last executing test programs: 6m36.338177162s ago: executing program 32 (id=17): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 6m23.051607535s ago: executing program 33 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8, 0xfb9, 0x1000b, 0x100100007f, 0x2000000007f, 0x4, 0x9, 0xfffffffffffffff8, 0x7, 0x2, 0x7, 0x1, 0x3, 0x7, 0x2, 0x1], 0x0, 0x80002}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x5, 0x40000, 0x2000, &(0x7f0000c6b000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m29.519812168s ago: executing program 34 (id=268): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 5m22.247694705s ago: executing program 35 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x198) syz_fuse_handle_req(r0, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf8700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="7c60933a88d76a2979d19b1a47363b838482a15ae1ca46df7c8f814e6f323fe97147d94c37aa14d23af92584e955bf5ea604da1371ebeaabf79f6229a064fddfd40bb55b6fc2ecccd91b7d7be714f4937db04551c462bff3ec4a191aca744d2792a717c814a88fe5e7127c330d2ce063c5ace17455db94d1096bdbaba282ab0eec92a2fbe9939807c200405341a0f8ff71dad41cb475531f48647a876cb61cd4897cec082383e4f465d2788597503edf9ed5ffb2113a2aead5ca76451f88699d46132a2cb30f1144d25c248f45c91f8fc4ae359f80d83af6966ccfe642a6581d3e3d66d5acbf1cf57ede53788786821526175b67c0f43de5058211ec7c59fc7f1684d816d84649915d1f9ef40edd517e32ae9e20f1d82065111ff318badea5b9af137f4d15eb2cd861525a297df3a048a5e17536212fd5648c76048f2490597ab08f79f003ef52a34cd37fb72922757188de4e1883695c8a600c88c3173fda0799439ef7f8f3ff30d26c60c528bb5b14018179e0290fa0bc5510697b07ef514bce316a1f101286472fc464c24eae6a265b63b98472f5d669bbb5dd82925f45246c453e5f66184f69047af37a12733117e6b7dc663a8aa2e2fdec59dee998f1794aafa4a56d312b3f7820d43c78cac7b3fee7312e028fa571ecea92d3db79b185c697833e18ebdeb1a1b7d48633dc6ea78cefd74a1399d8a8362879c2416e6850b483057807d080d9ad61cd1b3d3eedfcae780315c1b5c0735f4655f732b4dd8ba55cf84d29c9c6d06f3020e7042b209de37e51a7d17a930b834f98a4805e4ee18db264a63dd0c0949d6ad332ee9ec915a1e5d1dd649ad09022023792a7a59ff1d21c18d6efed92d65cfc27d0f953c35e8a3b9d7fc23ed37bc054bbd0f867a5cc5cdacdb08b3ee2dab67b9552d0c64df74fa945db0afabd7de792ee04264c8d3f3210be29465fc2af853830c59687f3c2d5b29602c1260b3cb31e95beee609ac3bffd7ff00fc97089f5791f670bc9fbb7252c24f981010235aa54cb77be24d9b345a1e21ac19b9667712d3dd474d478235f9ab438b36b0b27151c3f403c50b0f82379f8fbcef88e3d7bafad1112804d0726b43617b332bb55a323a6eda3a7db340fd9a5b625d2f992d084d59bc05144a239dafb782663bf5d3d3f17628e5c495fdb4953fe67ed7011ead6c7202b037374f8e819259a7ab5c617ae57508ceb1ee09a79fca924ae2c2db0c1f64570f823d29f703d09af1053a3f55014e1af9f0c72710a88b26bee1735cd1b7d38c499b04aadd211efdf60a26e51bb0ab9e22a40fe86c99a48cb5c9e0a50664917279bbe161e80294192a3ea22bc0dfb4804708e8d0573a98ef6c056dea914e3bd7a49759b4438dda9ffaf86c6995ef526565c15cae88f4b340c074932fa0f161a25294b3417ff2555109705521c4fafd034b9f9e5689efa1a5003d510a1099652b46e6797af00e0328670db8b29d48e96a904f998b7ca59a348de713476785f1fb76b5ad91b4107a745ca43e67c6257b11571d70a39bd1913640514611511c54a3efc03d54fb29467973f95a7396498088e935428f8fe6021f61b536227e4c9958e7ae8cc599d8fbe5fe4218c7405b828fa4e84c92e98be66d375e1c3d31537180cd03cf0f0c3b1592dfefa9b8466bffe96127a3dfc12784ebf9ff440d824eef957ac3fe1e457a6fee39cedc00c87f9f1bcc68c91333656192f2479461ee3def59bc7cf19c8a2f36bcdca3c173264e5dc251f15d27612e869e8e18a3c412fb1c6eda45364732e6b552fca8530c4e8143d67b3697d45d5286cb5d2478a8a4d144657277bce97fea1bc405c40892e37c785b24e3126942ff0effcf6fad105493b9960a5bb1fc4dbc4dba44b141c8841ef1e44901f9f7bfe5cc942dc31b514ba36cb858d9537a5eef5cd7f6f2c2a7e5452029aeff5274f47ad6360257d1156e776ab89dc9a7adc2e151454b171f785ced26d3c69aef8a6fe53b4915977f11049a1787a3ef0bda32a10e4ca92d31e02eb77c575562f173943c119479d10e4714b86ea0209877326163813c974650cee30757ae5758dd95be001cbad0fca9d8102cd6aeae0982c017040052983c76e9733c58e94a739402451555e59e5ff0932b09ca975d66ac3a48701c7c98b4fdbf84ce894f02da3da2e0d7737b2cdd4d5970e003bd925c987fd6e17ba109ff50398869519b6e6b48141408d977d973ae99e12f541ce28ea765f72d9f09e82bd9430fa7092f67570a4af1010d0e2ed7d0e2c9f5c15488fc5369fa1546c61472e4e05c38b6a857e73fdd59f0946d0547fce3415a606700286a5272f7933d33bb1a7e5e57e20af8374524436d25df2c6e5e76fe5ee89d89643c939ada6997fd53ff45368fab6e952482a7bbc3e75e9dff4e830c836b6c2792b7ecaceab5959dd454a490a54147e56327f7187382e2e1cd78df1b7c603f4cd42e776eb9f60b0ce9c3ea3392bc7b86ea9c7c4bfd7137b0a469b83ce4cd25ed1972904d5ab825d5380846ff1ae33bbf01366d61cd6c067becb2800e6463f40300f8731d50c5ad39f8de05d9100bc0265b6fcbe548747df89e614e7767b30e086007c2435ac5b62b9ae6d4d83ee1a61e4fa608848dbc1d229bfffc3e1c05d364adae3d21b653f9a671e42f740dcc3c8b10c0a0bc70d093fa8d2b99b1a09e391004c0afc765b4aa210dead05fb9a5955a2291bd4181e752ace0db6f1217fdfc56aa2392d081176a907e26d295f03321af736bec89577e975b18b53af8a3480447e8aed18718abde41609723d82cad1a5b7a17ac578310b7fd6ee9c31bfb5def019d00eae869b8ddf9f135c5cc325026da2c6e8e5ca9f30b928c0ac884409f7b8502c4df1d5a4a1a64f294987fb94c2288de8d16dc6eef3206d38f2d0f5dcb13d43633a7d0e2f9f35cdcab95975602cb5ce0a6b6833a0b96a9d3c0fe32afbea9d9a92b86dfe5ab1caa7f77d47ac0410d81ac624ce7993054061c2e01dea2c64f0cba89ee88a0fa54c2204b74cab75b08bd92409f14952170c6e3db551f77bb5e892380a7923821da934ac6a3f3133c0ca45828e4b890ed8e1ddfa7cc0fa3d69823f18888dae08bdf8e7633db061b47555360f51493ed9f46426150e0d85744cc1df2dd55f1c02d831a4ff90173af5b9feb77c5f8d21b75a1264e53d87e3893bd32c5cc8aa3fac0547307ed481b0df6561656b144580e48e53c58783424a4cfe99b06cff968c641f05f91c141483fa9bf94ed2a70a2f4a8e809a375a11bdb1563b540bb3a0181f48d165b781fc250a5a076fc2d4c1b63d5ebc0c5bbb711f7955faf7b581560793508806dbdf490ef1b358476157784412d6bb11427b4c937e63e17044cbfa79fcf159c1e632d2cc1de85404327ebbbf4b7763184a059d92ebb6e19a6156defea425b79a4f9a4651b47d1b9f8ff65e016b62a78f4893e0bb621446cac2a6c3f7e57092904a47ffae159e4d7ca0a0d06970dae6b7e7261f70beeac02f19e26caf7e745c82690c4fe9483dfdceea399d6d254181035d9baa211e87b94bc178d6e86b5a6bf012ea39223ddeddfc4731e0c8b5d6d454e76ff6018fa5d0039f991d56f78d953633b0e2457c67f5d06f35940d75dad0904dcb9e48033f1a833beb1994ed2fa58a0d75dddc8e570eddcfd12bd2239f1ec001e940b203fa73d87e715a5d431dfed069b77f9722e6f8c0df9b4bf6374c7848b26424fbb5f75c8494532c1ce6b825e55aca77e056a7f0ca42b291e96d1d5e92b3b628ae7d5a2bb73eaf8deb5f80452ed1a47afebfa084eb06c9897eb70ec3f4aa32c5413b5118ae57fcf5b9b236099f0d8f3fe5cb3a2f0def902057fd26d2557168322c13066af51b882be00ebcfdeb6e33d294214ac4e4390b2bbec78be29938ba03ca9f31cf36d8645d1f8bcf752d6d9ccddde2e8cd3bd90d01e5c14d37666dd2e5768bbf1df585d5e0e986adbe379197d1aa77e4dbdf55e9d7f64a5bb4ab44403657913e4723a6ce5196e5a67ed0206406940202f697e2c80dd0efff938ac79458661761846ba57911d7d86bd09d94839920176460deedc3f13feb96e28554ab01cc95bc9764bf7527b0153c45955cc7e71f97ae452f2c9e8277ab66535d3f6c87283791fbfc7de2cab1313e821613b0db320985c9ee8b0066ca4a1b8da0ea43c3f453b9983a6d5cd01dcf40149fd4f441b7f593987a05cf41088f6e474c1a5a23be48adaa73d8e90a1c4857e7b88743345014670a9c74d748765872d447f00cc6be4b03e5253b1709d0e47e2532347e0bb748bbd05f2d3765c881325fbdc04d582ff128b38fe29c04e75554dd82ae6c81fb15d93cbe96563e50c46d65a65eb00890953714f5c1c198566ba6de1db794297f948f0c315d433b77d867a9db6cca86241cbb4db80fb9b1782b5bf0a57401b79644f45ecb9d8642c6aeacbfb70d8b8429c5e867ff780a19e8cd80cc153636f17e338b8c069a54829c8ae6cd9361fb10ea5eb231811a45336fa650f060d21c481580456ecacea8b5ee5050fe84ff5463df2d7d5d475fe65da9e848ecf65769dae6da4b7977d5b95307694889c703f8eff6ae51182dcd32ec27c1b453a216913a79653977ec256ad37739a6e99b6fb0f2b2aa3f1f494c01c2a7f79da0a6ec6a0a855fd0efebeec595c1dea772d064f9c046096069285c22f117ff8bd16c4d003323692036a22002f3020d28a94eeae09894017fce5747c1374c0dc158d4d930452ada5a1c4d00ed805fe14d4016d7bb5ec9b064c5e595bb63c6474d94167839a8680de9f726c5119e73c563c15d775a78425562eae4a07d70c8746de4514fde36fc0ea1c7bce94f016444812c11556d8d82bc7aae33d4eceb684208b6eef7679012ec5549144a2716226f3adab8f52b835f7704b11443df808d5921ee920899757b438d5c4a0b50264840cace40a159356fa271b039edfc696844afdde58fea1787a5f38044cc50a9978d1412930f9dba720b6036f4cff01b04b5bcbcfd4b4be2fc37742eaa4ab2cc0dc3843d8beaaf5f5e3ef70a5c48bfe26502f34647c4a6b0b6daa2db6ef89d2b808647d7ecc671be7cd014940e8c2b1e3b59f4e031921f30adfc0c1b432e8f388fbee20948e19fee912dbf7f57650abd65de07807495e273a78481c3f21dfb83e5f8a60b5564d0699a90c079dac2caf8f4c8a3e56fcaf9568d1b9120803adecd3435d9134201576ecb332296897e81a56c0b229ee3a57fec2212c9ac0c771064c3cfece323b97e8cacce390d58cefca0417d5fdf4eb9acc1c754d5d04e9b85a62e3a19d8fb1e8dc23b63ab8dd4552439f3c90ce0047792d769fa2e784a8d7098f34f11423ee1a0d47639d7759b8affbf50e77e74e4af57b33ab87a2b049c84de6c55b341bc51ae2a107995bc8d91a75cb455af7b95f5c49539aab76fdf159bc64bad8bba493fb49c5e08f2cfa8a0e4c5ec35dae9ed7e01eb24b54701ba7960a258e2428f50e185d1dbed1b566845f136302d5f88f5b3eb244e611caa6e1cfacc9b0c51d7e56d56297c08edaa1f150e138370ca12595598f4d2bbc7639adcb6cc051c71f2d04f638d570deae96842712bdbf68daeec73478148254f709776ffe187ba4b38769f04489d87d7af42c7dad6ab1064035c5c61e69a95c660d3696c6f66a43fbd57a931ee172a3eba71cc0b4d1a9c1f6a28d95489d0dc2a67772457897d74f51e3672051593e3a9624c3778d9dbfb05ff3aa672b3c1cb83ebbfc3a0212f8bc1366a0f32b62a3f698f6ee31d12388d43464955c72a6e9ed5dfc7deb7f09c7f23f01dee2b3437ab5af05ddc7f030afb8b714a34573b425288379bf84a7b5200476df88b3874f785ec3cd1aa946558159f3fdb9cc481094f1bc6a01a11fef9b56bea73a5124a62456b79f22dfe60ce8e53989c8b1d0c031ee35ba2bd408f99ca48b6d9ca1414c5e750d5efc5fbf225fafda284ef80118964292d18f77a01eabdffd68f8c62d8af07a5a6d5a23464c08e3bbfce5912abcc1f4acacc3d4bc0cf511cb9682dc5fc775a0fa0229d6260370989ae8850ffbf0aa94bbef450994083f4b0616c7f481fbcf373b4e6f8cac4949f13d9c3b55e27275c8fb6d95d9b3ca9c7df28b8b8331e81fbd8dbb9bb63e19f8f6a10ef16d1fa0b000fb72af4894b4d51663e65d717028d192ca935ec17aabaa8602867afc5942f6624a57ecd7572521c3eca53ea09cd7519c724c19ab89b63d1752c1c503e732c72b0f0d8558900ba0c575b918ac6d4fa9e0ca8584876c654a83000df383a4cf41ab54b8f8df44a0e59499dd850277c14f6ee8bfc86822dc473b33634dbb638ca0de90a4e506854d468894d8409c15bfea5ba91720a2daa2e4946f5897bb0b03accb214c3d06ecf711166202d24828fb4b9c96ae0db50ce319a64750e002198b73ebda97dd96a677da9fb59feecde57ccf492b300667b743611a29dd4b30190450c640b2ae5da517edfd88a78c8fdfbaeff0bd17eb334464c0dcb3b851a9fcdb4485bac45262bc985de4cc2ba2005e82549ba80833641a4e86cbb8e18b960e8deb880a3cd8c75941fb0c6969a6cc55977d9c970dcf7a7506e581c795fc59dca99f80486e761bce7262407df3b4f0769b295011fd4f568c18efe53a1b058b43472d07ed4860f38124678994def0a6c72f84f0b12280e91ff4699ca93d12f8c6ace9d2e89844602d52d0ce1acc16d4faebeb649bab4e3b5c16973a765e9488acaab196b5aac840826609934b99a9cc513f6a546a542c2313c5ec5a902ab4a3186ae97156b27216aea9879503d402314e7800714ad6e78cb8f627a4c80497efd68bbf522aaab7b68653236e73229378cb198ebb33aae5e4a9adfb99fa6e38b74ca1af9cad80ec974039769c633694b161628c3e97e49a78762d30f8cd513b9df0f917107afd11d77c59898ce270e60d91ddb526c679b98500934338a8a4bf994ecb6078fa2ce773350184d81d431a5e31fc672d4be414b435b779135f7f60d4a1269c24d2c135d41b613f43db878c85a414e9e79b4c09ebaf3bba6a000fdb59f9cd91cf589e09d81e41b84641d7edafd018396c2f0243de265a6a238fdfd00e07c206ea6220f3de46fcdc1ce39efb01c8569b8c1c3a3224b5dcf909a13f1d5e8ba2eabf1d533360c3f96a8628152d3c7467c9c2312f2aa4e2f5e4cb08519f75cdff4691263fed7cca0f8ebc7d0890adafb0d758794b4d82696ae782b70addae7c67d4bff760a1c2ebbab45dacccb651b2883e464aab45f98a69efbded5338ae4ce54e66c6657b40f040ccf698bc1f111ac04242508164c92add63b35a3db0ff11f29405d964c76e9cfe90dbd035249f443ecc2d80d5602bd805de38907efd1729767211e19e56c15c939c353ef18fbf56f5b2443d16354022a22ce835572d8b039face4147403633daa3823c3b6dc20f1675a28dd28187edef3d38fdd5e21ba596fa881daa52e024088aae82744d04699311228d7b1878ff726e21627f91a3e58f55e88c48d3db3592d568de891e5e48e00a39be19e4c43553d9613c34b1df3d96e3ab26a759f57f7b3c3ff971f269a51a953e23c646b39836149f50b11914d5861479d03319bdff8630e331c60c73eddd6cc3f041383b598d8055488517fcecc9bf99508bcb1e4a3120ee391ef8487265d66994dade2343717e584fb30abe59cca126ced0847eb2c4e4bd6d5fda67c18a0adc7a0bf59610c98988b3a08ec7130f3cb69be7d7ca0555e92417f25306e79b5a509f68c16ccfe8d8c69967a9f80b87e163d414efda1a9bc2f0f691b64cf58c8b6636dddf9140670d2d0d883401afc51d05445b49b4d7063dbe0c2f7ac63a6b09ce465ef5953b9b99bfa578819716d3565e4fa0d95a2e1266abdada47ece5332dcf9c4ce68ecff1397669db3fbdfa22fdffc39eb665a951d73d7fba0fafe0c02ca69b4ae43b5a251e743df672d3e5c6893c7701042a2366f7e3d9406235993f3ed63c7356651acf17cbf6229bf52d1c895d992378457bf035e3d79b58de436966e2ab4236194ea87ed0745216542866cee8cc92b1abc43b5d4628d9bde4ba674229bb83a9aa15613d102e1b39c12e3ed6095284282452bc0f63557f06aaef97f3a0604f467070a350c8f94a7d37d43c81c6b6f71cd170dcb742515a58baa40fab685a79ea8188f0d6f893d1a1a86b1fcce9fd8353c9602974ca315fd129459b88f6129b5d073435eac7c6fc00ed5da18d27e72ccb0b5e755fedafbd74770772f79930b2f5db8451e1ea004db3f826df026f16dd831a68737476b1d69d4ed46fc48ad14425a455e689d51362d5b445da484950ed2b0943e5d3a1e88afadb66f7e817b778ac049c91875a626ae347c5ef28ca1e104f8cf7f038f5551581e3d6375647777de8ae9854517217887a957527148d8a0438b5958ae7774267bcbb6ebda5f2af12454ae2d8dbaef741ed936bcee0135cd440a83146446ed63b8e279f9a02c64b8bc082b1d31157e86c7cf374af30442c2c6e91a1909289e7f193ef9caaa516a1951b6042ef3407f55b19b28646357ad6f06913466cad44576d39623376fb47f5f21a6492e9b2286bbf26e539815223ddea65635d1e5901b91902e888b8f22d8fa9989bf3373bf95458b57fffe8d5cbae020000004742d77bb799a985b245384cf66ec38175a081fee6d84d13f27409e51bf9fdaa92a596058d280f204ea98fa8468266a5dda479196a2111aebd5638b890d3da16033c6135aa57c97bf3bec417059e1e7d3066a1d094d37b05d33719e62ee392ff7091d02c26375b56a2cdb0d76e3f93dbb4ff256eb43aa281f7fa0525b33d68b0d9bcb4ee5a7787d3a9a51d87b2395b7848113b917230bc4329f89beac3d03b72e7b6e9f2404bbf5cda91dc876246bc391f6107dcfd46bb566b9371a85341e09ba0355de0b340d319c96ff0fd7f9b7e75847ddc5f902f67a109804ecc1e176c20a14d07a8726a167c2d22b272245ad607ade6524b3751d6240a7fa924ab7a0977ab7a8d53ad12598eaaee42b60fa115004d3fd5a81d5f05c8529c43bba0bfceecf640d2e1d00f1de89be887a443232d32945a6b93067b86b1ad7690bb7451e1dc05cb54368de12883a65686eaae6c572cf7ee3cafe8a37da87d62d5a19b1f0691f1a617786ee2a8ebca5e085e0bd239798946a43302da7d369feb1e9d02788378af55e7af698fa1996a0eb27ed1b7daf937331f1fd2a23d77fb74c32dd73e314bb03d6651125606f499706f19d3716990c359cd726dd6c1e670671ce0bf18db472197a36e99b8b579fb5d4284ee9d23b9774e2d9fcd47aba2faddcbc53e28cdc4b9f25417eeb8cf01a3d0cbd98ca0c83f32f935742465dec5ac714fdfe0b5fb679937cd44df27ed81ca21203e400cbcf8abb36fe86d5f99a0c425c4321f23e882ae919743e17f927bc4999135d50452b89f1fac9107b5499f3bbec5710aa6804c8b95138595ef043ea4da063a540f451917fe1facec0de011597104a577bee29e6ecf69f44892282feeb6afcb0f5ea17c3272a5fe51bbf69a60d4432358087dcc1e204c325b12fbccdf2e946420691d611d286f51d17a3e5eefa3c74351accede359968ca779b1d3035c08cc9ccf5bc62b1520efa248e5cda2bb3569dfd6571d9219486f3aac82c63b4213f8b2052f39046460557a83b3aac740182f5c1574efc752c3d8717551a554717647eff9aa015d6f484c647aafbf8f93fba8faac812b0f51beb76c0e4c1b85789f8b1259dee1bc8a013ca8b9b7e59143cc9748020a75d2d099323294179630fb42344ce9e986cff8af1287348219cfb1265b04c4225f305a6c81efc1e3176c2ed31eacbe1ad2d32dee14bd66c140ebe4dffb2b45d87f093a452cdbe459b8bff9b2814478dbe2fde437887534d5b7acb3172508bde4a98bd0453750e6ea49283e7798646863b11268ab352ade2c3a84370ea08b50245232c715efd33fafee4b5768d75afa9d8c5cc7248516df5449b930a6127e9d287ad09c9cb7cddcd7926383312627037defb1fc6c788ce27ffcb4fd2be4203a3caa2e52ef66fe74ad5a5bb268054ad9c518630944c0f2954cc16ca0b443bbc30e551533c45961c4e9e946969598e011358d60ac38e594d81cb32207369b7ca01e410b36b0ead8340147ab656c0b811a3d91fab5ba8616bd4e37340db79616d9b62525f53a2dfe0424ac56cc7ebf150158257ec3b1bec84dae3dee711cd119fc7484664ff23c173c4edde30de8c3fbe715532a3038dbf2c58e660b1c4ce47382f0f6dc175875a06e6c81f135d674854dd97e9b869965b2b570edf514959832cc6d2c6a73a0f4942b221688349aa3e18fa1b5d214c1d4a0a130b5856ba1c053392474695366691e49524335143d671858b4fba20afc81c38d367d9fb7c576a6bed03fd1b6bf8239acaf4defae336dfac2105e8cb557fc7e925a8c448836ad2007b7a861f995fc3ab468502d656d51031799397a361376a257829c948c00756f472ed7a6b90b738217ae47f5360fe8a0abd912a57b9c3b7e8bded887b394c820f5fa04f4ce9e2bfb686292a8aa55a78fb0db03947e31ae98adb3b4404275696ba63c67873d8b2dbd146933a67e0c3f2ae8ee310e778c9ae5cf11d021af9530c6066ce833c3726b600a5bbf614d4099ce5d09c0ff8b29dfba32882c431780eb48b7ad19c90808892795ccdd0cd82332564daf404a58986e6b556c1dfb582fb5e9c9febae027319dc90a69f0bf37ece6392f2c1268a0dbdbade3f10f065c4936250d0230cbf7425d68bdc65ebc174039df0a6ff2988cfbea6055e73384ee5ecece1f14431592a52b3c2e80a5d3ad6f8197bd94146f968ebccb8f0e2180d387ebee3b9269c616ede15389e9f61fd5a23778dd26e0c40321986602046335112a2022ed46077594d28aa01bd63a9affc8df91e60e5d1e498f80c14839cf335cfe017a9e15e04768d7a36382970a5ad5db557a9133ad03b0131005c9c78b3aed1978df4939f967cf6254dee706bd459dab264af3a857adfe498928be418fbd28e3576384823fb629a927e3dededee8b1d6a5fca0dd1bdd8ab6d0c6d5d3bb5e29a93d2edad215903c94af9aaa334f1be42c2b9cff2d28fb18f334534770650cfc2c60693a25f829b1167c4a1a75e244ecd0ce73fe7badb7556d0502d99bcb6341bf82f64c36da7649718005826c6f681f92304e6fc4f667d77755cc6cd40611756dc2bacc31fd67d60facf62dd23345be3aa04493274474c298b16e8a0789add54c58e6591d089783956b45055ff401788f14e2333bd2bccd81412d0aa82ab2c19ce8e7499e7056b435ca4539985734a0ae012903d790265adf79faf61f3b865b4b4a9ca968da561f23a537a411ccc13ac5ba14a85bef64f3fae0e0bdcf9e70da55dc2c44f89d263c1a44f18b50ea3a02c073183e9816adf7d841d597931f116e2b325c2908545968b863e520098a295a58d4261d0bd08d1cd77a7eac8a64feb114f231f9e760ec6d84634ebef6d1b24d85fabd72fb15735390c0aec246c909d5c82976110844b5bfde94aadfa6a89396709000a59c71331ea7ece5719057c797d57c0a4d2aa51", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xe0, 0x0, 0x3, [{{0x2, 0x3, 0x5, 0x0, 0x1, 0xe67f, {0x1, 0x1000, 0x8, 0x2, 0x8, 0x1, 0x2, 0x7ff, 0x81, 0x1000, 0x1, r2, r3, 0x1, 0x443f}}, {0x6, 0x3, 0x31, 0x80000008, '.