttyS3. [ 1071.767469][T11953] syz.6.1667 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1071.783816][T11953] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1073.124300][T11941] can0 (unregistered): slcan off ttyS3. [ 1076.807070][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1671'. [ 1079.396915][T11997] loop5: detected capacity change from 0 to 64 [ 1079.482657][T11997] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1080.315621][ T60] Bluetooth: Error in BCSP hdr checksum [ 1082.044824][ T4281] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1083.012355][T12042] 9pnet_fd: Insufficient options for proto=fd [ 1085.244768][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1683'. [ 1095.142403][T12098] loop4: detected capacity change from 0 to 256 [ 1095.328335][T12098] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1096.098697][ T27] audit: type=1800 audit(1785567880.997:8): pid=12098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1702" name="file2" dev="loop4" ino=1048632 res=0 errno=0 [ 1096.523695][ T27] audit: type=1800 audit(1785567881.367:9): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1702" name="file2" dev="loop4" ino=1048632 res=0 errno=0 [ 1098.232965][T12125] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1103.703647][T12163] loop0: detected capacity change from 0 to 256 [ 1103.779817][T12163] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1103.849722][ T27] audit: type=1800 audit(1785567891.747:10): pid=12163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1717" name="file2" dev="loop0" ino=1048633 res=0 errno=0 [ 1104.253708][ T27] audit: type=1800 audit(1785567892.107:11): pid=12166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1717" name="file2" dev="loop0" ino=1048633 res=0 errno=0 [ 1116.221751][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.251036][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.498790][T10891] Process accounting resumed [ 1132.257205][T12385] ip6t_srh: unknown srh match flags FF3F [ 1132.283697][T12372] device wireguard0 entered promiscuous mode [ 1140.864717][T12428] loop5: detected capacity change from 0 to 2048 [ 1140.941806][T12428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1141.079361][ T27] audit: type=1800 audit(1785567928.977:12): pid=12428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1778" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 1163.438378][T12609] input: syz0 as /devices/virtual/input/input31 [ 1164.124164][T12606] loop5: detected capacity change from 0 to 8192 [ 1164.548757][ T27] audit: type=1800 audit(1785567952.447:13): pid=12606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1807" name="bus" dev="loop5" ino=1048638 res=0 errno=0 [ 1164.685561][T12617] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1167.197869][T12633] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1168.543445][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1814'. [ 1177.473899][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.493173][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.574289][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'. [ 1180.202451][T12715] loop0: detected capacity change from 0 to 512 [ 1180.225228][T12715] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1180.265097][T12718] loop2: detected capacity change from 0 to 512 [ 1180.309811][T12715] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1180.347644][T12718] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1180.436713][T12718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1180.453894][T12718] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.465465][T12715] EXT4-fs (loop0): 1 truncate cleaned up [ 1180.471371][T12715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1181.566902][T12727] fuse: Unknown parameter '0x0000000000000008' [ 1181.576837][ T27] audit: type=1800 audit(1785567969.337:14): pid=12718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1835" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1181.753085][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 1182.188415][T12739] (syz.5.1837,12739,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1182.197992][T12739] (syz.5.1837,12739,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1185.037524][ T4281] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1185.047043][ T4281] Bluetooth: hci0: Injecting HCI hardware error event [ 1185.260047][T12006] Bluetooth: hci0: hardware error 0x00 [ 1186.369020][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1841'. [ 1187.323960][T12006] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1189.691423][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 1190.379187][T12787] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1201.000046][T12865] loop2: detected capacity change from 0 to 8 [ 1201.315213][T12865] squashfs: Unknown parameter '' [ 1201.412416][T12405] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1205.883773][T12006] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1212.616786][T12949] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1213.326863][T12948] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1214.884304][T12975] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1218.727979][T13002] capability: