last executing test programs: 8m58.839917788s ago: executing program 4 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r4) 8m55.792181883s ago: executing program 4 (id=396): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x0, 0x5}, 0x28) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000000c0)={0x7, 0x8, 0x0, 0x16, 0x4, 0xc0, 0x5, 0x14c, 0x1}) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6d54372a9e6f4a1b7d3c92c30a8d877a191d62d854466111cfdf75bda8e16921c4f5bdf18e8fa46161dc579987ca7c5a569d9dbfb85bee1d69fd781666cb43652c9cd50de129f87b878dffd6e66636741ffcae9afc12fdc3cf2a9782c5a0c453f", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m42.967123211s ago: executing program 4 (id=415): inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000002) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap$panthor(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x1000007, 0x10, 0xffffffffffffffff, 0x6) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) close_range(0xffffffffffffffff, r1, 0x2000000000000) 8m39.409238589s ago: executing program 4 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 8m38.047787962s ago: executing program 4 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r5 = fanotify_init(0xef0, 0x2) readv(r5, &(0x7f0000000500)=[{&(0x7f0000000440)=""/144, 0x90}], 0x1) fanotify_mark(r5, 0x105, 0x40009965, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) r6 = openat(r4, &(0x7f0000000100)='./proc_mnt/irq/25/smp_affinity\x00', 0x81, 0x4) write(r6, &(0x7f0000000300)='1', 0x1) 8m35.369149339s ago: executing program 4 (id=428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() sync() ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff61", @ANYRES32=r3], 0x3c}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bind$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) 8m20.160820355s ago: executing program 32 (id=428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() sync() ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff61", @ANYRES32=r3], 0x3c}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bind$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) 7m48.613215555s ago: executing program 0 (id=485): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8000000000000000290000000b00000016"], 0xb8}, 0x3400c8d4) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000040)=0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 7m44.197598154s ago: executing program 0 (id=493): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001"], 0x44}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 7m43.007686483s ago: executing program 0 (id=495): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x63, 0x30, 0x30, 0x38, 0x31, 0x30, 0x30, 0x30, 0x30, 0x66, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x62, 0x63, 0x30, 0x66, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x33, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x63, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabb0400eeff00112233445566778899aabbccddeeff00112233445566318599aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x33, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x31, 0x55, 0x30, 0x30, 0x34, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "0011223300112233445566778899aabbccddeeff00112233445566778899aa00000000ff00000000005566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 7m42.117424215s ago: executing program 0 (id=497): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sync_file_range(r1, 0x2, 0x2, 0x4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00060003"], 0x28}}, 0x0) r3 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) shmdt(r3) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, &(0x7f0000000000), &(0x7f0000000080)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x1, r5, 0x80000}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 7m41.005074483s ago: executing program 0 (id=499): socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000010000000000000000000000711817000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x10, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x1000}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@dax}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@resgid}, {@nodioread_nolock}, {@data_writeback}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x524, &(0x7f00000006c0)="$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") ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)) 7m39.721446724s ago: executing program 0 (id=500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m24.370755624s ago: executing program 33 (id=500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m46.478757324s ago: executing program 2 (id=950): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m45.364525421s ago: executing program 2 (id=953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@utf8}, {@fat=@dos1xfloppy}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@fat=@check_normal}, {@shortname_win95}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@shortname_winnt}, {@numtail}, {@fat=@discard}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}]}, 0xfd, 0x2c6, &(0x7f00000010c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x74, r3, 0x800, 0x20}, 0x74}, 0x1, 0x0, 0x0, 0x404c844}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x2005, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6b7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 2m43.143047216s ago: executing program 2 (id=956): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) r2 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48ba", 0xa0) 2m38.506881251s ago: executing program 2 (id=965): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r4, &(0x7f00000008c0)="7a1f", 0x2) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32], 0x4c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m37.086071216s ago: executing program 2 (id=969): execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc", 0x99}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, 0x0, &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m29.952067853s ago: executing program 2 (id=973): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_NAME(0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x4, 0x1) getdents64(r3, 0xffffffffffffffff, 0x43) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) writev(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffff"], 0xd) 2m28.534024728s ago: executing program 34 (id=973): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_NAME(0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x4, 0x1) getdents64(r3, 0xffffffffffffffff, 0x43) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) writev(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffff"], 0xd) 16.720917056s ago: executing program 1 (id=1211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet(0xa, 0x2, 