&\xf88\xce\xac\xd3\xf7\xcd\xa5X!a\x8f\xd7\x01\x00\x00\x00\x00\x00\x00\x00U\xb3\xd3#\x8c\xc7\a\xb6\xae;\xe9\xa7\xef\xdf=\x18\xaf\blT1\xb1\xceegJ'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 4m44.122306124s ago: executing program 36 (id=462): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) utimes(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)) unlink(&(0x7f00000002c0)='./file0\x00') 4m25.76938225s ago: executing program 37 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) 3m50.241954775s ago: executing program 38 (id=658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3m30.687719511s ago: executing program 9 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 3m30.252248381s ago: executing program 9 (id=733): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3}}, 0x0, 0x0, 0x1d, 0x0, "bb02a3c364ca41d6357e54451cb740000076a8a20122e4dbbe00000000000000000000000000000008000000000000000000fe1605b105000000040000000000000020004615a8284d49017c00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 3m29.994625477s ago: executing program 39 (id=733): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3}}, 0x0, 0x0, 0x1d, 0x0, "bb02a3c364ca41d6357e54451cb740000076a8a20122e4dbbe00000000000000000000000000000008000000000000000000fe1605b105000000040000000000000020004615a8284d49017c00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 3m7.369877138s ago: executing program 1 (id=787): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) 3m2.567598455s ago: executing program 1 (id=806): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2m47.384054485s ago: executing program 40 (id=806): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2m35.035731885s ago: executing program 2 (id=867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff02000000000188ca50c0003c00000000020000010000000100000200"/106, 0x68) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) write(r0, &(0x7f0000000600)="ffffffffffff02000000000188ca40c0001800000000020000010000000100000200"/106, 0x68) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000000300)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1000002}}, 0x10) write(r4, &(0x7f0000000400)='hello\x00', 0x6) 2m33.889930763s ago: executing program 2 (id=871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)={0x1, 0x0, [{0x0, 0x9d, &(0x7f0000000440)=""/157}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m32.907759827s ago: executing program 2 (id=878): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x20000080) 2m31.882809772s ago: executing program 2 (id=882): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182395"], 0x0}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m29.954933989s ago: executing program 2 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 2m28.919658064s ago: executing program 2 (id=891): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-4\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10) sendto(r4, &(0x7f00000002c0)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m13.815542392s ago: executing program 41 (id=891): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-4\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10) sendto(r4, &(0x7f00000002c0)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m5.165920173s ago: executing program 3 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2m3.945392092s ago: executing program 3 (id=949): syz_open_dev$vim2m(0x0, 0x33c, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x1800, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x48040) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) 2m2.841751349s ago: executing program 3 (id=953): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x5, 0x0, 0x0, 0xffffffff, 'syz1\x00'}, 0x0, [0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d4c06aa, 0x0, 0x3ff, 0x0, 0x3, 0x6, 0xfffffffffffffffc, 0x4, 0x9, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x400000000000, 0xfffffffffffffffd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xe198, 0x0, 0x0, 0xfffffffffffffffd, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x400000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0xf035, 0x3, 0x80000000000, 0x6, 0x100000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x1940000000000000, 0x0, 0x80000000000000, 0x0, 0x1004, 0x0, 0x4, 0x0, 0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3, 0x10000000000, 0xfffffffffffffff8]}) 2m1.1397973s ago: executing program 3 (id=955): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x2000, 0x0) 1m58.502736155s ago: executing program 3 (id=960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x11, 0x0, 0x0, @remote}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1m57.05858757s ago: executing program 3 (id=963): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain', 0x20) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) 1m41.760081703s ago: executing program 42 (id=963): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain', 0x20) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) 1m30.437322588s ago: executing program 8 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0xbe9, 0x0, 0x7, 0x1, 0x4]}, &(0x7f0000000340)=0x54) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1m29.347560645s ago: executing program 8 (id=1011): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420d", 0x9a, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m27.978349338s ago: executing program 8 (id=1015): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r4 = dup(r3) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m25.622194705s ago: executing program 8 (id=1019): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@noload}, {@dax_never}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") r0 = epoll_create(0x7e) r1 = inotify_init() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x80000000}) 1m24.649224679s ago: executing program 8 (id=1020): socket$inet(0x2, 0x2, 0x1) syz_open_dev$sndctrl(0x0, 0x1, 0x0) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) 1m22.342401585s ago: executing program 8 (id=1024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000880) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m20.808058202s ago: executing program 43 (id=1024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000880) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m13.219719537s ago: executing program 6 (id=1043): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1748, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1678, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x17a8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r5, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 1m12.26016049s ago: executing program 6 (id=1046): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x20240, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100), 0x0) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r5, 0x8001}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m11.478852199s ago: executing program 6 (id=1049): mknod(0x0, 0x1ffa, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x5d}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) 1m9.509162867s ago: executing program 6 (id=1051): socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0x80e, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0x7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m7.685260481s ago: executing program 6 (id=1055): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x16b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) close(0x3) 1m7.393471829s ago: executing program 6 (id=1056): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 56.182578812s ago: executing program 4 (id=1069): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004440)=@acquire={0x1f8c, 0x17, 0x1, 0x10000000, 0xfffffffd, {{@in6=@remote, 0x200}, @in=@multicast1, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x73}, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x120000}, [@tfcpad={0x8, 0x16, 0x7}, @algo_comp={0x1045, 0x3, {{'lzjh\x00'}, 0x7fe8, "24d990f8b6868d7b47a8b72dd78a025816dc616b892efed7e3302347544ed64943a68f432952b0538a83df344f75f06181fdcfc20d9dd2b11cbc5653a7ac4aaa54929ccc0e41456a17742e332ff219eec9fb118940b6bbc046e25bec3254db819f2ff708046f47485b5e2f0e63756374a4f52a2abd14b407053ac4923369fd02e59cb1c070ba2a727daec61716da2257852096c31694f2bb6320a50362a800c65630544ed8ce88b5711458fd5f85d474db789cf8f12a8ad41548d311cfee027bc752afe5318749a9eb2ea2ab67cb4a6ca7f9068affac6aef3e6b12b4718b7fa9740485f8f2b46f1a066cd3c6bade5d48a2ff6e15f7add7c4cc1dc648f9e4e26bad7bc48db491fab501c1b7effbdab893b2966b3d8171620340a9d74c314a53c35f84a66ab097516aec826e1e63f2635ec0e85b6f5c356cdceac20a5e3e28bf1a224fe67cddb4be45341130e3ca00618e653d6b0a927032392f0a92d4e8f9429ac0736ec7730d6e51438cf8731c8ccc58ebfdb8df2eb0feb683e940e6b546884e4e2e7b382adfae93dd855aec580e4a0259eda248359f41355b80d12f45cdfa186211100e76f3f2c23980576870486af81ecbbedd62e111d1bdb52ec1808d6f1494af5bdb464d8fb67786f54e84093bebbb7d32303ded68b79afd2d24a057b79d91b48a108505710528b16f05bb9dddac430dbe3d1be282e18e0a7ffb6233957e9f0301ea4629d84495286849c63d992b09a153a02e6893ecfde240dce5ebcd604a20d652157621f16566511f64b6d337c7fd0e17bf05713e9dda1d75e94a77cbd31e973ff7e5b9fa4df79e3635245e69dcded5fe6bb221fed86d729278b0688668f53621901fec7ae1e7386a5feb52587621dff8f672e4518267d44dc1f2d50ffe7a40e132df038939621d8f5ca5a80a4b1df188d5fc91cb4f33d90298a2b89e94f5b9b18a7b0959aa8ab300225fbcc413739a51c531b339a4946c89bd4bca092716d3c34caa2a6d2fedc39137e3011309beda19effa5595f13c1929b8810b21886d3ea3eb685fe665601444ffc3ae3dbe2878a0a578c1d525ceb4d1adbc6434dc985c960ca398f4f6e708de8136a871f63cfbf315d1feed8d69393738c8b9617db887852878117e1a9f8ea7a82f58755a51aad5fe7f66605d771bc3abe35f483b4df500cc2f2078ab70a1d85447921acb42338eecceaa86181340971a18900be4a06b8a90666722bf905d6d6d30441b1cd332b792f3232d23b9336ab4b2aeb2dd1c8c909047ddd1d4f085373f255096f75aea9c179fbcee4b43c15cb81cbfca5a329acf3c9442c6dc8017a302fa311edcffff4c22bdb439643d5f9cfa64f97c37823a0e5e3483f6c69d07891589a4b607dff602744b60ae5770d379d8bf314f4284f605f99e8d331a4b2872370283650f2ab574422d9dbb6636905911f9db104fce36ee94983afa557c36251a18b483ff9b75bf781e7455aa24a9896bf14a3c2152174141a488767483b8bd4173b474dfb0e9c472902fab7b48c42ffe5fcdea29e56230db6f848e11cc7cd7618990a355fa8b11e34f10af832a6c030beac5321dcd2c79b8c51340ae805d06d4b34399ad38419af223526505ff6c43593a918e3bf325482eb4e5889475d9982088e975afeb334b9501857aabf2666f82b7f124b48e99e282d19909e6e97af78016859ca92f3005815e921a334e138f546b809a131220906c0e3796209da7be874cbd6f9e167b31814385055d9beac97beb98a33147c128e177d49a107400301e80ca7d6d330dcc018b69dd67f44ec115f0a0185ac8dc40ef4c8648461a36b2b8cdbdef84ea20fc2047d1df8ec205f370e422db99d35ec269a38ba4426eb6e06d6d0553fbfb6c063c973a79b28dac703e4d943ce21d54d42dd276940c908dc4f2ad9c8c12a28607a89c44a95dc69e2a93c6be6c3bb19097b47b4306968b08ed39b45bbc6e19c0424bb7b3a0a9e7b895cf8d14c05134bd691203a26d0593a71472b1afece0e6c924c7941442ffb039857b80d125c2a5ecff7ab57930eb4dcabab615d1bc66e71d86b02d57b11c2680950f10226a3d15bac06ce98151ab91bc81c098879d6e46cab3848f3c5b5053075c7136ff9a8b2aa70b785f145af6e3d32aeecc818ffd1be4d9c79d6620ded1d0b84cde4b24b007034a604451455e7e9751bc460e7d175a15fefda485eb85a5b73017b14af572bff87e30a33e977c964b1b7c149b29bb90d5d30ec951e21416e78ea09ebc47d8f20165a4caca55c5dbffe372c2b2a46798919602ca8eddcb9ce99ebdcebeeb5a48901a9fe3979a2693ebb8434849bd07b17009b529d1ed2a401474df84f07d0e855b02e6d32d272362a5f9088302f3703af930fa42ae1eb5cac2a674409bd9d14216a4934c23250f7c879a0e0c2326204db6d04e8a64fd5b5850d5a47b47ef899361d54bc46e0631792d554852a9d0a27faface4be4e875117d415bb5126c390948ef8676917d0d129eb27e55babae86bf753c0dfed9c04c5c5355e1e0f0361e97fe67aa61a74c0a58c851cfd17bf554e00d84a8f35f8594720eebbd3ce1218f37eb810d353aa5882c643f7dd421e80cedf07ac1b6a99c33665fc70715b8cc717db8b74ae36361571446060f6b1c2a7be6bf02f00da83249139d14d413da0d6d43d880e38913d4f8024fa26c7bbd42d57a45b16271c3265c2c875c9d6624e3916674daac41ce145ce02181e1e4d8ec797a8c9799214de0b4d0d2e4469dbfe411c40f260371d7bbae428eb55410ccad7b574abf41d7f680ecada71b60cc785fd8b1e56b4c9291fb8864458a890038b6084ad5ac8cfe6418eee90ffce25d12fb0560e8c2b0872c531af82c47c76b3d07a959b8558d7bab17810aae67a8b6816e5472bfeff1872fc50d1617096ab39c571d3b1daf940212c3738aedd762f13bb80a0fa1796d29440a1650f3ce8344da4f685aea6f1149908bf98f89d5757c6fad12b3f969d9d6109f7f06904e9389a5b5e856568054b103423328cd92e55b90cc317f302047425306b1e065595ae291f2688242d6246974987aaf326654b6702f01cef97555a0093fbca84704713890df73663983a3fd23e32a436fc2209e2cb0df7ae03061647612bcb3b445a6f841277ca25b11f1914fa25798e14b8312fc27f60c72e9a2d8711c14d765eb63a98a801149ba9a951d80bb3c9dd8250e7a7d473c634cbc80ba25887a93e31780e5518336fe90e3045ea5e11ddd9fa08762450f4ac0fd4ba1b1a1bb9408a4bd73cbdca1bc0a420e7a56848a1d5eecbb85b2a226eb7e1169730209443da1e0362a0bc2de37babb8638bbb09522eb66af20aa076ae3f65251d9291a61b5e4b76e30202bf56c87ef0667b3975cfcd25b722f84bfc34ce6bd01e1fbfd0d9afc799c646051e5ad3f03d813a7c7e879bfcc22963c04202a53044f0b5f0efcc5deefb03b759f7c1df149bb2bfe3d3ca61c704f192904015c2c1d8466075f7af7714a7f2d3dc9a8969e7dd03e0997bf265ac788598106ae6a55233f9a046547a4a73a4ec74154d2a23bbed45a65fece489b330351878d1be6852367db6331dc9c5d1fba0ae667f6c1c8fbe6ddcd9bda584c7729b540c9634845259454dc1a5324ab93f3b15410c067947f3f2398328d683c24058aeb2bb552a1768ea10b510dee63e976bbbd69ab70c12b9e68d81bf72e4d9dc2943c07c73f207d6b0d640fcb8e4e322d1a5eb1b1c39c4ce0cd85419b6c644c5f24b28f7f682c77e18d9679a57313dcc625ccdcddff6a955203f4bf719888d4db8d9f195bf44eb8710258b2de396d8e4f66718b6d7a14c315999bea088c4eb3642dab22b130165a22913c9ebd42376b04d8bedeec58b3ac7236694993a3c4042fdbbe0afa27c7bfc412921048a08bb4226bea746e31ac2b48a80f9ddff7d70e8e05377056a19bb1137564a5bb77909fa43be26700822008c765ff465c200c1f405936974670a2f95c4a54e0588d0c921e22f7674606a3571625a37e72ec06f71605ad7b07cdd97e211895b44764ce2787ae146c3cfe0d3c0bac21c78daac788f8f13804a50fbd7dac588e61958a11651ea7e6c03dc6d00382cab2462da92defba90606dfb71c1e8ee926e40d5a41021c02b01544b8aaa3af137122196035fce6279c8f2c75b10d308550d38fd1278bffee7507e5015afd5f02db3eed4c99f1daff96edb6f63cd669c3fb3fd9fed43bce48558a18f38201dc2d628989a909ea99a8898822bd315b48e6e3476e48f1c60688f2ca3b7392ba0d26cda7a8a086cae4b5e700b9ec135fc36a7b70b62bee6874a03a4b48e48ea57dd11b2a04bd7e7dfb9ce40e3c42ca0a56fcec47a3ece6a8c4d7d22df2ee5ed723866e11306b25495eca028a6d29b29e3f21b8aeb22192655bf585a801d428baed9861664fce298d1790f3c3052c22174186edefe64ebca8193df592fc66d0aa35b79f468b9e2013b1a5e71490883eb64585ee4066ad93c21a00ea120d590f0000b86c5fba812c815abab56b6a6ed0039dbfd891f0ffaedd68a20e273638887ae3be17004664ab03b533bee17bd71921be2543c7e7c23fccd380eab1f9f0cb0ae3321804f690339a3e19714d809bbb001ab594fcd0cae6c65cf66647582956867b8822ea50f6c63f8ee08a8889706f29ca22b1eb8b4f797bb15bceadd86b2854b96d292bf98b1724ab4f52655e5a5a30de819b06fe28342ebb878ac2d3c77d912dbd818571d03d29a680b871d06f5a4b285ca772ab492667700d61496d77fc7728b01b86ae2fa28b55af6c9b021b9f49e233d2cd2db8d823d0d5b773cb273cbe8d918b53b1e710b0adbc9769f9f696767eeaf5a4cf5c674205d12c6b750acdb0289fcdc57f271d153264e89a8eeae0e1118a13a0c60773a50c4c01893b5b42a0ce6fdc417cad683e5c7c325878221063307c942058e78b0cee33afb2cdd8d7514e6959a6928aa12b65e987ba79160f49e40a26156f37a25f9cfe3eb6062b4f5a139bd7ae6d16c7dcede97592cd1926871bdc5bb2cb8872c62df3e86f99e47dbe3c95519f382531546b583975a415419218a49d032acdc6d56d00d96b58e05c265e311b24aff812ddd7450fad800512c67810f4ffde73a643a2995af3f573195771e604501322041b1d571e2b2580d7bfe1a430d1b29c98272b8ffab57f90c10d1b0d6dd77a9c26c3b0b4d3f3b6952183ab79e92f30989fd5888fea9a5858ddb9fcdd0c361fe4a5c60c086b898537a8fcd1e14e7ff7019c690ab81cea7eb7a5de7982f0537eef849b46000f16a56d629427bc5fb2902945816c420f2ebf58dc462adfb31fce790b3ca2d548403afc9f1cd73cb9c054264cbb2c4ffb951378161ff24059e0a68bc90d1a52699924e63eed19ec3dd8ae0be4207efc00bbdb45841a4532dca227768c37f9dce56446a3163be3705d496177e214d5461a33666f1024d430a993936e67f4feee4e5a0703e066ebe33dfbef96ce6fc43d9c57c6d69b9e5e9b0b45e6a4a325342d21d464549ce38a33d19f9f9c9dc566dc04e6865dd5811d0ad02a5cc9b143768de5591fc9c1af9eb6045c0fbecae24b3b87a7bb34265f313d0f6b0f6db236664101baf9b2a3f616a44fa77f465c15d37d41d8f171bec1bced67fcaf998ce21877432f060df198024c401e0c47035560fd73da3de21bf035a30001a9a0d9f34e03bc092555cf4b212074827c35cb011dcf30cd4b08bcc7aca4f228f7713b8f2004ea8a7ff46937aa05f11fe82a20c5491bdb94e46786fd4cf63daa76164a40acb14"}}, @extra_flags={0x8, 0x18, 0x8}, @coaddr={0x14, 0xe, @in=@remote}, @algo_auth_trunc={0xdf5, 0x14, {{'blake2s-256\x00'}, 0x6d48, 0xa0, "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"}}]}, 0x1f8c}}, 0x0) sendmsg(r4, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x9, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x0, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x20, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x1, 0x1000000000000004}], 0xa}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 54.354048436s ago: executing program 4 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) 53.35997542s ago: executing program 4 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x6000003, 0x14032, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7fffffffffffffff, 0x40) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, 0x0) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00), 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) 53.031761468s ago: executing program 4 (id=1075): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@noload}, {@dax_never}]}, 0x4, 0x500, &(0x7f0000000a40)="$eJzs3c9vVF0ZAOD3Tju0X7+BFmWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMX8+XeubSl7dAB2g50nie53HvOvfQ9Z4Zzzr2HzpwAetaZiFiLiGMRcTcihvP8JN/iemtLr3v54tH0+otH00k0m7f/lWTn07zY8ndSn+Y/czAifvT9iJ8mO+M2Vlbnp6rVymKeHl2qLYw2VlYvzhXynInJ8cmxq5euTHRYk/49rzhd+93z783d/PEffv+VZ39e+/bP02KVfnE8O7e1HvupVfVilLaV9OZBBOuS/vzfzzso7ndZeDtpa/tcRJzN2v9w9HXQjgCAj1uzORzN4a1pAOCoS5//S5EUyvlcQCkKhXK5NYd3KoYK1Xpj6cJwffn+TGRzWCNRLNybq1bG8rnCkSgmaXo8O95MT2xLX4qIkxHxy4FPsnR5ul6d6eaNDwD0sE+3jf//HWiN/wDAETfY7QIAAIfO+A8Avcf4DwC95y3Gf58OBIAjwvM/APQe4z8A9J49x//Hh1MOAOBQ/PDWrXRrrufffz3zYGX5O6UHF2cqjflybXm6PF1fXCjP1uuz1Up5utnc6+dV6/WF8csbycbK6p1affn+0p252tRs5U7FFz4DQPedPP30r0lErF37JNtiy1oOxmo42grdLgDQNX3dLgDQNT7PA72rg2d80wBwxO2yRO9r2v6K0JN3X/wV6K7zXzT/D73K/D/0rneb///uvpcDOHzm/6F3NZuJNf8BoMeY4wfe6///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEeVsi0plLO1wNfSPwvlcsTxiBiJYnJvrloZi4gTEfGXgeJAmh7vdqEBgPdU+EeSr/91fvhcafvZY8n/BrJ9RPzs17d/9XBqaWlxPM3/90b+0pM8f+JYNyoAAGx1fWdWa5zO91se5F++eDT9ajvMIj6/0VpcNI27nm+tM/3Rn+0HoxgRQ/9J8nRLer/Stw/x1x5HxBc26/9wS4TSYMRIvvLp9vhp7OMHEH/z9U+yuZnN+IXX4heyc+m+mL0Wn9+HskCveXqj1U/mbS9tYnn7K8SZbL97+x/Meqj396r/W9/R/xU2+r++HfGTrM2f2Ui/uSTPL//xBzsym8Otc48jvtS/W/xkI37Spv8912Ed//blr55td675m4jzsXv8llrWzY4u1RZGGyurF+dqU7OV2cr9iYnJ8cmxq5euTIwORLUyNprNVP9ptxj/vHbhRLv4af2H2sQf3KP+3+iw/r/9/92ffO0N8b/19d3f/1NviJ+Oid/sMP7U0PU2y3e3Vv+faVP/vd7/Cx3Gf/b31ZkOLwUADkFjZXV+qlqtLO5xkN5r7nWNg4/zINYiPoBi9OhBeg/+ARRjx0G3eybgoG02+m6XBAAAAAAAAAAAAAAAaKexsjo/EAf7caJu1xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICj67MAAAD//y2oyxU=") r0 = epoll_create(0x7e) r1 = inotify_init() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x80000000}) 51.793995959s ago: executing program 44 (id=1056): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 51.578240693s ago: executing program 4 (id=1078): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x24c401, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xef) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/240) unshare(0x24020400) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x84000000) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x5228, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0xff20, 0x40, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x3, 0x11000, 0x10001, 0x5, 0x79b, 0x2, 0xbd, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a3, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x331, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xffffffff, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x404, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 48.359229972s ago: executing program 4 (id=1082): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000001040)={[{@journal_dev={'journal_dev', 0x3d, 0x800}}, {@errors_remount}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@quota}, {@noblock_validity}]}, 0x1, 0x783, &(0x7f0000001340)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000003280)=ANY=[], 0xe03, 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x10000000000001, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000010000000000000006000000850000002900000085000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) 47.611325521s ago: executing program 45 (id=1082): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000001040)={[{@journal_dev={'journal_dev', 0x3d, 0x800}}, {@errors_remount}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@quota}, {@noblock_validity}]}, 0x1, 0x783, &(0x7f0000001340)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000003280)=ANY=[], 0xe03, 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x10000000000001, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000010000000000000006000000850000002900000085000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) 14.574329475s ago: executing program 7 (id=1117): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 12.857291317s ago: executing program 5 (id=1120): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) close(0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r3) 12.806235137s ago: executing program 9 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000880) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.731148754s ago: executing program 5 (id=1121): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x100a, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/51}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x8070bd24, 0x25dfdbfd, {0x2, 0x20, 0x14, 0xfc, 0xff, 0x3, 0xff, 0xb, 0x200}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0xea5bc50b619917ee) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x7ffffffd) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @private1, 0x80000009}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 11.369858523s ago: executing program 1 (id=1083): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) sendfile(r1, r1, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000400000000002800128008000100736974001c00028006000d0009000000080003000400"/48], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000c0603000000000000000000000080010900020073797a310000000009d9cd00020073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 11.091784199s ago: executing program 9 (id=1122): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x500200}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) ioctl$sock_netdev_private(r5, 0x8947, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0xba01}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) 10.707875079s ago: executing program 5 (id=1123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getitimer(0x0, &(0x7f0000000180)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 10.210042001s ago: executing program 0 (id=1124): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 8.956804672s ago: executing program 5 (id=1125): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0xfa80, 0x0, 0x3, 0x28e}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x20000, 0x2, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x8000, 0x0, 0x330}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x1, 0x0, 0x1fe}}], 