warning: `syz.5.1896' uses deprecated v2 capabilities in a way that may be insecure [ 1218.800497][T13005] futex_wake_op: syz.5.1896 tries to shift op by 144; fix this program [ 1231.957336][T13121] loop6: detected capacity change from 0 to 512 [ 1231.974530][T13121] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1232.315360][T13121] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1232.515630][T13121] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.969426][ T27] audit: type=1800 audit(1785568020.867:15): pid=13121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1919" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1234.026220][ T8529] EXT4-fs (loop6): unmounting filesystem. [ 1238.696300][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.703089][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.781458][T13184] Process accounting resumed [ 1240.123594][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 1243.285167][T13204] device veth1_macvtap left promiscuous mode [ 1243.964819][T13218] UBIFS error (pid: 13218): cannot open "ubifs", error -22 [ 1244.785211][T12006] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1244.805319][T12006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1244.814014][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1244.900696][T12006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1244.981104][T12006] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1244.993304][T12006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1247.110415][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 1247.119197][ T27] audit: type=1326 audit(1785568034.257:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13235 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b0a99e019 code=0x0 [ 1248.983894][ T27] audit: type=1326 audit(1785568036.577:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.2.1947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9b519e019 code=0x0 [ 1249.163571][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 1249.932903][T13271] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1250.347715][T13224] chnl_net:caif_netlink_parms(): no params data found [ 1251.243997][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 1253.333645][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 1253.572660][T13224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.579990][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.589971][T13224] device bridge_slave_0 entered promiscuous mode [ 1253.604017][T13224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.611398][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.619589][T13224] device bridge_slave_1 entered promiscuous mode [ 1253.642464][T13224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.656518][T13224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.844411][T13224] team0: Port device team_slave_0 added [ 1253.877852][T13224] team0: Port device team_slave_1 added [ 1256.326927][T13224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.344679][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.372240][T13224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.399048][T13224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.676186][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.423609][T13224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.903041][T13349] loop4: detected capacity change from 0 to 512 [ 1258.998398][T13349] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1259.049861][T13349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1259.108234][T12572] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.119598][T13349] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.163004][T13224] device hsr_slave_0 entered promiscuous mode [ 1259.169706][ T27] audit: type=1800 audit(1785568047.067:18): pid=13349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1966" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1259.966322][T13224] device hsr_slave_1 entered promiscuous mode [ 1260.009517][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1260.029267][T13224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1260.079255][T13224] Cannot create hsr debugfs directory [ 1260.132525][T12572] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.239405][T12572] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.323181][T12572] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.462312][T13224] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1260.501893][T13224] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1260.512028][T13224] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1260.544490][T13224] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1260.839002][T13224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.860277][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1260.880525][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1260.922014][T13224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.948115][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1260.961533][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1260.977965][ T4625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.985184][ T4625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.051370][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1261.060224][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1261.072397][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1261.081669][ T4625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.088910][ T4625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.101721][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1261.111871][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1261.122408][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1261.140800][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1261.151451][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1261.192894][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1261.212983][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1261.225712][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1261.240731][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1261.306922][T13224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1261.326557][T13224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1261.346417][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1261.356346][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1261.819277][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1261.827267][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1261.841550][T13224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.144034][T12572] device hsr_slave_0 left promiscuous mode [ 1262.163895][T12572] device hsr_slave_1 left promiscuous mode [ 1262.170631][T12572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.180403][T12572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.204484][T12572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.211996][T12572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.222780][T12572] device bridge_slave_1 left promiscuous mode [ 1262.229683][T12572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.239166][T12572] device bridge_slave_0 left promiscuous mode [ 1262.246097][T12572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.293668][T12572] device veth1_macvtap left promiscuous mode [ 1262.300045][T12572] device veth0_macvtap left promiscuous mode [ 1262.314261][T12572] device veth1_vlan left promiscuous mode [ 1262.320273][T12572] device veth0_vlan left promiscuous mode [ 1263.278413][T12572] team0 (unregistering): Port device team_slave_1 removed [ 1263.337425][T12572] team0 (unregistering): Port device team_slave_0 removed [ 1263.390905][T12572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.445847][T12572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.880047][T12572] bond0 (unregistering): Released all slaves [ 1264.233899][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1264.254037][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1264.292829][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1264.314727][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1264.333141][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1264.349894][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1264.363179][T13224] device veth0_vlan entered promiscuous mode [ 1264.398049][T13224] device veth1_vlan entered promiscuous mode [ 1264.456852][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1264.475933][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1264.495422][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1264.514657][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1264.537256][T13224] device veth0_macvtap entered promiscuous mode [ 1264.561664][T13224] device veth1_macvtap entered promiscuous mode [ 1264.597016][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.608944][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.619874][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.637597][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.650160][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.668583][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.679740][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.697540][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.712264][T13224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.722677][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1264.732823][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1264.742844][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1264.752688][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1264.773631][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.791646][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.801802][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.821035][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.831222][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.841897][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.854978][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.870064][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.882242][T13224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.895381][T13224] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.904280][T13224] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.913013][T13224] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.943765][T13224] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.965182][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1264.974977][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1265.115586][ T8181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.130841][ T8181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.141282][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1265.177093][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.193059][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.202706][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1266.124732][T13413] loop4: detected capacity change from 0 to 40427 [ 1266.167890][T13413] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1266.176364][T13413] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1266.198016][T13413] F2FS-fs (loop4): invalid crc value [ 1266.784051][T13413] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1269.434339][T13413] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1269.441878][T13413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1270.631328][T13443] loop2: detected capacity change from 0 to 128 [ 1273.855266][T13462] loop7: detected capacity change from 0 to 16 [ 1274.219689][T13462] erofs: (device loop7): mounted with root inode @ nid 36. [ 1274.636023][T13485] loop2: detected capacity change from 0 to 512 [ 1274.644511][T13485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1274.715667][T13485] EXT4-fs (loop2): 1 truncate cleaned up [ 1274.721501][T13485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1276.100760][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 1277.003981][T13508] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1279.023999][T13530] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1279.631203][T13535] 9pnet_fd: Insufficient options for proto=fd [ 1282.600166][T13564] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1283.331819][ T27] audit: type=1326 audit(1785568070.867:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.4.1995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e1499e019 code=0x0 [ 1283.383045][T13566] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input32 [ 1283.450429][T13567] device veth1_macvtap left promiscuous mode [ 1284.775434][T13576] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1284.816546][T13575] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1291.320489][T13655] loop4: detected capacity change from 0 to 1764 [ 1291.401561][T13648] [ 1291.404264][T13648] ====================================================== [ 1291.411700][T13648] WARNING: possible circular locking dependency detected [ 1291.419583][T13648] syzkaller #0 Not tainted [ 1291.424504][T13648] ------------------------------------------------------ [ 1291.432460][T13648] syz.6.2009/13648 is trying to acquire lock: [ 1291.438881][T13648] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1291.451438][T13648] [ 1291.451438][T13648] but task is already holding lock: [ 1291.459210][T13648] ffff888055635080 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 1291.473650][T13648] [ 1291.473650][T13648] which lock already depends on the new lock. [ 1291.473650][T13648] [ 1291.484896][T13648] [ 1291.484896][T13648] the existing dependency chain (in reverse order) is: [ 1291.494417][T13648] [ 1291.494417][T13648] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 1291.503194][T13648] down_write+0x36/0x60 [ 1291.508067][T13648] configfs_depend_item_unlocked+0x14f/0x430 [ 1291.515032][T13648] usbg_make_tpg+0x1f3/0x580 [ 1291.520363][T13648] target_fabric_make_tpg+0xa0/0x6d0 [ 1291.526381][T13648] configfs_mkdir+0x511/0x9e0 [ 1291.531672][T13648] vfs_mkdir+0x386/0x570 [ 1291.536584][T13648] do_mkdirat+0x1d8/0x440 [ 1291.541512][T13648] __x64_sys_mkdir+0x6a/0x80 [ 1291.546697][T13648] do_syscall_64+0x4c/0xa0 [ 1291.551959][T13648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.558639][T13648] [ 1291.558639][T13648] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 1291.566720][T13648] __mutex_lock+0x12d/0xae0 [ 1291.571821][T13648] tcm_set_name+0x26/0x90 [ 1291.576853][T13648] function_make+0x195/0x350 [ 1291.582254][T13648] configfs_mkdir+0x511/0x9e0 [ 1291.587641][T13648] vfs_mkdir+0x386/0x570 [ 1291.592571][T13648] do_mkdirat+0x1d8/0x440 [ 1291.597852][T13648] __x64_sys_mkdir+0x6a/0x80 [ 1291.603251][T13648] do_syscall_64+0x4c/0xa0 [ 1291.608354][T13648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.614936][T13648] [ 1291.614936][T13648] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1291.624568][T13648] __lock_acquire+0x2d18/0x7c40 [ 1291.630404][T13648] lock_acquire+0x1bb/0x4a0 [ 1291.635614][T13648] __mutex_lock+0x12d/0xae0 [ 