0xffffffff) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001880)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x0, 0x11e0, 0x98, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'wg0\x00', {}, {}, 0x0, 0x2}, 0x287, 0x1108, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz1\x00', 0xfffffffd, {0x4000000000000000}}}, @common=@unspec=@rateest={{0x68}, {'batadv0\x00', 'nicvf0\x00', 0xa, 0x2, 0x1ff, 0x80000001, 0x6, 0xfff, {0xff}, {0x7fffffff}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8000000008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000480)=""/4090, 0x1001) setreuid(0xee00, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 16.053013703s ago: executing program 6 (id=1212): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f28", 0x9d) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 15.808648269s ago: executing program 3 (id=1214): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f28", 0x9d) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 14.574757949s ago: executing program 6 (id=1216): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000300)="3590a5adc3d6102b705b69345f8726", 0xfffffffffffffff0, 0x8000c61) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0xfffffffffffffffe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') lseek(r6, 0x80000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x30}, 0x1, 0x11, 0x0, 0x20000000}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xd4422, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="210329bd5600fbdbdf250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 14.435973173s ago: executing program 3 (id=1217): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48ba", 0xa0) 13.36063161s ago: executing program 6 (id=1218): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r5, &(0x7f0000001000), 0x0, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4b) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="719089bbe10c5c9b9ca4d2b606003d6831896da05fa6b6c8448123714abb4f5fc4ed5e185551a678577a51ad1e43d315aef4a2ca5003ab862f744407693658fa6a23bf9f2973f646c6bd398a169521cc6ec59c4931617765f9674d0454e39b28aee5e71cf139fd152eac64ef74020b8bf100640a", 0x74) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0xfffffffffffffdaf) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0x7fffffff}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0x10003) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0xfffffffc, 0x1000, 0x8000}) bind$bt_rfcomm(r8, &(0x7f0000000180)={0x1f, @any, 0xd}, 0xa) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000100)=0x1) 12.336914795s ago: executing program 6 (id=1219): futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) r0 = memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(0x0, 0x149800, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000000c0)) io_uring_enter(r3, 0x7c65, 0xa334, 0x1, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000001040)=0x7) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000003c0)={0x2, 0x0, 0x8, 0x9, 0x6, 0x3}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000021c0)="$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") r9 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) dup(r8) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r10, 0x0, 0x0}, 0x10) lseek(r0, 0xff7ffffffffffff8, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 9.883117025s ago: executing program 7 (id=1223): mount$9p_virtio(0x0, 0x0, 0x0, 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x10000, 0xcf) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETS(r1, 0x40384708, 0x0) 9.792660158s ago: executing program 3 (id=1224): fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1e3, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0xb, 0x20}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 9.752986959s ago: executing program 5 (id=1225): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f28", 0x9d) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 8.678813505s ago: executing program 7 (id=1226): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48ba", 0xa0) 8.175904127s ago: executing program 3 (id=1227): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f28", 0x9d) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 8.175342387s ago: executing program 1 (id=1228): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f28", 0x9d) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 8.161474198s ago: executing program 5 (id=1229): io_setup(0x8, &(0x7f00000000c0)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x17, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000440)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f00000001c0)={0x3, {"3ada7c5c68c529135960daeb7925ff28", "6ed067463537f9ea0b798faf3a83a56e", "2c5a3e26b8daf9c50906bbb2f61fd172"}, 0x5ed, 0x7}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) close(0xffffffffffffffff) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x1, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) 7.171946723s ago: executing program 1 (id=1230): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = epoll_create1(0x80000) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, 0x0) 6.284061625s ago: executing program 7 (id=1231): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000080)={r4, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000000c0)={r5, 0x1, r3, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={r5, 0x5, 0x4000003}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)="1dc577b5af4a180f2ef97031612900359c", 0x11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008114) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[], 0x60}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) 6.172029847s ago: executing program 6 (id=1232): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f28", 0x9d) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 6.136281168s ago: executing program 3 (id=1233): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8a100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000073, 0x0, 0x8001}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@my=0x0, 0xffffffff}, 0x1, 0x2, 0x1010002}) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="92cb5a64a5285cbe1335418c53313893f59608018b448ac2f94f7d29de1572308705204f3b9bd13fb8c104226614ad2b44701aa2e438c8dab648f36331348074a389a5f3b1e07e4ed47c7e4e76fb83724d15e8471d711d42d7638688c769d22d157b394c75d22e49396ef455dc06782f7b991ada2e1201847dbfbfb2bc003e95907a8959ecb2b44a6aa4a1bafafb58551402ab9219b881047616b1aba7440700b7efb851da1ee9d2caa9a588571c479337705335d6231790dc8610caed2271a0dc98ca17c7346ec4ac89aa84173ec3b2f2dffa5ec6d2f8da82893d87c4b96be1", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f00000001c0), 0x202000, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r8 = dup(r7) write$binfmt_aout(r8, 0x0, 0xffffffdb) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 5.580882892s ago: executing program 5 (id=1234): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48ba", 