0x4, &(0x7f0000000480)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107524, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, '\x00', {0x2, 0xb55, 0x0, 0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) connect$pptp(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x13) write$binfmt_script(r2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r1, r2, &(0x7f0000000100)=0x1010, 0x10001) 7.728404041s ago: executing program 0 (id=1126): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, 0x0}, 0xfffe) pipe2$9p(&(0x7f00000001c0), 0x800) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c6500007466383d302c00ef7cf9c9e427ab131e48bcb8e8584feb067a2a04bfb53d8acd1a7464c88ceadeb81c1a0a30069011756aa4b047305d230985f1517f13617faa8a8ef798318c0f939dfef1d31c5b266caf9084e4e7cfde9ba9b1007b9c8f019de569c2c65df0fb1106c53f5ed1d67eb004830e465f1da48dfeca72541be2cfc1ae0fd7dd06a1119074aa25561765f678fa139276a5e1f014a4d913ed7e95e6f8e08e70f545dcb1e22102f460b9a944604469f45c4a950919a8cc48f0c9f09c972b639d01e1da6fbde3753f82286b3a0f3157d03502f3cad14f97d803a912d36677e0c9d9bd34983a71d5f5eeac6f1e3c03065350d8b41aef668369d0c2c082e9"], 0x1, 0x380, &(0x7f0000000fc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x9) 7.551826366s ago: executing program 7 (id=1127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffff9c, 0x0, 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="00000007000000000500000000000000950000000000000038cd4ef7d44aa4bb6d83a3e35a4051785443da081c1e2664480b9b1d4c0d717ab40ff3b3ab01250696ad6b5a1648c4d915e0e7584826b472ffb9e3d75e1704789e25b2822a9fbdec9541d7d9898df2c5645a851be95a26f7422fa7dff553c83a804ff03f4709360f4b311a0a95ac412bbbc45f71be1078532feeb7"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r6, &(0x7f0000005500)=[{&(0x7f0000003440)="0600", 0x2}], 0x1) listen(r5, 0x14) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r4, 0x0, 0x0, 0x800) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b) sendto$packet(r7, &(0x7f0000000a40)="d8b8f5a2289fedded39f79c78869a3cda57dc252f75ff3c104a126ad48adce8f0e98a950a526353fa8d1f1f8066b53786aca597ae0c003fd21a6587ac5520045360d2e5aa562a401e592bcfc58c0d2a60ae395f3fb89d355a220515630c2922f0fd8023f8aaa67287f2c7ad1bb4c90422c53df26719815a4623a13e672d9fe7ac5a8fed25dfabe68f0f78c3d141da3a996339f5a3f51b92a34272c7a7a2a23fe2d52e14bf5f074853976a718f65c70b968ac357f218b4bd26fb290a0167a578389d4140855208e0b4b570b27d92192e6e3c9cfa977e0dbf5b216a68dd1d0d20aa79e7677695959a6f12ad5d4cdfb5f6d6ba814f0e130edab39f06686c3da8c4022400f496f3240281c4eea169046be517f6c4661ce5df3df908bf000b882710afe0591a897c07bb3c4493edee322d4aa6a28c85290d44229732499e6f96e0222780a16bf0a86ff22d6fd545b8ac4c7c593d5ea06ff15ef1c6f01efc649b9143e259329edaa9d48bf3d9417fe9c3f4e3a53b8abb025e3d9a0e9938d731a6e54228476681c7e1022fb17f686c781496420a3476fb03132aac5282b92de57abb64e74f3c658fb42f5a338d2b0bc316abd41e96cc3708bf3f91da759d161f4b15195ccfdcb00e560ef7fb457d7435b16fe3da112a7411193007bc83b6685d8e1f5a9f7b3e7f73319212f0de514e2761ff0fb91de9ebe6736e54fe778bd9f669f5a8e0a007f99ee6be730bbfb9ea328b30aec08322d42e3854ed1852b56e208861dcef970ec2914aa96326e00"/579, 0xffffffffffffff09, 0x24008805, 0x0, 0x0) unshare(0xa000200) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, &(0x7f0000000000)={0x7, 0x2d, 0xfff, 0x101, 0x4}) r8 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r8, 0x0, 0xd, &(0x7f0000001300)=""/4083) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f00000000c0)={0x6, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000009}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0xadc, 0x0, 0x200000400004}]}) 6.654972948s ago: executing program 7 (id=1128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/131, 0x83}], 0x1, 0x98ca, 0x108000) lseek(r3, 0x8828, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$sock(r4, 0x0, 0x0, 0x40440d1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='ntfs3\x00', 0x0, &(0x7f00000001c0)='discard') 5.76016584s ago: executing program 0 (id=1129): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$key(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x1000000}, 0x0) 5.635761203s ago: executing program 7 (id=1130): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='wlan0\x00', 0x80, 0xfff, 0x2}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f000000a000)=[{{&(0x7f00000000c0)={0xa, 0x22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000040)={0x20071026}, 0x0) writev(r7, &(0x7f0000000080), 0x0) 5.635511272s ago: executing program 1 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendfile(r2, r2, 0x0, 0x100000000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001e8, 0x12) r5 = socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f00000001c0)={0x3, 0x3e, 0x2}) sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x24008004) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x6, 0x9, 0x5, 0xfff, 0x9}) r7 = socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x81, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001a00010129bd700000ffffff"], 0x20}}, 0x0) 4.801589703s ago: executing program 5 (id=1132): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x20002, 0x212, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0x42795000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000000000)=""/35, 0x23) 3.650490631s ago: executing program 0 (id=1133): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) open$dir(0x0, 0x48000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=@encrypted_update={'update ', 'default', 0x20, 'user:', '.'}, 0x16, r4) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 3.476619655s ago: executing program 7 (id=1134): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4436ff037515b1c) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xe501, 0x3, 0x338, 0x1a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x2a0, 0x230, 0x230, 0x2a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4, [], @ipv6=@private2, [], @ipv6=@dev, [], @ipv6=@empty}}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 3.476168185s ago: executing program 1 (id=1135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.45551082s ago: executing program 0 (id=1136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 2.396323411s ago: executing program 1 (id=1137): syz_open_dev$tty1(0xc, 0x4, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@discard}, {@fatal_errors_bug}, {@discard}]}, 0xf4, 0x559e, &(0x7f000000ac40)="$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") r0 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x80000001, 0x1, {0x3, 0xff, 0x3, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x100000000000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.388793502s ago: executing program 9 (id=1138): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) 1.476006773s ago: executing program 0 (id=1139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1553, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000000040)=0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) socket(0x400000000010, 0x3, 0x0) 1.242660039s ago: executing program 5 (id=1140): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, 0x0}, 0xfffe) pipe2$9p(&(0x7f00000001c0), 0x800) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x380, &(0x7f0000000fc0)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpYrtz6+coLt0J4hfIQvfu3GXjsovSJ5k/zZ9OUySdPKK/H4R7kntOcu+dzONuhrN/68c7W5t5bTPrRuVaikpEVB5GLPajgUvDsdKPp+Oo+/Fe9dafb336+Rcfra6tXV9P6cbqzfdXUkpX3v712+9+uvpb9+XPfr7yy0zsLX65//fKX3uv7b2+//jmN808NfO03e6mLN1ut7vZ7VYjbTTzrVpKn7QaWd5Ize280Tk2v9lq7+z0Ura9sTC/02nkecq2e2mr0Uvddup2ein7Omtup1qtlhbmg+epP1hfz1YH8ewpedfOa0FMQKezmh28h2eemqk/KGVBAECpznr/n36h9/+peNH3/+LeuR7nBXP0/s9/1cH9f3r4/j3O/R8AAAAAAAAAAAAAAC6Ch0VRLYqiOhqL0YeEh9+XvDwm7KnX/8RX2etjso58cG82ovXDbn23PhgH86ub0YxWNGIpqvHo4LEwMohvfLh2fSn1LcbCnXv9+qu/R9RfOl6/HNVYHF+/PKhPT+rjYJyK+aP1K1GNV8fXr4ytn4533zlSX4tq/PFVtKMVG/3H22H998spffDx2on6mX4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8PtTTyZgz63u/WI+Zid9i/v3aYsHi8P/6g/kl//aWoxqPx/fmXxvbnvxxvXC537wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwkvfubmWtVqNzXsGo53//J9Oj4NlVlwbp909MzcXx5Jnn/Z4zBpV/VTU33OSYqcdFUUxqqbPn+1KeJZiKiFNyiuEBnv1vvRIRp+TMRMTkt1wp/8BP/j8PD/jZOef9JAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDyHTb9LnslAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlCnv3d3KWq1GZ4JB2XsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4SP4JAAD//x/aCuM=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x9) 1.241769149s ago: executing program 7 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 0s ago: executing program 9 (id=1141): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x46, 0x2801) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x40) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$MEMREADOOB64(r1, 0x1269, &(0x7f00000000c0)={0x1}) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000440)=""/62, 0xffffffffffffff68, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0) sched_setscheduler(0x0, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) kernel console output (not intermixed with test programs): [ 213.254065][ T5618] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.279355][ T6893] ext4: Unknown parameter 'dont_hash' [ 213.322843][ T6899] loop7: detected capacity change from 0 to 1024 [ 213.375080][ T6899] hfsplus: failed to load root directory [ 213.490576][ T5618] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.547939][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.555821][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.623833][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.722974][ T5614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.752883][ T5614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.897151][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.912108][ T6858] chnl_net:caif_netlink_parms(): no params data found [ 214.469267][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.494520][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.576200][ T6858] device bridge_slave_0 entered promiscuous mode [ 214.685009][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.717902][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.924704][ T6858] device bridge_slave_1 entered promiscuous mode [ 215.083192][ T6921] device syzkaller0 entered promiscuous mode [ 215.260436][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 215.497735][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.593426][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.735089][ T6858] team0: Port device team_slave_0 added [ 215.766905][ T6858] team0: Port device team_slave_1 added [ 215.898012][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.927451][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.032982][ T6964] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.056400][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.228143][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.253971][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.318739][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.767237][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 216.830352][ T6858] device hsr_slave_0 entered promiscuous mode [ 216.882720][ T6858] device hsr_slave_1 entered promiscuous mode [ 217.014818][ T6858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.146704][ T6858] Cannot create hsr debugfs directory [ 217.317567][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 218.755396][ T7024] loop7: detected capacity change from 0 to 40427 [ 218.774292][ T5618] device hsr_slave_0 left promiscuous mode [ 218.783464][ T7041] overlayfs: failed to clone upperpath [ 218.791706][ T5618] device hsr_slave_1 left promiscuous mode [ 218.826510][ T7024] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 218.833069][ T7024] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 218.876858][ T7024] F2FS-fs (loop7): invalid crc value [ 218.975540][ T5618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.983136][ T5618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.984470][ T7024] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 219.446250][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 219.590690][ T5618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.695999][ T5618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.834214][ T5618] device bridge_slave_1 left promiscuous mode [ 219.860141][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.507425][ T5618] device bridge_slave_0 left promiscuous mode [ 220.685166][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.749404][ T7060] xt_CT: No such helper "snmp_trap" [ 220.976606][ T5618] device veth1_macvtap left promiscuous mode [ 220.997315][ T5618] device veth0_macvtap left promiscuous mode [ 221.004727][ T5618] device veth1_vlan left promiscuous mode [ 221.011705][ T5618] device veth0_vlan left promiscuous mode [ 223.167247][ T5618] team0 (unregistering): Port device team_slave_1 removed [ 223.229381][ T5618] team0 (unregistering): Port device team_slave_0 removed [ 223.282288][ T5618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.366795][ T5618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.367763][ T5618] bond0 (unregistering): Released all slaves [ 228.481324][ C0] sched: RT throttling activated [ 230.458329][ T7147] loop7: detected capacity change from 0 to 512 [ 230.499500][ T7147] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 230.508954][ T7147] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.742423][ T5678] EXT4-fs (loop7): unmounting filesystem. [ 232.384215][ T6858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.433092][ T6858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.462574][ T6858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.496003][ T6858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.808181][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.039414][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.063392][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.108279][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.180276][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.210642][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.243002][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.250230][ T4738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.306338][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.344355][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.375002][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.392421][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.399851][ T4738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.413665][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.427909][ T7201] device syzkaller0 entered promiscuous mode [ 233.450981][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.468734][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.501010][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.512607][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.438387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 234.839192][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.867795][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.916481][ T6858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.957583][ T6858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.001353][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.022925][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.070039][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.100476][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.125371][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.244481][ T7238] fuse: Bad value for 'fd' [ 237.136459][ T7243] binder: 7242:7243 ioctl c0306201 200000001440 returned -14 [ 237.354705][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.381638][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.425290][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.540411][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.577241][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.649145][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.672348][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.700107][ T6858] device veth0_vlan entered promiscuous mode [ 237.718402][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.749919][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.781498][ T6858] device veth1_vlan entered promiscuous mode [ 237.858365][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.897822][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.918342][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.947545][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.999383][ T6858] device veth0_macvtap entered promiscuous mode [ 238.016896][ T6858] device veth1_macvtap entered promiscuous mode [ 238.088265][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.120796][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.142985][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.175770][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.186138][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.203237][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.214653][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.225632][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.273280][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.318313][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.338481][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.367458][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.376270][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.433499][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.456400][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.471988][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.544136][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.600726][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.640403][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.664772][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.724085][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.951249][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.181293][ T6858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.332335][ T6858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.386376][ T6858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.407022][ T6858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.652776][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.894037][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.673150][ T5618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.694494][ T5618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.727044][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.801147][ T5618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.818431][ T5618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.853745][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.728334][ T7381] loop7: detected capacity change from 0 to 256 [ 243.780750][ T7381] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 245.022223][ T5608] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.064620][ T7413] loop0: detected capacity change from 0 to 512 [ 245.088323][ T7413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 245.148971][ T7413] EXT4-fs (loop0): 1 truncate cleaned up [ 245.167757][ T7413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 245.208563][ T5608] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.322205][ T7413] EXT4-fs error (device loop0): ext4_discard_preallocations:5124: comm syz.0.657: Error -117 loading buddy information for 4294967295 [ 245.337470][ T4318] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 245.373075][ T7413] EXT4-fs (loop0): Remounting filesystem read-only [ 245.391970][ T7413] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #15: comm syz.0.657: invalid indirect mapped block 38 (level 1) [ 245.460077][ T5608] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.493911][ T7413] EXT4-fs (loop0): Remounting filesystem read-only [ 245.500642][ T7413] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 245.616992][ T7413] EXT4-fs (loop0): Remounting filesystem read-only [ 245.706686][ T7413] EXT4-fs error (device loop0): ext4_truncate:4325: inode #15: comm syz.0.657: mark_inode_dirty error [ 246.246339][ T7413] EXT4-fs (loop0): Remounting filesystem read-only [ 246.253022][ T7413] EXT4-fs error (device loop0) in