1291.640811][T13648] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1291.647836][T13648] configfs_symlink+0x5a4/0x13c0 [ 1291.653381][T13648] vfs_symlink+0x245/0x3d0 [ 1291.658483][T13648] do_symlinkat+0x1b6/0x400 [ 1291.663711][T13648] __x64_sys_symlinkat+0x95/0xa0 [ 1291.669460][T13648] do_syscall_64+0x4c/0xa0 [ 1291.674579][T13648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.681314][T13648] [ 1291.681314][T13648] other info that might help us debug this: [ 1291.681314][T13648] [ 1291.691788][T13648] Chain exists of: [ 1291.691788][T13648] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#26 [ 1291.691788][T13648] [ 1291.707089][T13648] Possible unsafe locking scenario: [ 1291.707089][T13648] [ 1291.714779][T13648] CPU0 CPU1 [ 1291.720206][T13648] ---- ---- [ 1291.725596][T13648] lock(&sb->s_type->i_mutex_key#26); [ 1291.731456][T13648] lock(&opts->dep_lock); [ 1291.738500][T13648] lock(&sb->s_type->i_mutex_key#26); [ 1291.747070][T13648] lock(gadget_subsys.su_mutex); [ 1291.752199][T13648] [ 1291.752199][T13648] *** DEADLOCK *** [ 1291.752199][T13648] [ 1291.760514][T13648] 2 locks held by syz.6.2009/13648: [ 1291.766187][T13648] #0: ffff88801a7b0460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1291.775796][T13648] #1: ffff888055635080 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 1291.787188][T13648] [ 1291.787188][T13648] stack backtrace: [ 1291.794014][T13648] CPU: 1 PID: 13648 Comm: syz.6.2009 Not tainted syzkaller #0 [ 1291.804413][T13648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1291.816710][T13648] Call Trace: [ 1291.821314][T13648] [ 1291.824526][T13648] dump_stack_lvl+0x188/0x24e [ 1291.829726][T13648] ? load_image+0x410/0x410 [ 1291.834938][T13648] ? show_regs_print_info+0x12/0x12 [ 1291.841980][T13648] ? print_circular_bug+0x12b/0x1a0 [ 1291.847906][T13648] check_noncircular+0x296/0x330 [ 1291.854507][T13648] ? add_chain_block+0x9b0/0x9b0 [ 1291.861871][T13648] ? lockdep_lock+0xf1/0x1f0 [ 1291.867312][T13648] ? _find_first_zero_bit+0xd2/0x100 [ 1291.874140][T13648] __lock_acquire+0x2d18/0x7c40 [ 1291.881843][T13648] ? __kernel_text_address+0x9/0x30 [ 1291.888941][T13648] ? stack_trace_save+0xf0/0xf0 [ 1291.894839][T13648] ? verify_lock_unused+0x140/0x140 [ 1291.901795][T13648] ? mark_lock+0x94/0x320 [ 1291.906983][T13648] ? __lock_acquire+0x1465/0x7c40 [ 1291.913726][T13648] lock_acquire+0x1bb/0x4a0 [ 1291.918764][T13648] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1291.926597][T13648] ? __might_sleep+0xd0/0xd0 [ 1291.931838][T13648] ? read_lock_is_recursive+0x10/0x10 [ 1291.937674][T13648] ? mark_lock+0x94/0x320 [ 1291.942144][T13648] __mutex_lock+0x12d/0xae0 [ 1291.946963][T13648] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1291.954375][T13648] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1291.961298][T13648] ? mutex_lock_nested+0x10/0x10 [ 1291.966687][T13648] ? rwsem_write_trylock+0x135/0x1c0 [ 1291.972629][T13648] ? clear_nonspinnable+0x60/0x60 [ 1291.978435][T13648] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1291.985100][T13648] ? inode_permission+0xef/0x480 [ 1291.990341][T13648] ? bpf_lsm_inode_permission+0x5/0x10 [ 1291.995947][T13648] ? security_inode_permission+0xac/0xf0 [ 1292.001954][T13648] configfs_symlink+0x5a4/0x13c0 [ 1292.007596][T13648] ? end_current_label_crit_section+0x14b/0x170 [ 1292.014511][T13648] ? common_perm+0x15d/0x1b0 [ 1292.021320][T13648] ? from_kgid+0x14f/0x6a0 [ 1292.026045][T13648] ? make_kgid+0x650/0x650 [ 1292.031491][T13648] ? apparmor_path_symlink+0x1ac/0x230 [ 1292.038302][T13648] ? lookup_one_qstr_excl+0x11c/0x240 [ 1292.044861][T13648] ? detach_groups+0x370/0x370 [ 1292.049705][T13648] ? inode_permission+0xef/0x480 [ 1292.055669][T13648] ? bpf_lsm_inode_symlink+0x5/0x10 [ 1292.060938][T13648] ? security_inode_symlink+0xb2/0x100 [ 1292.066665][T13648] vfs_symlink+0x245/0x3d0 [ 1292.071735][T13648] do_symlinkat+0x1b6/0x400 [ 1292.076320][T13648] ? vfs_symlink+0x3d0/0x3d0 [ 1292.081057][T13648] __x64_sys_symlinkat+0x95/0xa0 [ 1292.086073][T13648] do_syscall_64+0x4c/0xa0 [ 1292.091018][T13648] ? clear_bhb_loop+0x60/0xb0 [ 1292.095766][T13648] ? clear_bhb_loop+0x60/0xb0 [ 1292.100517][T13648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1292.106589][T13648] RIP: 0033:0x7f4b0a99e019 [ 1292.111385][T13648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.132668][T13648] RSP: 002b:00007f4b0b857028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1292.141650][T13648] RAX: ffffffffffffffda RBX: 00007f4b0ac25fa0 RCX: 00007f4b0a99e019 [ 1292.150464][T13648] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 1292.158637][T13648] RBP: 00007f4b0aa3500c R08: 0000000000000000 R09: 0000000000000000 [ 1292.166735][T13648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1292.175192][T13648] R13: 00007f4b0ac26038 R14: 00007f4b0ac25fa0 R15: 00007fffeae9a3e8 [ 1292.184086][T13648] [ 1292.215960][T13455] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1292.505752][T13663] comedi comedi3: rti802: I/O port conflict (0x100,4) [ 1300.126216][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.132913][ T1282] ieee802154 phy1 wpan1: encryption failed: -22