0xa0) 5.504035754s ago: executing program 1 (id=1235): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) r2 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48ba", 0xa0) 4.980338026s ago: executing program 7 (id=1236): socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fea000000071131a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x7}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40006) 4.883309419s ago: executing program 5 (id=1237): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x1) write$cgroup_int(r4, &(0x7f0000000000), 0x12) 4.86551069s ago: executing program 6 (id=1238): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xff}, 0x1c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x9fc5}, @in6={0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x23e}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0x28, @remote, 0xffff8001}], 0x80) r3 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x1, 0x301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x10001, 0x0, "5a77bd318786aeb202cccdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21719e169a596e5fc008daefba68f6222103472bc55704cd2ccb1eaa726615380fe65a6a0a72e19c2b60bd6276fd8bb600000000000000ff3ded22c87eb2beb437bb192c9d06ea6ed04984fe5c5ca033dfce0a82575ef14eee686be0fc58e384f9e8bbf599394baea3a9ca1864f0a25d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d9044cf5a130000000000000000000000000000000000000000000000000000000800"}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000002c0)={'nat\x00', 0x0, [0xbec, 0x1, 0x3, 0x7, 0x4c2]}, &(0x7f0000000340)=0x54) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='mounts\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r7, r6, 0x0, 0x7ffffffd) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0xffffffffffffffee, 0x0, 0x1, 0x0, r9}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r5) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4000004) 3.689140798s ago: executing program 7 (id=1239): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000100)={0x3, 0x1, 0x0, 'queue0\x00', 0x7}) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r1}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0x2c) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x1, 0x9605782d338da745) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000024c0)={0x2020}, 0x2020) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x100, 0x1f, 0x1, 0x200, 0x7, 0xfd, 0x3, 0x20000000, 0xa, 0xf7f8, 0x2, 0xb51, 0x10001, 0x6, 0x10001, 0x2, 0xfff, 0xfffffc01, 0x7, 0x401, 0x28000009, 0x3, 0x7, 0x2, 0x48, 0x0, 0x8, 0x423b, 0x2, 0x7, 0x9]}) syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="130100004cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 3.668578829s ago: executing program 1 (id=1240): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f28", 0x9d) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 3.524010523s ago: executing program 5 (id=1241): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f28", 0x9d) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 871.186828ms ago: executing program 1 (id=1242): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) r2 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48ba", 0xa0) 759.996771ms ago: executing program 5 (id=1243): socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) memfd_create(&(0x7f0000000040)='rootmode', 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x40106183, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a541, 0x52) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x8, 0x200, &(0x7f0000000200)="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"}) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) 609.498985ms ago: executing program 3 (id=1244): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f28", 0x9d) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 0s ago: executing program 7 (id=1245): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = epoll_create1(0x80000) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, 0x0) kernel console output (not intermixed with test programs): 501834][ T4357] usb 4-1: media controller created [ 395.514968][ T26] audit: type=1326 audit(1786985165.702:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 397.084935][ T6397] loop1: detected capacity change from 0 to 256 [ 397.103026][ T4288] Bluetooth: hci4: command 0x0405 tx timeout [ 397.149761][ T4357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.163752][ T6397] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 397.735807][ T4357] dvb-usb: bulk message failed: -22 (6/0) [ 397.742252][ T4357] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 397.823075][ T26] audit: type=1326 audit(1786985165.702:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 397.937959][ T4357] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 398.003097][ T26] audit: type=1326 audit(1786985165.702:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 398.191760][ T26] audit: type=1326 audit(1786985165.702:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 398.229696][ T4357] dvb-usb: schedule remote query interval to 150 msecs. [ 399.102497][ T6414] xt_CT: No such helper "snmp_trap" [ 399.212983][ T4357] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 399.293173][ T4357] usb 4-1: USB disconnect, device number 6 [ 399.304449][ T26] audit: type=1326 audit(1786985165.712:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 400.896354][ T4357] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 400.928578][ T26] audit: type=1326 audit(1786985165.712:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 401.204558][ T6432] overlayfs: unrecognized mount option "posixacl" or missing value [ 401.427428][ T26] audit: type=1326 audit(1786985165.712:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 401.628531][ T26] audit: type=1326 audit(1786985165.712:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 401.861534][ T26] audit: type=1326 audit(1786985165.712:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 401.915056][ T26] audit: type=1326 audit(1786985165.712:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 401.961110][ T26] audit: type=1326 audit(1786985165.712:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 403.227972][ T6445] loop1: detected capacity change from 0 to 256 [ 403.244801][ T26] audit: type=1326 audit(1786985165.712:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 403.363811][ T26] audit: type=1326 audit(1786985165.712:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 403.443067][ T26] audit: type=1326 audit(1786985165.712:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 403.564192][ T26] audit: type=1326 audit(1786985165.712:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 406.187223][ T26] audit: type=1326 audit(1786985165.712:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.2.414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f39e0d9 