ext4_setattr:5695: Corrupt filesystem [ 246.272551][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 246.281286][ T4318] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 246.284544][ T7413] EXT4-fs (loop0): Remounting filesystem read-only [ 246.301636][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.334529][ T4318] usb 4-1: Product: syz [ 246.338740][ T4318] usb 4-1: Manufacturer: syz [ 246.347269][ T5608] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.363938][ T26] audit: type=1326 audit(1785221859.665:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.6.663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f269bb9de99 code=0x0 [ 246.364110][ T4318] usb 4-1: SerialNumber: syz [ 246.421055][ T4318] usb 4-1: config 0 descriptor?? [ 246.532051][ T6858] EXT4-fs (loop0): unmounting filesystem. [ 246.636991][ T4318] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.022376][ T5348] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 247.222234][ T5348] usb 1-1: Using ep0 maxpacket: 32 [ 247.229579][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.262206][ T4318] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 247.282181][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.302964][ T4318] usb 4-1: USB disconnect, device number 8 [ 247.320808][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.332313][ T5348] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 247.341655][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.347066][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.359537][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.369718][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.377906][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.402189][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.438179][ T5348] usb 1-1: config 0 descriptor?? [ 247.905097][ T5348] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 247.918747][ T5348] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 247.930311][ T5348] ft260 0003:0403:6030.0007: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 248.103309][ T7445] chnl_net:caif_netlink_parms(): no params data found [ 248.119656][ T5348] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 248.307394][ T7469] binder: 7468:7469 ioctl c0306201 200000000080 returned -14 [ 248.334493][ T7469] binder: 7468:7469 ioctl c0306201 2000000003c0 returned -14 [ 248.358935][ T7473] loop9: detected capacity change from 0 to 512 [ 248.412087][ T7473] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.521256][ T5348] ft260 0003:0403:6030.0007: failed to retrieve status: -32 [ 248.550500][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.570779][ T7473] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 248.600814][ T7473] Quota error (device loop9): write_blk: dquota write failed [ 248.608803][ T7473] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 248.610790][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.618985][ T7473] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.669: Failed to acquire dquot type 0 [ 248.647920][ T7473] EXT4-fs (loop9): 1 truncate cleaned up [ 248.657655][ T7473] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 248.670760][ T7445] device bridge_slave_0 entered promiscuous mode [ 248.925192][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.940873][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.950299][ T7445] device bridge_slave_1 entered promiscuous mode [ 249.176080][ T7487] ft260 0003:0403:6030.0007: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 249.191263][ T7] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 249.231115][ T7487] ft260 0003:0403:6030.0007: failed to reset I2C controller: -71 [ 249.247925][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.271150][ T7487] ft260 0003:0403:6030.0007: ft260_i2c_write: failed to start transfer, ret -38 [ 249.283784][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.371595][ T7] usb 1-1: device descriptor read/64, error -32 [ 249.407137][ T5608] device hsr_slave_0 left promiscuous mode [ 249.413958][ T5608] device hsr_slave_1 left promiscuous mode [ 249.420500][ T5608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.430967][ T5608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.443998][ T5608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.461152][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 249.481296][ T5608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.492380][ T6595] EXT4-fs (loop9): unmounting filesystem. [ 249.493651][ T5608] device bridge_slave_1 left promiscuous mode [ 249.508864][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.517857][ T5608] device bridge_slave_0 left promiscuous mode [ 249.524734][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.678839][ T5608] device veth1_macvtap left promiscuous mode [ 249.728190][ T5608] device veth0_macvtap left promiscuous mode [ 249.748369][ T5608] device veth1_vlan left promiscuous mode [ 249.764719][ T5608] device veth0_vlan left promiscuous mode [ 250.518725][ T7510] loop0: detected capacity change from 0 to 512 [ 250.563771][ T7510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a800c018, mo2=0082] [ 250.586936][ T7510] System zones: 2-12, 7-7 [ 250.622552][ T7510] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #17: comm syz.0.674: iget: immutable or append flags not allowed on symlinks [ 250.669509][ T7510] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.674: couldn't read orphan inode 17 (err -117) [ 250.689744][ T7510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 251.010604][ T5348] usb 1-1: USB disconnect, device number 3 [ 251.466814][ T7516] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 251.540182][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 251.587464][ T5608] team0 (unregistering): Port device team_slave_1 removed [ 251.644635][ T5608] team0 (unregistering): Port device team_slave_0 removed [ 251.698343][ T5608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.753026][ T5608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.126044][ T5608] bond0 (unregistering): Released all slaves [ 252.248296][ T7445] team0: Port device team_slave_0 added [ 252.411674][ T7445] team0: Port device team_slave_1 added [ 252.474026][ T6858] EXT4-fs (loop0): unmounting filesystem. [ 252.500402][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.677'. [ 252.797567][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.807069][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.308164][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.541944][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.589856][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.618814][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 253.741871][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.978655][ T7552] device syzkaller0 entered promiscuous mode [ 254.016522][ T7445] device hsr_slave_0 entered promiscuous mode [ 254.043367][ T7445] device hsr_slave_1 entered promiscuous mode [ 254.098372][ T7560] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.318666][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 254.511599][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 254.529131][ T7] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 254.559093][ T7] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.588716][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.615772][ T7] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 254.646124][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.693516][ T7] usb 4-1: config 0 descriptor?? [ 254.818446][ T5350] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 255.002338][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.008653][ T5350] usb 10-1: Using ep0 maxpacket: 32 [ 255.010914][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.023934][ T5350] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.044069][ T5350] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.055678][ T5350] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 255.074671][ T5350] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.092598][ T5350] usb 10-1: config 0 descriptor?? [ 255.113631][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 255.123790][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 255.137751][ T7] usb 4-1: USB disconnect, device number 9 [ 255.500135][ T7578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.514909][ T5350] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 255.527735][ T5350] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 255.537386][ T5350] ft260 0003:0403:6030.0008: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0 [ 255.556759][ T7578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.620586][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.626936][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.698031][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 255.713136][ T5350] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 256.606115][ T5350] ft260 0003:0403:6030.0008: failed to retrieve status: -32 [ 256.807842][ T7578] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.816772][ T7578] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.826021][ T7578] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.835277][ T7578] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.879939][ T5350] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 256.879988][ T7579] ft260 0003:0403:6030.0008: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 256.902776][ T7579] ft260 0003:0403:6030.0008: ft260_i2c_write: failed to start transfer, ret -38 [ 257.930419][ T5348] usb 10-1: USB disconnect, device number 2 [ 259.650709][ T7658] netlink: 52 bytes leftover after parsing attributes in process `syz.3.704'. [ 259.856770][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.864074][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.949675][ T7663] netlink: 76 bytes leftover after parsing attributes in process `syz.3.704'. [ 260.011330][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.018541][ T7663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.026121][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.033285][ T7663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.222351][ T7663] netlink: 52 bytes leftover after parsing attributes in process `syz.3.704'. [ 260.285430][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.292699][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.069242][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.078401][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.587207][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.741082][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.053646][ T7733] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 264.111183][ T7667] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.133626][ T7667] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.152903][ T7667] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.162205][ T7667] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.426401][ T7445] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.489807][ T7445] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.541827][ T7445] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.562902][ T7749] loop9: detected capacity change from 0 to 128 [ 264.572961][ T7445] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.841270][ T6595] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 264.867958][ T6595] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 264.895628][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.966611][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.009359][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.042605][ T7445] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.062067][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.097504][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.122360][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.129562][ T5620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.139185][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.175043][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.190613][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.201661][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.209046][ T4736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.226045][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.328970][ T7773] netlink: 'syz.6.731': attribute type 4 has an invalid length. [ 265.413876][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.459873][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.487943][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.506711][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.519096][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.528175][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.559237][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.574368][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.603835][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.623968][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.661339][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.102466][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.124879][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.136396][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.147472][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.160799][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.168184][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.301611][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.309174][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.890950][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.958763][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.269420][ T7789] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.278937][ T7789] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.287980][ T7789] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.296951][ T7789] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.351374][ T7789] device wlan0 left promiscuous mode [ 268.181314][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.261156][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.264198][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 268.445742][ T7445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.458232][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 268.569510][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.588356][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.647577][ T7445] device veth0_vlan entered promiscuous mode [ 268.680671][ T7445] device veth1_vlan entered promiscuous mode [ 268.688455][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.697521][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.707262][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.789497][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.802193][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.856506][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.865889][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.877236][ T7792] device bridge_slave_0 entered promiscuous mode [ 268.904588][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.920203][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.932330][ T7792] device bridge_slave_1 entered promiscuous mode [ 268.945226][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.005227][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.019981][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.298958][ T7445] device veth0_macvtap entered promiscuous mode [ 269.321883][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.335048][ T7445] device veth1_macvtap entered promiscuous mode [ 269.345149][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.388537][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.399549][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.412923][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.425218][ T7792] team0: Port device team_slave_0 added [ 269.441789][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.468698][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.523326][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.554099][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.566127][ T7792] team0: Port device team_slave_1 added [ 269.579578][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.590703][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.603879][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.626066][ T7445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.636441][ T7445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.645819][ T7445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.654806][ T7445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.667197][ T7826] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 269.684502][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.711857][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.821389][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.745'. [ 269.882142][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.889120][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.917428][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.966496][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.976192][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.024002][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.127812][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.150573][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.183707][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.214855][ T7792] device hsr_slave_0 entered promiscuous mode [ 270.222229][ T7792] device hsr_slave_1 entered promiscuous mode [ 270.233527][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.243758][ T7792] Cannot create hsr debugfs directory [ 270.267659][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.302852][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.330869][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 270.343991][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.891897][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 272.409523][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 274.243539][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.275652][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.488399][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 274.743037][ T7849] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.758785][ T7849] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.767715][ T7849] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.783387][ T7849] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.972058][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 274.998729][ T7850] device netdevsim3 entered promiscuous mode [ 276.251826][ T7792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.261842][ T7792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.331232][ T7792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.373979][ T7933] loop2: detected capacity change from 0 to 64 [ 276.384920][ T7792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.411208][ T7932] netlink: 16 bytes leftover after parsing attributes in process `syz.6.765'. [ 276.466732][ T7932] netlink: 17 bytes leftover after parsing attributes in process `syz.6.765'. [ 276.490915][ T7932] tipc: Invalid UDP bearer configuration [ 276.490964][ T7932] tipc: Enabling of bearer rejected, failed to enable media [ 277.381148][ T7445] hfs: node 4:3 still has 1 user(s)! [ 277.407763][ T7948] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 277.444413][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.483801][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 277.693062][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.717584][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.728727][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.815234][ T7792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.878933][ T7792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.937882][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.954056][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.954287][ T7964] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 277.968863][ T7964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.065836][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.073117][ T5620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.162210][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.219503][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.272053][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.279290][ T5620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.381291][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.485151][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.569752][ T7964] vhci_hcd vhci_hcd.0: Device attached [ 278.585812][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.644190][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.668732][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.678045][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.688284][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.697618][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.706425][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.715097][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.856425][ T4323] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 279.310010][ T7965] vhci_hcd: connection reset by peer [ 279.356767][ T4334] vhci_hcd: stop threads [ 279.361292][ T4334] vhci_hcd: release socket [ 279.379803][ T4334] vhci_hcd: disconnect device [ 280.772440][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.780050][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.450320][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.500236][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.827549][ T7960] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.836595][ T7960] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.846322][ T7960] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.855433][ T7960] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.955915][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.964113][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.972836][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.108684][ T8027] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 282.159845][ T8027] device bridge1 entered promiscuous mode [ 282.316246][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.341667][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.457879][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.575865][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.593284][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.811039][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.838367][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.839456][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.855337][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.024721][ T4323] vhci_hcd: vhci_device speed not set [ 284.862961][ T7792] device veth0_vlan entered promiscuous mode [ 284.897814][ T8052] device syzkaller0 entered promiscuous mode [ 285.069178][ T7792] device veth1_vlan entered promiscuous mode [ 286.088704][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.116723][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.157688][ T7792] device veth0_macvtap entered promiscuous mode [ 286.191072][ T7792] device veth1_macvtap entered promiscuous mode [ 286.224330][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.232252][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.251428][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.264817][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.282300][ T7792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.291215][ T7792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.306878][ T7792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.318979][ T7792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.339423][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.351570][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.470738][ T5614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.487366][ T5614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.502813][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 286.532019][ T5614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.546596][ T5614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.554279][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.130180][ T8093] raw_sendmsg: syz.2.797 forgot to set AF_INET. Fix it! [ 291.785385][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.794045][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.150830][ T8118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.192201][ T8118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.720679][ T8118] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.729922][ T8118] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.739628][ T8118] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.748962][ T8118] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.957687][ T8142] device syzkaller0 entered promiscuous mode [ 292.991837][ T8158] device syzkaller0 entered promiscuous mode [ 297.129226][ T8193] lo speed is unknown, defaulting to 1000 [ 297.132029][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.808'. [ 297.205377][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 297.298460][ T8193] lo speed is unknown, defaulting to 1000 [ 297.347513][ T8193] lo speed is unknown, defaulting to 1000 [ 297.348440][ T8239] device bridge_slave_0 left promiscuous mode [ 297.395024][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.419932][ T8239] device bridge_slave_1 left promiscuous mode [ 297.428469][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.445758][ T8239] bond0: (slave bond_slave_0): Releasing backup interface [ 297.464803][ T8239] bond0: (slave bond_slave_1): Releasing backup interface [ 297.489297][ T8239] team0: Port device team_slave_0 removed [ 297.504308][ T8239] team0: Port device team_slave_1 removed [ 297.511956][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.527478][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.548182][ T8245] team0: Mode changed to "activebackup" [ 297.598533][ T8248] tipc: Enabled bearer , priority 0 [ 297.711350][ T8249] loop2: detected capacity change from 0 to 512 [ 297.736237][ T8249] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 299.207946][ T3599] lo speed is unknown, defaulting to 1000 [ 299.545180][ T8193] infiniband syz0: set down [ 299.550369][ T8193] infiniband syz0: added lo [ 299.808243][ T8193] rdma_rxe: unable to create cq [ 299.814159][ T8193] infiniband syz0: Couldn't create ib_mad CQ [ 300.020860][ T8193] infiniband syz0: Couldn't open port 1 [ 301.298830][ T8193] RDS/IB: syz0: added [ 301.303793][ T8193] smc: adding ib device syz0 with port count 1 [ 301.331235][ T8193] smc: ib device syz0 port 1 has pnetid [ 301.355573][ T3599] lo speed is unknown, defaulting to 1000 [ 301.374247][ T8193] lo speed is unknown, defaulting to 1000 [ 301.802907][ T8193] lo speed is unknown, defaulting to 1000 [ 303.281587][ T8193] lo speed is unknown, defaulting to 1000 [ 304.906941][ T8193] lo speed is unknown, defaulting to 1000 [ 305.063522][ T8193] lo speed is unknown, defaulting to 1000 [ 306.612383][ T8193] lo speed is unknown, defaulting to 1000 [ 309.717810][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.730576][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.744375][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.756932][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.774357][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 309.781810][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.015494][ T8379] lo speed is unknown, defaulting to 1000 [ 310.993009][ T8396] tipc: Enabling of bearer rejected, already enabled [ 311.906240][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 312.141704][ T8414] device syzkaller0 entered promiscuous mode [ 312.362331][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 312.584716][ T4316] usb 3-1: Using ep0 maxpacket: 16 [ 312.592376][ T4316] usb 3-1: config 0 has no interfaces? [ 312.620116][ T4316] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 312.634816][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 312.642985][ T4316] usb 3-1: Product: syz [ 312.654890][ T4316] usb 3-1: Manufacturer: syz [ 312.659537][ T4316] usb 3-1: SerialNumber: syz [ 312.675206][ T4316] usb 3-1: config 0 descriptor?? [ 314.154507][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 316.290990][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 317.054878][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.061256][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.328483][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 318.590418][ T8423] bridge0: port 3(macvlan2) entered blocking state [ 318.604673][ T8423] bridge0: port 3(macvlan2) entered disabled state [ 318.621484][ T8423] device macvlan2 entered promiscuous mode [ 319.160621][ T7593] usb 3-1: USB disconnect, device number 2 [ 320.255422][ T8496] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6858] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8496] [ 320.505981][ T8492] batman_adv: batadv0: Adding interface: dummy0 [ 320.512314][ T8492] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.074056][ T8492] batman_adv: batadv0: Interface activated: dummy0 [ 321.132005][ T8379] chnl_net:caif_netlink_parms(): no params data found [ 321.199701][ T8496] batadv0: mtu less than device minimum [ 321.237095][ T8496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 321.250211][ T8496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 321.262559][ T8496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 321.275209][ T8496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 321.287663][ T8496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 321.299521][ T8496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 321.311240][ T8496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 321.322654][ T8496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 321.334174][ T8496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 321.407836][ T8515] tipc: Enabling of bearer rejected, failed to enable media [ 321.738497][ T8534] device syzkaller0 entered promiscuous mode [ 321.930462][ T8379] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.961815][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.970202][ T8379] device bridge_slave_0 entered promiscuous mode [ 322.052313][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.114655][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.122839][ T8379] device bridge_slave_1 entered promiscuous mode [ 322.417237][ T8379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.442545][ T8379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.565825][ T8379] team0: Port device team_slave_0 added [ 322.866309][ T8379] team0: Port device team_slave_1 added [ 323.833388][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.870517][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.925360][ T8379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.000211][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.613123][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.675734][ T8379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.463910][ T8379] device hsr_slave_0 entered promiscuous mode [ 326.742160][ T8379] device hsr_slave_1 entered promiscuous mode [ 327.371235][ T8379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.389769][ T8379] Cannot create hsr debugfs directory [ 327.496777][ T47] device hsr_slave_0 left promiscuous mode [ 327.652282][ T47] device hsr_slave_1 left promiscuous mode [ 328.431393][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.471203][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.517076][ T47] device bridge_slave_1 left promiscuous mode [ 328.526777][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.605012][ T47] device bridge_slave_0 left promiscuous mode [ 328.621670][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.835266][ T8659] fuse: Bad value for 'fd' [ 330.991029][ T47] team0 (unregistering): Port device team_slave_1 removed [ 331.090966][ T47] team0 (unregistering): Port device team_slave_0 removed [ 331.146013][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.208328][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.638788][ T47] bond0 (unregistering): Released all slaves [ 331.769523][ T4735] smc: removing ib device syz0 [ 335.604679][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 338.330869][ T8379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.400465][ T8379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.456057][ T8379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.518110][ T8379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.745041][ T8379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.891696][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.192284][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.641640][ T8379] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.746944][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.758344][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.911006][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.918436][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.051397][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.128440][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.180170][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.189787][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.196928][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.208723][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.248737][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.283196][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.299331][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.308797][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.323016][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.332681][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.344316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.353099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.371525][ T8379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.382773][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.391679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.400694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.743866][ T8379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.751855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.766591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.150175][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.160326][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.192959][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.201973][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.227054][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.235430][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.245037][ T8379] device veth0_vlan entered promiscuous mode [ 341.269751][ T8379] device veth1_vlan entered promiscuous mode [ 341.297411][ T8379] device veth0_macvtap entered promiscuous mode [ 341.305577][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.314008][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.326107][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.336488][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.348304][ T8379] device veth1_macvtap entered promiscuous mode [ 341.358765][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.367738][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 341.389456][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.398594][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 341.410060][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.425805][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.433258][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.448226][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.466071][ T8379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.477734][ T8379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.487309][ T8379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.503450][ T8379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.636885][ T5620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.650818][ T5620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.662361][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.807363][ T4735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.823470][ T4735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.834170][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 346.246196][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.259194][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.269370][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.277381][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.288164][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.297247][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.793536][ T8906] MPTCP: kernel_bind error, err=-99 [ 346.857527][ T8891] chnl_net:caif_netlink_parms(): no params data found [ 348.154187][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.184763][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.215723][ T8891] device bridge_slave_0 entered promiscuous mode [ 348.344686][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 348.938528][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.004668][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.649135][ T8891] device bridge_slave_1 entered promiscuous mode [ 350.201139][ T8891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.333351][ T8891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.404563][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 351.570385][ T8938] loop0: detected capacity change from 0 to 512 [ 351.635787][ T8938] EXT4-fs: inline encryption not supported [ 351.645986][ T8938] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 351.652149][ T8891] team0: Port device team_slave_0 added [ 351.719537][ T8891] team0: Port device team_slave_1 added [ 351.765456][ T8938] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 351.824107][ T8938] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.948: invalid indirect mapped block 2683928664 (level 1) [ 351.854081][ T8938] EXT4-fs (loop0): 1 truncate cleaned up [ 351.864660][ T8938] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 351.886768][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.918492][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.004248][ T8891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.178367][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.507022][ T26] audit: type=1800 audit(1785221965.823:29): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.948" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 352.527229][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 352.687350][ T6858] EXT4-fs (loop0): unmounting filesystem. [ 352.756689][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.034845][ T8891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.417572][ T8891] device hsr_slave_0 entered promiscuous mode [ 354.447187][ T8891] device hsr_slave_1 entered promiscuous mode [ 354.483793][ T8891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.520511][ T8891] Cannot create hsr debugfs directory [ 354.574565][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 354.651412][ T8979] loop4: detected capacity change from 0 to 128 [ 354.896253][ T8979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 354.954815][ T8979] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 355.402082][ T8987] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 355.732479][ T8379] EXT4-fs (loop4): unmounting filesystem. [ 359.779518][ T8891] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 359.852927][ T8891] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 360.016198][ T8891] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 361.061460][ T8891] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 362.424753][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.670679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.695780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.753364][ T8891] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.465443][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.485284][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.579503][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.586829][ T5610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.475969][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.515212][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.545168][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.594920][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.602100][ T5610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.274002][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 367.541877][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 367.577999][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 367.599811][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 367.618691][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.726477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 367.738652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 367.771293][ T8891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.793470][ T8891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.862330][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.885460][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.937698][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.967078][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.001045][ T9070] device syzkaller0 entered promiscuous mode [ 368.046209][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.344800][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 370.659842][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.670135][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.714911][ T8891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.894901][ T9115] hub 1-0:1.0: USB hub found [ 370.960269][ T9115] hub 1-0:1.0: 1 port detected [ 373.433358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.444139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.493906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.506493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.527003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.553088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.583936][ T8891] device veth0_vlan entered promiscuous mode [ 373.607377][ T8891] device veth1_vlan entered promiscuous mode [ 373.660507][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 373.693502][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 373.726552][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 373.775202][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.835403][ T8891] device veth0_macvtap entered promiscuous mode [ 373.870447][ T8891] device veth1_macvtap entered promiscuous mode [ 373.939445][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.969375][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.003209][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.020533][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 374.038100][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 374.052426][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.070027][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.091791][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.113095][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.128809][ T9172] Bluetooth: MGMT ver 1.22 [ 374.142669][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.170247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.180008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.303138][ T8891] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.362812][ T8891] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.411153][ T8891] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.589313][ T8891] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.150535][ T9181] device syzkaller0 entered promiscuous mode [ 375.215021][ T9180] netlink: 'syz.0.990': attribute type 39 has an invalid length. [ 375.266927][ T4288] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 376.060157][ T4288] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 376.069933][ T4288] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 376.080431][ T4288] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 376.088383][ T4288] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 376.096116][ T4288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.381966][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.404550][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.513818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 376.562819][ T5610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.587938][ T5610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.620076][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.174749][ T4283] Bluetooth: hci6: command 0x0409 tx timeout [ 378.274576][ T9227] gfs2: path_lookup on 9ÏWòøšµé¦C×JB·A}ö­™Tn=Œù{¤LW±ÄÕ…ï’þÀËì UõÃÍ8ö§uÆÜ@à& returned error -2 [ 378.497652][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.505622][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.514934][ T9243] syz.6.1000 sent an empty control message without MSG_MORE. [ 379.979704][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.987237][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.244674][ T4283] Bluetooth: hci6: command 0x041b tx timeout [ 382.637607][ T4283] Bluetooth: hci6: command 0x040f tx timeout [ 383.333490][ T9213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.407145][ T9213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.418418][ T9262] loop4: detected capacity change from 0 to 40427 [ 383.433726][ T9262] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 383.441588][ T9262] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 383.458739][ T9262] F2FS-fs (loop4): invalid crc value [ 383.488173][ T9262] F2FS-fs (loop4): Found nat_bits in checkpoint [ 383.547498][ T9262] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 383.554738][ T9262] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 384.725166][ T4283] Bluetooth: hci6: command 0x0419 tx timeout [ 384.785033][ T9213] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.802029][ T9213] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.828959][ T9213] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.851131][ T9213] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.977007][ T9189] chnl_net:caif_netlink_parms(): no params data found [ 385.439097][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.739010][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.851332][ T9189] device bridge_slave_0 entered promiscuous mode [ 385.961070][ T9283] device syzkaller0 entered promiscuous mode [ 386.231362][ T9296] tipc: Started in network mode [ 386.258338][ T9296] tipc: Node identity 12575ca333d4, cluster identity 4711 [ 386.283345][ T9296] tipc: Enabled bearer , priority 0 [ 386.322198][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.350297][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.422918][ T9189] device bridge_slave_1 entered promiscuous mode [ 386.498037][ T9277] tipc: Resetting bearer [ 386.633192][ T9277] tipc: Disabling bearer [ 386.723767][ T9189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.736032][ T9189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.872098][ T9189] team0: Port device team_slave_0 added [ 386.886806][ T9189] team0: Port device team_slave_1 added [ 387.186017][ T9325] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1013'. [ 387.451380][ T9189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.469250][ T9189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.603300][ T9189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.657859][ T9189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.675910][ T9189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.380031][ T9189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.908185][ T9189] device hsr_slave_0 entered promiscuous mode [ 389.981258][ T9343] loop8: detected capacity change from 0 to 512 [ 389.988251][ T9189] device hsr_slave_1 entered promiscuous mode [ 390.013018][ T9189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.023126][ T9189] Cannot create hsr debugfs directory [ 390.100350][ T9343] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 390.124682][ T9343] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.995725][ T8891] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 391.066300][ T8891] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 391.110526][ T8891] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 391.204127][ T8891] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 391.249432][ T8891] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 391.292233][ T8891] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 391.325259][ T8891] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 391.356540][ T8891] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 391.413349][ T9353] (syz.4.1018,9353,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 391.422424][ T9353] (syz.4.1018,9353,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 391.600073][ T8891] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 391.683289][ T8891] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 392.368401][ T9363] loop0: detected capacity change from 0 to 40427 [ 392.428129][ T9366] Invalid ELF header magic: != ELF [ 392.788407][ T9363] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 392.796606][ T9363] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 392.813288][ T9363] F2FS-fs (loop0): invalid crc value [ 392.926674][ T9363] F2FS-fs (loop0): Found nat_bits in checkpoint [ 392.979843][ T9363] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 392.987443][ T9363] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 393.114392][ T8891] EXT4-fs (loop8): unmounting filesystem. [ 394.444943][ T9189] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 394.476440][ T9189] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 394.574742][ T9189] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 394.624197][ T9189] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 395.773666][ T9189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.432269][ T4283] Bluetooth: hci4: Malformed Event: 0x02 [ 396.609390][ T9394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.902258][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.916951][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.948552][ T9189] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.987825][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.016933][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.053262][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.060565][ T5622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.179839][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.192870][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 397.202804][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.214273][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 397.222635][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 397.231910][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 397.243260][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.350193][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.361993][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.539599][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.546995][ T5622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.973935][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.993207][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 398.025003][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.044938][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.085222][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.119207][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.129012][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.141200][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.151125][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.164723][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 398.170809][ T9189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.312233][ T9189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.284991][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 399.436317][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.459018][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 401.364520][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 402.321215][ T9458] netlink: 'syz.0.1040': attribute type 1 has an invalid length. [ 402.801448][ T9480] xt_connbytes: Forcing CT accounting to be enabled [ 402.808822][ T9480] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 402.821007][ T9480] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 402.975820][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'. [ 403.534804][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 404.078896][ T9412] chnl_net:caif_netlink_parms(): no params data found [ 404.429718][ T9506] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1048'. [ 405.007483][ T9505] loop4: detected capacity change from 0 to 64 [ 405.258500][ T9497] syz.4.1047: attempt to access beyond end of device [ 405.258500][ T9497] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 405.273994][ T9497] Buffer I/O error on dev loop4, logical block 512, async page read [ 405.284732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.304126][ T9497] syz.4.1047: attempt to access beyond end of device [ 405.304126][ T9497] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 405.307687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.325942][ T9497] Buffer I/O error on dev loop4, logical block 56576, async page read [ 405.386524][ T9189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.674655][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 405.711121][ T9412] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.718574][ T9412] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.727596][ T9412] device bridge_slave_0 entered promiscuous mode [ 405.987665][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.005646][ T9412] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.014043][ T9412] device bridge_slave_1 entered promiscuous mode [ 406.118745][ T9412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.089713][ T9412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.752562][ T5620] device hsr_slave_0 left promiscuous mode [ 407.928543][ T5620] device hsr_slave_1 left promiscuous mode [ 407.974853][ T5620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.055480][ T5620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.079735][ T5620] device bridge_slave_1 left promiscuous mode [ 408.104868][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.185308][ T5620] device bridge_slave_0 left promiscuous mode [ 408.191808][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.235902][ T9571] fuse: Bad value for 'fd' [ 408.754506][ T26] audit: type=1326 audit(1785222021.973:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fba39de99 code=0x7ffc0000 [ 408.778446][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.110858][ T26] audit: type=1326 audit(1785222021.973:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fba39de99 code=0x7ffc0000 [ 409.458968][ T26] audit: type=1326 audit(1785222021.973:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f3fba39de99 code=0x7ffc0000 [ 409.576195][ T26] audit: type=1326 audit(1785222021.983:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fba39de99 code=0x7ffc0000 [ 410.898691][ T26] audit: type=1326 audit(1785222021.983:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fba39de99 code=0x7ffc0000 [ 411.407082][ T9592] ip6t_rpfilter: unknown options [ 412.231776][ T26] audit: type=1326 audit(1785222021.983:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f3fba39de99 code=0x7ffc0000 [ 412.298293][ T26] audit: type=1326 audit(1785222021.983:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fba39de99 code=0x7ffc0000 [ 412.384556][ T26] audit: type=1326 audit(1785222021.983:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fba39de99 code=0x7ffc0000 [ 412.454964][ T26] audit: type=1326 audit(1785222021.983:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f3fba39de99 code=0x7ffc0000 [ 412.514510][ T26] audit: type=1326 audit(1785222021.983:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fba39de99 code=0x7ffc0000 [ 413.097812][ T9603] loop4: detected capacity change from 0 to 8 [ 413.266642][ T9603] SQUASHFS error: Unable to read inode 0x11f [ 415.734359][ T5620] team0 (unregistering): Port device team_slave_1 removed [ 415.931949][ T5620] team0 (unregistering): Port device team_slave_0 removed [ 416.562153][ T5620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.205654][ T5620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.768061][ T9660] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 420.373057][ T9662] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 420.403466][ T9662] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 420.434518][ T9662] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 420.443089][ T9662] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 420.461742][ T9662] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 420.474035][ T9662] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 420.490878][ T9662] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 420.516429][ T9662] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 420.525158][ T9662] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 422.202412][ T5620] bond0 (unregistering): Released all slaves [ 422.465182][ T9569] netlink: 'syz.6.1056': attribute type 39 has an invalid length. [ 422.565434][ T9696] loop4: detected capacity change from 0 to 512 [ 422.615612][ T9412] team0: Port device team_slave_0 added [ 422.630030][ T9412] team0: Port device team_slave_1 added [ 422.655841][ T9696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 422.708782][ T9696] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.744783][ T9412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.775056][ T9412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.854520][ T9412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.535645][ T8379] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.549547][ T9412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.563285][ T9412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.609539][ T9412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.626937][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.635192][ T8379] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.653723][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.763543][ T9189] device veth0_vlan entered promiscuous mode [ 423.804904][ T8379] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.836611][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.866489][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.875560][ T8379] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.932836][ T9189] device veth1_vlan entered promiscuous mode [ 423.951623][ T8379] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.976668][ T8379] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.994139][ T8379] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.999792][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.078149][ T9712] xt_connbytes: Forcing CT accounting to be enabled [ 424.085201][ T9712] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 424.114485][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.166383][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 424.259303][ T9412] device hsr_slave_0 entered promiscuous mode [ 424.300916][ T9412] device hsr_slave_1 entered promiscuous mode [ 424.354736][ T8379] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 424.494988][ T9412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.534698][ T9412] Cannot create hsr debugfs directory [ 424.563998][ T8379] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 424.618899][ T8379] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 424.662112][ T9189] device veth0_macvtap entered promiscuous mode [ 424.688612][ T9189] device veth1_macvtap entered promiscuous mode [ 424.735599][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 424.817183][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 424.846675][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.866727][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 425.088136][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 425.122259][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.512379][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.721607][ T9189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.835864][ T4288] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 425.862094][ T4288] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 425.883490][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.894536][ T4288] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 425.907695][ T4288] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 425.915343][ T4288] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 425.923619][ T4288] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 425.952763][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.047468][ T9189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.221313][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.276843][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.361661][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.439165][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 426.978357][ T8379] EXT4-fs (loop4): unmounting filesystem. [ 426.991040][ T9189] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.022264][ T9189] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.080395][ T9189] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.298614][ T9189] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.901489][ T5620] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.004975][ T5623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.012872][ T5623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.034773][ T4283] Bluetooth: hci7: command 0x0409 tx timeout [ 428.137139][ T5620] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.174660][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 428.565293][ T5620] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.899467][ T5618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.936878][ T5618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.006857][ T5620] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.051352][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 429.786125][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.819494][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.831319][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.849640][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.861120][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 429.871937][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 430.084547][ T4283] Bluetooth: hci7: command 0x041b tx timeout [ 431.341036][ T9756] netlink: 20 bytes leftover after parsing attributes in process `syz.5.986'. [ 431.367087][ T9412] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 431.391111][ T9719] chnl_net:caif_netlink_parms(): no params data found [ 431.427566][ T9412] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 431.528439][ T9412] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 431.671256][ T9412] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 431.838792][ T9773] Cannot find del_set index 0 as target [ 432.390111][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 432.398735][ T4283] Bluetooth: hci7: command 0x040f tx timeout [ 432.682224][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.147173][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.197973][ T9719] device bridge_slave_0 entered promiscuous mode [ 433.209051][ T5620] tipc: Left network mode [ 433.218028][ T9719] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.249814][ T9719] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.265991][ T9719] device bridge_slave_1 entered promiscuous mode [ 434.276141][ T9784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.484673][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 434.486447][ T4288] Bluetooth: hci7: command 0x0419 tx timeout [ 434.666768][ T9719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.689712][ T9719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.843453][ T9412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.902648][ T9801] loop0: detected capacity change from 0 to 512 [ 435.194081][ T9801] EXT4-fs (loop0): orphan cleanup on readonly fs [ 435.327253][ T9801] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1090: invalid indirect mapped block 28777 (level 2) [ 435.334866][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 435.385441][ T9801] EXT4-fs (loop0): 1 truncate cleaned up [ 435.391211][ T9801] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 435.425824][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.715103][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 436.931751][ T9719] team0: Port device team_slave_0 added [ 437.037106][ T9412] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.277926][ T9719] team0: Port device team_slave_1 added [ 437.541400][ T9751] chnl_net:caif_netlink_parms(): no params data found [ 437.716622][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 437.745160][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.843144][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.850549][ T4735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.337593][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 438.382707][ T9719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.412352][ T9719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.633201][ T9719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.724611][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 438.933289][ T9719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.951609][ T9719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.000857][ T9719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.035032][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 439.055682][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 439.074939][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.082076][ T4735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.100003][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 439.239192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 439.306130][ T9751] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.313276][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.343204][ T9751] device bridge_slave_0 entered promiscuous mode [ 439.366041][ T6858] EXT4-fs (loop0): unmounting filesystem. [ 439.813517][ T9719] device hsr_slave_0 entered promiscuous mode [ 439.858247][ T9719] device hsr_slave_1 entered promiscuous mode [ 439.957042][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.966437][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.987964][ T9719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.012187][ T9719] Cannot create hsr debugfs directory [ 440.062841][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 440.101342][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 440.125362][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 440.142396][ T9751] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.161216][ T9751] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.185615][ T9751] device bridge_slave_1 entered promiscuous mode [ 440.267919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.301915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.401469][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 440.430297][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.440908][ T9751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.554140][ T9751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.675080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 440.683734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 440.708218][ T9412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 440.740592][ T5620] device hsr_slave_0 left promiscuous mode [ 440.758426][ T5620] device hsr_slave_1 left promiscuous mode [ 440.772430][ T5620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.783668][ T5620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.805371][ T5620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.813030][ T5620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.823432][ T5620] device bridge_slave_1 left promiscuous mode [ 440.832492][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.852465][ T5620] device bridge_slave_0 left promiscuous mode [ 440.862560][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.945058][ T5620] device veth1_macvtap left promiscuous mode [ 440.951170][ T5620] device veth0_macvtap left promiscuous mode [ 440.983149][ T5620] device veth1_vlan left promiscuous mode [ 440.989257][ T5620] device veth0_vlan left promiscuous mode [ 442.076445][ T5620] team0 (unregistering): Port device team_slave_1 removed [ 442.139301][ T5620] team0 (unregistering): Port device team_slave_0 removed [ 442.194837][ T5620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.253335][ T5620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.711919][ T5620] bond0 (unregistering): Released all slaves [ 442.814368][ T9751] team0: Port device team_slave_0 added [ 442.850495][ T9751] team0: Port device team_slave_1 added [ 442.963697][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.975765][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.054802][ T9751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.075292][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.082361][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.109700][ T9751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.328102][ T9751] device hsr_slave_0 entered promiscuous mode [ 443.365559][ T9751] device hsr_slave_1 entered promiscuous mode [ 443.382765][ T9751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.407131][ T9751] Cannot create hsr debugfs directory [ 443.496522][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 443.504004][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 443.569199][ T9412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.247977][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 444.262229][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 444.339062][ T9412] device veth0_vlan entered promiscuous mode [ 444.374606][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 444.383206][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 444.400189][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 444.412808][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 444.430453][ T9719] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 444.451037][ T9719] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 444.470834][ T9719] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 444.492090][ T9412] device veth1_vlan entered promiscuous mode [ 444.513661][ T9719] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 444.604812][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 444.624072][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 444.633960][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 444.657844][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.681501][ T9412] device veth0_macvtap entered promiscuous mode [ 444.716221][ T9412] device veth1_macvtap entered promiscuous mode [ 444.749230][ T9751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.778629][ T9751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.790106][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.802098][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.814757][ T9412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.832786][ T9719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.850917][ T9751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.863550][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 444.872285][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 444.892031][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 444.904743][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.916366][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.927582][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.940662][ T9412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.965958][ T9751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.980505][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 444.999085][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.015437][ T9719] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.025815][ T9412] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.035035][ T9412] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.045966][ T9412] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.062305][ T9412] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.090675][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.108572][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.194155][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.203972][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.227283][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.234478][ T5620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.251587][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.263061][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.282453][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.289652][ T5620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.311319][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.322595][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.404738][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.412906][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.438753][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.456998][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.472931][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.483953][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.503382][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.514101][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.542719][ T9719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.580057][ T9719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.593646][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.608546][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.667140][ T9751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.707103][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.724913][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.755103][ T9751] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.762490][ T5616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.781198][ T5616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.807792][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 445.844986][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.853908][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.875765][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.883031][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.892674][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.902085][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.911249][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.918508][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.940829][ T5618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.949380][ T5618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.960790][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.970093][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.981742][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 445.990858][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.036270][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.060897][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.095343][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.137594][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.173387][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.202689][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.228674][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.993959][ T9938] rtc_cmos 00:00: Alarms can be up to one day in the future [ 448.660725][ T9937] device syzkaller0 entered promiscuous mode [ 448.742497][ T9719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.841765][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.865757][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.885404][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 448.912802][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.014151][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 449.553564][ T9961] Cannot find del_set index 0 as target [ 452.042468][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 452.131680][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.193723][ T9719] device veth0_vlan entered promiscuous mode [ 453.277101][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 453.318900][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.765374][ T9989] loop0: detected capacity change from 0 to 8192 [ 453.938081][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 454.115452][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 454.132688][ T9719] device veth1_vlan entered promiscuous mode [ 454.204696][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 454.212262][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 454.270260][ T9751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.285691][ T9992] device syzkaller0 entered promiscuous mode [ 454.365786][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 454.431766][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 454.506643][ T9719] device veth0_macvtap entered promiscuous mode [ 454.651326][ T9999] tipc: Started in network mode [ 454.656561][ T9999] tipc: Node identity 8a3ab9e1a075, cluster identity 4711 [ 454.673287][ T9999] tipc: Enabled bearer , priority 0 [ 454.875256][ T9719] device veth1_macvtap entered promiscuous mode [ 454.912480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 454.931925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 454.985504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 455.002237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.040074][ T9991] tipc: Resetting bearer [ 455.102049][ T9991] tipc: Disabling bearer [ 455.146983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 455.177042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.197434][ T9751] device veth0_vlan entered promiscuous mode [ 455.206216][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.231233][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.314489][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.359907][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.416116][ T9719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.351597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.695374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.734997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.792364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.830715][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.854552][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.884500][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.919322][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.931611][ T9719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.944265][ T9751] device veth1_vlan entered promiscuous mode [ 457.008676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 457.014034][T10020] loop5: detected capacity change from 0 to 4096 [ 457.018628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.090007][ T9719] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.165002][ T9719] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.211184][T10020] EXT4-fs: Ignoring removed orlov option [ 457.495848][ T9719] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.585832][T10020] EXT4-fs (loop5): Test dummy encryption mode enabled [ 457.614990][T10020] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 457.634207][ T9719] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.548521][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.559315][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.419991][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 459.436619][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 459.930523][ T9751] device