code=0x7ffc0000 [ 406.487654][ T6456] loop1: detected capacity change from 0 to 40427 [ 406.504108][ T6456] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 406.511887][ T6456] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 406.641512][ T6459] loop0: detected capacity change from 0 to 8 [ 408.111902][ T6456] F2FS-fs (loop1): invalid crc value [ 408.151534][ T6459] SQUASHFS error: xz decompression failed, data probably corrupt [ 408.159595][ T6459] SQUASHFS error: Failed to read block 0x108: -5 [ 408.166038][ T6459] SQUASHFS error: Unable to read metadata cache entry [106] [ 408.173506][ T6459] SQUASHFS error: Unable to read inode 0x11f [ 408.231863][ T6456] F2FS-fs (loop1): Found nat_bits in checkpoint [ 408.286862][ T26] audit: type=1800 audit(1786985168.152:40): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.416" name="file1" dev="loop1" ino=1048646 res=0 errno=0 [ 408.316176][ T6456] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 408.323385][ T6456] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 409.063816][ T26] audit: type=1800 audit(1786985171.892:41): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.423" name="local" dev="configfs" ino=42633 res=0 errno=0 [ 409.905273][ T6470] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6470] [ 409.968844][ T6470] loop3: detected capacity change from 0 to 1024 [ 411.985976][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.428'. [ 412.287635][ T6492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.434'. [ 416.078821][ T6502] loop0: detected capacity change from 0 to 64 [ 416.090117][ T6502] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 423.039777][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 423.067534][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 423.077063][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 423.093535][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.110272][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 423.121680][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.523324][ T6532] virt_wifi0 speed is unknown, defaulting to 1000 [ 425.376540][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 425.937190][ T6546] Config c/1 of g_uac2 needs at least one function. [ 425.971142][ T6546] udc usbip-vudc.0: failed to start g_uac2: -22 [ 426.007337][ T6546] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 426.060147][ T6546] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 426.307214][ T6532] chnl_net:caif_netlink_parms(): no params data found [ 427.944026][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 428.313354][ T6574] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6574] [ 428.411255][ T6568] loop2: detected capacity change from 0 to 1024 [ 429.714242][ T4762] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.817659][ T6570] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 429.953184][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 431.621972][ T4762] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.100539][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 435.209787][ T6532] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.232284][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.742558][ T6532] device bridge_slave_0 entered promiscuous mode [ 437.407095][ T4762] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.489483][ T6622] usb3503 0-0008: unknown mode is requested [ 437.495567][ T6622] usb3503 0-0008: usb3503_probe: probed in standby mode [ 437.504045][ T6622] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 437.521432][ T6622] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 438.239609][ T6532] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.296429][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.314330][ T6532] device bridge_slave_1 entered promiscuous mode [ 438.521808][ T4762] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.710777][ T6532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.722546][ T6532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.761105][ T6532] team0: Port device team_slave_0 added [ 438.797589][ T6630] tipc: Started in network mode [ 439.553336][ T6630] tipc: Node identity 5670754a2079, cluster identity 4711 [ 439.566209][ T6630] tipc: Enabled bearer , priority 0 [ 439.717108][ T6635] device syzkaller0 entered promiscuous mode [ 439.740540][ T6532] team0: Port device team_slave_1 added [ 439.748657][ T6632] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 439.830426][ T6639] usb3503 0-0008: unknown mode is requested [ 439.836511][ T6639] usb3503 0-0008: usb3503_probe: probed in standby mode [ 439.844968][ T6639] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 439.858944][ T6639] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 439.885103][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.225571][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.653114][ T6635] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 440.715134][ T6532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.722158][ T6532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.820157][ T6532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.836384][ T6643] tipc: Resetting bearer [ 440.854540][ T6532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.861531][ T6532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.887996][ T6532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.899907][ T4347] tipc: Node number set to 1980331338 [ 441.057272][ T6629] tipc: Resetting bearer [ 441.275344][ T6629] tipc: Disabling bearer [ 441.852576][ T6532] device hsr_slave_0 entered promiscuous mode [ 441.887702][ T6532] device hsr_slave_1 entered promiscuous mode [ 442.908915][ T6532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.918505][ T6532] Cannot create hsr debugfs directory [ 443.457080][ T6659] loop3: detected capacity change from 0 to 8 [ 443.472964][ T6659] SQUASHFS error: xz decompression failed, data probably corrupt [ 443.480773][ T6659] SQUASHFS error: Failed to read block 0x108: -5 [ 443.487241][ T6659] SQUASHFS error: Unable to read metadata cache entry [106] [ 443.494595][ T6659] SQUASHFS error: Unable to read inode 0x11f [ 443.513600][ T6663] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 443.628389][ T5296] blk_print_req_error: 2 callbacks suppressed [ 443.628405][ T5296] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 443.668463][ T4762] tipc: Left network mode [ 443.784013][ T6668] input: syz0 as /devices/virtual/input/input7 [ 446.230687][ T6683] No such timeout policy "syz1" [ 448.820328][ T4762] bond1: (slave ip6gretap1): Releasing active interface [ 449.375277][ T6698] loop1: detected capacity change from 0 to 2048 [ 449.452874][ T6698] Alternate GPT is invalid, using primary GPT. [ 449.551243][ T6698] loop1: p2 p3 p7 [ 450.312312][ T6709] tipc: Started in network mode [ 450.336342][ T6709] tipc: Node identity 321bfcee210b, cluster identity 4711 [ 450.404402][ T5567] udevd[5567]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 450.419671][ T6452] udevd[6452]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 450.425337][ T6709] tipc: Enabled bearer , priority 0 [ 450.441392][ T5296] udevd[5296]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 450.759886][ T6710] device syzkaller0 entered promiscuous mode [ 450.974476][ T6713] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 451.210423][ T6716] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 451.586202][ T6719] tipc: Resetting bearer [ 451.621802][ T955] tipc: Node number set to 319880430 [ 451.666694][ T6708] tipc: Resetting bearer [ 451.731088][ T6708] tipc: Disabling bearer [ 451.745174][ T6532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 452.110177][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888054ceb000: rx timeout, send abort [ 452.247164][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888054ceb000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 452.339994][ T6532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 452.413431][ T6732] No such timeout policy "syz1" [ 452.715803][ T6532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 452.950505][ T6532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 454.244447][ T6532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.323270][ T6532] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.338644][ T6742] tipc: Enabled bearer , priority 0 [ 454.394668][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 454.414789][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.344265][ T6755] tipc: Resetting bearer [ 456.544517][ T6774] loop0: detected capacity change from 0 to 512 [ 456.578304][ T6774] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 456.861238][ T6774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 456.878049][ T6774] EXT4-fs (loop0): orphan cleanup on readonly fs [ 456.898403][ T6774] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.499: attempt to clear invalid blocks 1024 len 1 [ 456.917600][ T6774] EXT4-fs (loop0): Remounting filesystem read-only [ 456.931379][ T6774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.499: bg 0: block 361: padding at end of block bitmap is not set [ 456.951300][ T6774] EXT4-fs (loop0): Remounting filesystem read-only [ 456.958213][ T6774] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 456.969791][ T6774] EXT4-fs (loop0): Remounting filesystem read-only [ 456.977072][ T6774] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.499: invalid indirect mapped block 1811939328 (level 0) [ 456.993634][ T6774] EXT4-fs (loop0): Remounting filesystem read-only [ 457.000418][ T6774] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.499: invalid indirect mapped block 2185560079 (level 1) [ 457.017158][ T6774] EXT4-fs (loop0): Remounting filesystem read-only [ 457.026484][ T6774] EXT4-fs (loop0): 1 truncate cleaned up [ 457.032298][ T6774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 457.554231][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 457.721803][ T6741] tipc: Disabling bearer [ 457.877838][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.900500][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.959009][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.966254][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.115697][ T6782] tipc: Enabled bearer , priority 0 [ 458.122541][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.132207][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 458.173861][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 458.209861][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.217087][ T4785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.292043][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.835773][ T6782] tipc: Resetting bearer [ 459.993276][ T4762] device hsr_slave_0 left promiscuous mode [ 460.029785][ T4762] device hsr_slave_1 left promiscuous mode [ 460.051046][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.099758][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.143604][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.151084][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.192715][ T4762] device bridge_slave_1 left promiscuous mode [ 460.212981][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.252663][ T4762] device bridge_slave_0 left promiscuous mode [ 460.260368][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.351584][ T4762] device bond1 left promiscuous mode [ 460.401265][ T4762] device veth1_macvtap left promiscuous mode [ 460.423415][ T4762] device veth0_macvtap left promiscuous mode [ 460.429698][ T4762] device veth1_vlan left promiscuous mode [ 460.506492][ T4762] device veth0_vlan left promiscuous mode [ 462.777419][ T4762] team0 (unregistering): Port device macvlan2 removed [ 463.856900][ T6821] jffs2: notice: (6821) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 466.363122][ T4762] bond1 (unregistering): Released all slaves [ 471.518523][ T6861] loop3: detected capacity change from 0 to 128 [ 472.506142][ T6861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 472.515821][ T4762] team0 (unregistering): Port device team_slave_1 removed [ 472.545826][ T6861] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 473.216355][ T4762] team0 (unregistering): Port device team_slave_0 removed [ 473.434877][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 474.068397][ T4762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.349960][ T4762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.563775][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 475.574969][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 475.593471][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 475.612823][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 475.620854][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 475.628359][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 477.370671][ T6895] input: syz0 as /devices/virtual/input/input8 [ 477.713362][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 478.265549][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'. [ 479.802947][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 481.206262][ T4288] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 481.215936][ T4288] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 481.227534][ T4282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 481.237384][ T4282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 481.245479][ T4282] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 481.252935][ T4282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 481.511457][ T4762] bond0 (unregistering): Released all slaves [ 481.621409][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 481.650507][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 481.688705][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 