veth0_macvtap entered promiscuous mode [ 460.021831][ T5612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.049711][ T5612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.085533][ T9751] device veth1_macvtap entered promiscuous mode [ 460.121587][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 460.148893][T10046] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 460.193408][T10050] loop7: detected capacity change from 0 to 512 [ 460.217350][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.230732][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.257129][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.265848][T10050] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 460.771820][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.796084][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.828125][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.855745][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.866899][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.889136][ T9189] EXT4-fs (loop5): unmounting filesystem. [ 460.904060][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.024656][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 461.032754][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.063009][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.100919][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.128807][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.163261][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.198178][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.224730][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.339769][T10071] futex_wake_op: syz.0.1118 tries to shift op by 144; fix this program [ 461.356983][T10071] loop0: detected capacity change from 0 to 256 [ 462.025113][T10071] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 462.084641][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 462.084656][ T26] audit: type=1800 audit(1785222075.383:56): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1118" name="file1" dev="loop0" ino=1048681 res=0 errno=0 [ 462.244820][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.374683][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.415775][ T9751] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.467323][ T9751] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.507998][ T9751] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.516892][ T9751] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.658566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.698353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.936224][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.004645][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.152498][T10083] device syzkaller0 entered promiscuous mode [ 463.463244][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 463.931072][ T5616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.975959][ T5616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.017964][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 466.569073][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.586625][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.745513][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.785217][T10108] device bridge_slave_0 left promiscuous mode [ 466.828962][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.775205][T10108] device bridge_slave_1 left promiscuous mode [ 467.854742][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.916044][T10108] bond0: (slave bond_slave_0): Releasing backup interface [ 467.931451][T10117] loop0: detected capacity change from 0 to 512 [ 467.960481][T10117] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 467.988699][T10108] bond0: (slave bond_slave_1): Releasing backup interface [ 468.622023][T10108] team0: Port device team_slave_0 removed [ 468.691014][T10108] team0: Port device team_slave_1 removed [ 468.715580][T10108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.764637][T10108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.797776][T10108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.814856][T10108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.860280][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 469.204167][T10138] ntfs3: loop7: try to read out of volume at offset 0x0 [ 469.725510][T10140] loop5: detected capacity change from 0 to 128 [ 469.735775][T10140] EXT4-fs (loop5): Test dummy encryption mode enabled [ 469.823879][T10140] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 469.846969][T10140] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 470.920905][ T9189] EXT4-fs (loop5): unmounting filesystem. [ 471.062663][T10099] bond0 (unregistering): Released all slaves [ 471.096592][T10156] block device autoloading is deprecated and will be removed. [ 473.092690][T10179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.115582][T10185] loop1: detected capacity change from 0 to 32768 [ 474.144829][T10185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1137 (10185) [ 474.190093][T10185] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 474.200501][T10185] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 474.209494][T10185] BTRFS info (device loop1): turning on sync discard [ 474.216352][T10185] BTRFS info (device loop1): using free space tree [ 474.371732][T10205] loop0: detected capacity change from 0 to 256 [ 474.385690][T10205] exfat: Deprecated parameter 'utf8' [ 474.405618][T10205] exFAT-fs (loop0): bogus number of FAT structure [ 474.413164][T10185] BTRFS info (device loop1): enabling ssd optimizations [ 474.423766][T10205] exFAT-fs (loop0): failed to read boot sector [ 474.430594][T10205] exFAT-fs (loop0): failed to recognize exfat type [ 474.631427][T10213] loop5: detected capacity change from 0 to 512 [ 475.378425][ T26] audit: type=1800 audit(1785222087.963:57): pid=10185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1137" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 475.471641][ T27] INFO: task syz.2.891:8641 blocked for more than 143 seconds. [ 475.661221][ T27] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=36580 recv=15484 n=-1 (errno 104: Connection reset by peer) [ 475.858699][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.907883][T10213] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 475.964306][ T27] task:syz.2.891 state:D stack:26064 pid:8641 ppid:7445 flags:0x00004004 [ 476.409945][ T27] Call Trace: [ 476.413283][ T27] [ 476.573219][ T27] __schedule+0x107f/0x4030 [ 476.786449][ T27] ? __sched_text_start+0x8/0x8 [ 476.965197][ T27] ? __mutex_trylock_common+0x86/0x260 [ 476.970839][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 477.014534][ T27] schedule+0xb9/0x180 [ 477.018769][ T27] schedule_preempt_disabled+0xf/0x20 [ 477.051322][T10234] 0x64746d2f7665642f-0x64746d2f76656452 : "" [ 477.058190][T10234] mtd: partition "" is out of reach -- disabled [ 477.070194][ T27] __mutex_lock+0x548/0xae0 [ 477.094673][ T27] ? __mutex_lock+0x3ba/0xae0 [ 477.099444][ T27] ? nfsd_svc+0x61/0xab0 [ 477.103797][ T27] ? mutex_lock_nested+0x10/0x10 [ 477.174547][ T27] ? net_generic+0x1e/0x240 [ 477.185459][ T27] ? net_generic+0x1e/0x240 [ 477.193551][ T27] nfsd_svc+0x61/0xab0 [ 477.199597][T10234] ftl_cs: FTL header not found. [ 477.234561][ T27] ? qword_get+0x5a5/0x640 [ 477.239196][ T27] write_threads+0x2ea/0x350 [ 477.243823][ T27] ? write_unlock_fs+0x1f0/0x1f0 [ 477.264981][ T27] ? __might_fault+0xc2/0x120 [ 477.270301][ T27] ? _copy_from_user+0x10b/0x170 [ 477.285485][ T27] ? simple_transaction_get+0x119/0x140 [ 477.291197][ T27] nfsctl_transaction_write+0x105/0x150 [ 477.351376][ T27] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 477.357478][ T27] vfs_write+0x2dc/0x9a0 [ 477.361953][ T27] ? file_end_write+0x250/0x250 [ 477.384583][ T27] ? __fget_files+0x28/0x460 [ 477.389381][ T27] ? __fget_files+0x3fc/0x460 [ 477.394104][ T27] ? __fdget_pos+0x2ae/0x360 [ 477.399196][ T27] ? ksys_write+0x70/0x260 [ 477.403718][ T27] ksys_write+0x14d/0x260 [ 477.414516][ T27] ? __ia32_sys_read+0x80/0x80 [ 477.419394][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 477.434612][ T27] do_syscall_64+0x4c/0xa0 [ 477.439256][ T27] ? clear_bhb_loop+0x60/0xb0 [ 477.444020][ T27] ? clear_bhb_loop+0x60/0xb0 [ 477.450196][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.458363][ T27] RIP: 0033:0x7f4b7bb9de99 [ 477.462876][ T27] RSP: 002b:00007f4b7cb0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 477.480914][ T27] RAX: ffffffffffffffda RBX: 00007f4b7be26090 RCX: 00007f4b7bb9de99 [ 477.491234][ T27] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000006 [ 477.504746][ T27] RBP: 00007f4b7bc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 477.524604][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.532813][ T27] R13: 00007f4b7be26128 R14: 00007f4b7be26090 R15: 00007ffc75561098 [ 477.541302][ T27] [ 477.882279][ T27] [ 477.882279][ T27] Showing all locks held in the system: [ 477.890108][ T27] 3 locks held by kworker/0:0/7: [ 477.933088][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 477.944991][ T27] #1: ffffc900000c7d00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 477.960682][ T27] #2: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 477.988720][ T27] 1 lock held by rcu_tasks_kthre/12: [ 477.994064][ T27] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 478.010046][ T27] 1 lock held by rcu_tasks_trace/13: [ 478.015487][ T27] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 478.026521][ T27] 1 lock held by khungtaskd/27: [ 478.031551][ T27] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 478.041557][ T27] 3 locks held by kworker/u4:3/47: [ 478.048561][ T27] 3 locks held by kworker/0:2/126: [ 478.053714][ T27] #0: ffff88814d35bd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 478.065215][ T27] #1: ffffc90002627d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 478.078515][ T27] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 478.104188][ T27] 2 locks held by kworker/0:3/3599: [ 478.109536][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 478.121818][ T27] #1: ffffc9000eb3fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 478.133425][ T27] 2 locks held by getty/4027: [ 478.141218][ T27] #0: ffff88802fcdf098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 478.153238][ T27] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 478.163572][ T27] 3 locks held by kworker/u4:10/4736: [ 478.169087][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 478.180432][ T27] #1: ffffc900034d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 478.191028][ T27] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 478.200299][ T27] 3 locks held by kworker/1:9/7594: [ 478.205741][ T27] #0: ffff88814d35bd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 478.216895][ T27] #1: ffffc90004917d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 478.230150][ T27] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 478.239783][ T27] 3 locks held by syz.2.891/8636: [ 478.244901][ T27] #0: ffff888078001c68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 478.255480][ T27] #1: ffff888049640460 (sb_writers#37){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 478.264630][ T27] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 478.273721][ T27] 3 locks held by syz.2.891/8641: [ 478.284500][ T27] #0: ffff8880756fdc68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 478.293815][ T27] #1: ffff888049640460 (sb_writers#37){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 478.312666][ T27] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 478.322758][ T27] 2 locks held by syz.3.963/9019: [ 478.329799][ T27] #0: ffff8880292ec0e0 (&type->s_umount_key#112){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 478.342620][ T27] #1: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4f/0x1a0 [ 478.357638][ T27] 3 locks held by syz.1.1137/10185: [ 478.362880][ T27] #0: ffff888036bf14b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 478.382662][ T27] #1: ffff888036bf0428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1120 [ 478.393846][ T27] #2: ffffffff8deb9d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 478.404765][ T27] 2 locks held by syz.0.1139/10200: [ 478.409988][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 478.419446][ T27] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 478.430458][ T27] 3 locks held by syz.5.1140/10213: [ 478.435766][ T27] #0: ffff88804abe14b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 478.449883][ T27] #1: ffff88804abe0428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1120 [ 478.462100][ T27] #2: ffffffff8deb9d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 478.478581][ T27] 3 locks held by syz.9.1141/10222: [ 478.483835][ T27] #0: ffff888063e414b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 478.493866][ T27] #1: ffff888063e40428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1120 [ 478.503630][ T27] #2: ffffffff8deb9d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 478.513796][ T27] 1 lock held by syz.7.1142/10233: [ 478.519201][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 478.528838][ T27] 1 lock held by sed/10254: [ 478.538312][ T27] [ 478.540679][ T27] ============================================= [ 478.540679][ T27] [ 478.553589][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1142'. [ 478.583580][ T27] NMI backtrace for cpu 0 [ 478.587972][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 478.595183][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 478.605350][ T27] Call Trace: [ 478.608636][ T27] [ 478.611576][ T27] dump_stack_lvl+0x188/0x24e [ 478.616278][ T27] ? irq_work_queue+0xb8/0x140 [ 478.621163][ T27] ? show_regs_print_info+0x12/0x12 [ 478.626481][ T27] ? load_image+0x410/0x410 [ 478.631002][ T27] ? vprintk_emit+0x59f/0x6a0 [ 478.635813][ T27] ? printk_sprint+0x460/0x460 [ 478.640588][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 478.645568][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 478.651834][ T27] ? _printk+0xda/0x130 [ 478.656012][ T27] ? load_image+0x410/0x410 [ 478.660516][ T27] ? load_image+0x410/0x410 [ 478.665019][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 478.671089][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 478.677228][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 478.683218][ T27] watchdog+0xf0e/0xf50 [ 478.687376][ T27] ? watchdog+0x1ed/0xf50 [ 478.691707][ T27] kthread+0x29d/0x330 [ 478.695856][ T27] ? hungtask_pm_notify+0x40/0x40 [ 478.700921][ T27] ? kthread_blkcg+0xd0/0xd0 [ 478.705524][ T27] ret_from_fork+0x1f/0x30 [ 478.709987][ T27] [ 478.713942][ T27] Sending NMI from CPU 0 to CPUs 1: [ 478.719479][ C1] NMI backtrace for cpu 1 [ 478.719490][ C1] CPU: 1 PID: 4338 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 478.719503][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 478.719512][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 478.719632][ C1] RIP: 0010:mark_lock+0x9c/0x320 [ 478.719659][ C1] Code: 89 c7 41 81 e7 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 40 f2 b0 90 be 08 00 00 00 e8 0c af 6e 00 4c 0f a3 3d 04 3f 4c 0f <73> 10 4b 8d 04 7f c1 e0 06 4c 8d b8 00 71 49 90 eb 24 48 c7 c0 40 [ 478.719670][ C1] RSP: 0018:ffffc90004766fc0 EFLAGS: 00000057 [ 478.719681][ C1] RAX: 0000000000000001 RBX: ffff88807e205a00 RCX: ffffffff8164b334 [ 478.719691][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b0f300 [ 478.719700][ C1] RBP: 0000000000000002 R08: ffffffff90b0f307 R09: 1ffffffff2161e60 [ 478.719709][ C1] R10: dffffc0000000000 R11: fffffbfff2161e61 R12: 0000000000000004 [ 478.719718][ C1] R13: dffffc0000000000 R14: ffff88807e206580 R15: 0000000000000601 [ 478.719728][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 478.719739][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.719748][ C1] CR2: 00007f463c386a10 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 478.719760][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.719768][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.719777][ C1] Call Trace: [ 478.719781][ C1] [ 478.719788][ C1] lockdep_hardirqs_on_prepare+0x237/0x7c0 [ 478.719806][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 478.719822][ C1] ? lock_chain_count+0x20/0x20 [ 478.719838][ C1] ? debug_object_activate+0x4f0/0x4f0 [ 478.719888][ C1] trace_hardirqs_on+0x34/0x40 [ 478.719934][ C1] _raw_spin_unlock_irqrestore+0x82/0x120 [ 478.719951][ C1] ? _raw_spin_unlock+0x40/0x40 [ 478.719963][ C1] ? alloc_object+0x1c/0x640 [ 478.719976][ C1] ? __stack_depot_save+0x35/0x480 [ 478.720016][ C1] ? unwind_next_frame+0x1719/0x1fd0 [ 478.720040][ C1] debug_object_activate+0x2f2/0x4f0 [ 478.720055][ C1] kvfree_call_rcu+0xae/0x890 [ 478.720073][ C1] ? worker_thread+0xaf5/0x12a0 [ 478.720089][ C1] ? rcu_leak_callback+0x10/0x10 [ 478.720105][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 478.720121][ C1] cfg80211_update_known_bss+0x184/0xb60 [ 478.720138][ C1] cfg80211_bss_update+0x156/0x21a0 [ 478.720154][ C1] ? __kmem_cache_alloc_node+0x19d/0x270 [ 478.720176][ C1] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 478.720192][ C1] ? rcu_is_watching+0x11/0xa0 [ 478.720207][ C1] ? cfg80211_inform_bss_frame_data+0x8b0/0x1390 [ 478.720224][ C1] cfg80211_inform_bss_frame_data+0xa77/0x1390 [ 478.720245][ C1] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 478.720259][ C1] ? __lock_acquire+0x138a/0x7c40 [ 478.720281][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 478.720300][ C1] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 478.720360][ C1] ieee80211_bss_info_update+0x6ef/0xbf0 [ 478.720377][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 478.720395][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 478.720412][ C1] ? ieee80211_vif_get_shift+0x22b/0x290 [ 478.720455][ C1] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 478.720473][ C1] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 478.720491][ C1] ? verify_lock_unused+0x140/0x140 [ 478.720512][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 478.720530][ C1] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 478.720550][ C1] ? mark_lock+0x94/0x320 [ 478.720566][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 478.720582][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 478.720598][ C1] ? lock_chain_count+0x20/0x20 [ 478.720612][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 478.720629][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 478.720643][ C1] ? skb_dequeue+0x120/0x150 [ 478.720669][ C1] ieee80211_iface_work+0x72c/0xc70 [ 478.720711][ C1] cfg80211_wiphy_work+0x224/0x260 [ 478.720728][ C1] ? process_one_work+0x7b4/0x1160 [ 478.720742][ C1] process_one_work+0x8ab/0x1160 [ 478.720761][ C1] ? worker_detach_from_pool+0x240/0x240 [ 478.720776][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 478.720789][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 478.720804][ C1] ? wq_worker_running+0x97/0x190 [ 478.720853][ C1] worker_thread+0xaf5/0x12a0 [ 478.720876][ C1] kthread+0x29d/0x330 [ 478.720887][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 478.720900][ C1] ? kthread_blkcg+0xd0/0xd0 [ 478.720912][ C1] ret_from_fork+0x1f/0x30 [ 478.720932][ C1] [ 479.278520][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 479.285454][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 479.292724][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 479.302775][ T27] Call Trace: [ 479.306046][ T27] [ 479.308969][ T27] dump_stack_lvl+0x188/0x24e [ 479.313649][ T27] ? memcpy+0x3c/0x60 [ 479.317704][ T27] ? show_regs_print_info+0x12/0x12 [ 479.322911][ T27] ? load_image+0x410/0x410 [ 479.327418][ T27] panic+0x2d3/0x710 [ 479.331306][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 479.336941][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 479.341438][ T27] ? load_image+0x410/0x410 [ 479.345933][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 479.352085][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 479.358244][ T27] watchdog+0xf4d/0xf50 [ 479.362398][ T27] ? watchdog+0x1ed/0xf50 [ 479.366727][ T27] kthread+0x29d/0x330 [ 479.370785][ T27] ? hungtask_pm_notify+0x40/0x40 [ 479.375805][ T27] ? kthread_blkcg+0xd0/0xd0 [ 479.380387][ T27] ret_from_fork+0x1f/0x30 [ 479.384806][ T27] [ 479.387959][ T27] Kernel Offset: disabled [ 479.392273][ T27] Rebooting in 86400 seconds..