481.721687][ T6779] tipc: Disabling bearer [ 481.773739][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 481.811902][ T6912] virt_wifi0 speed is unknown, defaulting to 1000 [ 481.872981][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 481.978538][ T6883] virt_wifi0 speed is unknown, defaulting to 1000 [ 483.454444][ T4282] Bluetooth: hci6: command 0x0409 tx timeout [ 484.075605][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 484.867917][ T6936] loop2: detected capacity change from 0 to 128 [ 484.908142][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 485.001979][ T6936] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 485.061275][ T6936] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 485.473408][ T4282] Bluetooth: hci6: command 0x041b tx timeout [ 487.552959][ T4282] Bluetooth: hci6: command 0x040f tx timeout [ 488.276820][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 488.592037][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 489.367138][ T6970] netlink: 'syz.2.530': attribute type 1 has an invalid length. [ 490.369609][ T4282] Bluetooth: hci6: command 0x0419 tx timeout [ 490.627615][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.824544][ T6978] device macvlan2 entered promiscuous mode [ 490.830846][ T6978] device bond1 entered promiscuous mode [ 490.849319][ T6978] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 490.863446][ T6978] team0: Port device macvlan2 added [ 490.976467][ T6980] bond1: (slave ip6gretap1): making interface the new active one [ 491.003035][ T6980] device ip6gretap1 entered promiscuous mode [ 491.042786][ T6980] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 491.061280][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 491.087450][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 491.295064][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.303889][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.312076][ T6912] device bridge_slave_0 entered promiscuous mode [ 491.326414][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.333770][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.342065][ T6912] device bridge_slave_1 entered promiscuous mode [ 492.074475][ T6988] fuse: Unknown parameter 'GPL' [ 492.122428][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.185082][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.680509][ T6999] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 493.688516][ T6999] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 494.607072][ T6912] team0: Port device team_slave_0 added [ 494.619096][ T6912] team0: Port device team_slave_1 added [ 494.658365][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.668776][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.677574][ T6883] device bridge_slave_0 entered promiscuous mode [ 494.694597][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.701808][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.711576][ T6883] device bridge_slave_1 entered promiscuous mode [ 494.749634][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.757484][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.802413][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.376729][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.415509][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.496568][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.513114][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.577237][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.679617][ T6883] team0: Port device team_slave_0 added [ 496.851686][ T6883] team0: Port device team_slave_1 added [ 496.980198][ T6912] device hsr_slave_0 entered promiscuous mode [ 497.033458][ T6912] device hsr_slave_1 entered promiscuous mode [ 497.053167][ T6912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.060810][ T6912] Cannot create hsr debugfs directory [ 497.144908][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.151923][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.300646][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.470028][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.499778][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.593017][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.751685][ T7017] device bridge1 entered promiscuous mode [ 497.961960][ T6883] device hsr_slave_0 entered promiscuous mode [ 498.000637][ T6883] device hsr_slave_1 entered promiscuous mode [ 498.011072][ T6883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.047252][ T6883] Cannot create hsr debugfs directory [ 498.755833][ T7027] xt_TCPMSS: Only works on TCP SYN packets [ 498.765180][ T7027] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 498.806642][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 501.359241][ T7039] virt_wifi0 speed is unknown, defaulting to 1000 [ 501.474164][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.480596][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.260789][ T7063] overlayfs: failed to clone lowerpath [ 504.316881][ T7048] syz.3.548 (7048): drop_caches: 2 [ 506.114809][ T6912] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 506.245199][ T6912] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 506.255745][ T6912] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 506.265551][ T6912] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 507.138688][ T4762] device hsr_slave_0 left promiscuous mode [ 507.272335][ T4762] device hsr_slave_1 left promiscuous mode [ 507.308119][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.443557][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.458556][ T4762] device bridge_slave_1 left promiscuous mode [ 507.527382][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.618863][ T4762] device bridge_slave_0 left promiscuous mode [ 507.699582][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.259932][ T7098] loop3: detected capacity change from 0 to 16 [ 508.273343][ T7098] erofs: (device loop3): mounted with root inode @ nid 36. [ 508.377516][ T4282] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 509.341417][ T4762] team0 (unregistering): Port device team_slave_1 removed [ 509.461929][ T4762] team0 (unregistering): Port device team_slave_0 removed [ 510.272395][ T4762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.702126][ T4762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.391084][ T7114] loop2: detected capacity change from 0 to 32768 [ 512.220726][ T4762] bond0 (unregistering): Released all slaves [ 512.412234][ T6883] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 512.540563][ T6883] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 512.793475][ T6883] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 513.017740][ T6883] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 513.283188][ T7125] Invalid ELF header type: 3 != 1 [ 513.983914][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.015235][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.063406][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.122490][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.321986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 515.144568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.306200][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.313406][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.523307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 516.582260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 516.623737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.671874][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.679088][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.943696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 516.992442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 517.243134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 517.489970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 517.595177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.715997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.754038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.796072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.901759][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.938385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 517.963914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 517.972440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 518.037152][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 518.098901][ T26] audit: type=1800 audit(1786985289.062:42): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.572" name="local" dev="configfs" ino=46184 res=0 errno=0 [ 518.174952][ T26] audit: type=1800 audit(1786985289.092:43): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.572" name="scan_secs" dev="configfs" ino=46186 res=0 errno=0 [ 518.274174][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.343262][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.351436][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 519.163506][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 519.196252][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 519.258994][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.266206][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.353285][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 519.362237][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 519.569737][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.577037][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.670967][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 520.234635][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 520.244304][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.534077][ T7183] loop2: detected capacity change from 0 to 4096 [ 521.020230][ T7183] ntfs: volume version 3.1. [ 521.073146][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.095291][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.129663][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.159814][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.368215][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.473656][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.497452][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.123646][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 522.132157][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.341240][ T6883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 526.943967][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.951534][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.966923][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.274425][ T4282] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 528.733305][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.740893][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.766179][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.934185][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 532.005985][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 532.082333][ T6912] device veth0_vlan entered promiscuous mode [ 532.240720][ T6912] device veth1_vlan entered promiscuous mode [ 532.282952][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 532.385710][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 532.593714][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 532.832562][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 532.853743][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 532.963152][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 532.992157][ T7283] loop3: detected capacity change from 0 to 8192 [ 533.004735][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 533.063790][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.094702][ T7283] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 533.109007][ T7287] loop2: detected capacity change from 0 to 512 [ 533.137034][ T6912] device veth0_macvtap entered promiscuous mode [ 533.160003][ T7287] EXT4-fs: inline encryption not supported [ 533.174567][ T7282] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 533.181742][ T7282] FAT-fs (loop3): Filesystem has been set read-only [ 533.265130][ T6912] device veth1_macvtap entered promiscuous mode [ 533.281100][ T7287] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 533.512782][ T7287] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.594: corrupted in-inode xattr [ 533.620177][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.682462][ T7287] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.594: couldn't read orphan inode 15 (err -117) [ 533.733377][ T7287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 533.752888][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.772941][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.795916][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.816598][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.012871][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.052375][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.081911][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.126140][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.212435][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.223436][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.233610][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.283086][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.589642][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.720248][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.896774][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.283136][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.297746][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.320424][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 535.445153][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 535.459329][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 535.560565][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 535.657573][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 535.849212][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 535.992232][ T6912] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.001583][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 536.024113][ T6912] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.037182][ T6912] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.046506][ T6912] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.300459][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 536.320541][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 536.328682][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 536.345691][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 536.355231][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 536.362546][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 537.450461][ T7309] tipc: Enabling of bearer rejected, failed to enable media [ 537.767751][ T7310] virt_wifi0 speed is unknown, defaulting to 1000 [ 538.433726][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 540.513548][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 542.603492][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 543.160018][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.171734][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.180073][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.188731][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.198184][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 543.205819][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 543.237858][ T7366] loop3: detected capacity change from 0 to 1024 [ 543.297570][ T7371] fuse: Bad value for 'fd' [ 543.539247][ T7362] virt_wifi0 speed is unknown, defaulting to 1000 [ 544.222957][ T955] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 544.362881][ T7310] chnl_net:caif_netlink_parms(): no params data found [ 544.464088][ T955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.498039][ T955] usb 3-1: config 0 has no interfaces? [ 544.512954][ T955] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 544.522099][ T955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.562049][ T955] usb 3-1: config 0 descriptor?? [ 544.673511][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 545.612608][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 546.380333][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 547.340386][ T7] usb 3-1: USB disconnect, device number 6 [ 547.392195][ T7362] chnl_net:caif_netlink_parms(): no params data found [ 547.649665][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 548.896929][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.913001][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.496201][ T7310] device bridge_slave_0 entered promiscuous mode [ 549.713135][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 549.784043][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.791287][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.844430][ T7310] device bridge_slave_1 entered promiscuous mode [ 549.941982][ T7310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.062103][ T7433] jffs2: notice: (7433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 550.301721][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.313653][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.754677][ T7362] device bridge_slave_0 entered promiscuous mode [ 551.077735][ T7310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.128278][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.157309][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.319747][ T7362] device bridge_slave_1 entered promiscuous mode [ 551.813735][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 553.316761][ T7310] team0: Port device team_slave_0 added [ 553.575840][ T4777] device hsr_slave_0 left promiscuous mode [ 553.590279][ T4777] device hsr_slave_1 left promiscuous mode [ 553.597876][ T4777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.649556][ T4777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.351347][ T4777] device bridge_slave_1 left promiscuous mode [ 556.481288][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.554245][ T4777] device bridge_slave_0 left promiscuous mode [ 556.560567][ T4777] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.047756][ T4777] team0 (unregistering): Port device team_slave_1 removed [ 562.511672][ T4777] team0 (unregistering): Port device team_slave_0 removed [ 562.562658][ T4777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.617153][ T4777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.757173][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.763539][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.409414][ T4777] bond0 (unregistering): Released all slaves [ 564.651950][ T7362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.674771][ T7310] team0: Port device team_slave_1 added [ 564.713499][ T7362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.897091][ T7362] team0: Port device team_slave_0 added [ 564.956040][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.993625][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.027223][ T7310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.080046][ T7362] team0: Port device team_slave_1 added [ 565.103993][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.192224][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.524198][ T7310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.976815][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.076246][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.213051][ T7362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.230352][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.245445][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.333264][ T7362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.463389][ T7310] device hsr_slave_0 entered promiscuous mode [ 568.474048][ T7310] device hsr_slave_1 entered promiscuous mode [ 568.480743][ T7310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.489032][ T7310] Cannot create hsr debugfs directory [ 568.553361][ T7362] device hsr_slave_0 entered promiscuous mode [ 568.581124][ T7362] device hsr_slave_1 entered promiscuous mode [ 568.606660][ T7362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.615743][ T7362] Cannot create hsr debugfs directory [ 568.856209][ T4777] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.034925][ T4777] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.157850][ T4777] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.296885][ T4777] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.629474][ T7593] loop2: detected capacity change from 0 to 16 [ 569.692799][ T7593] erofs: (device loop2): mounted with root inode @ nid 36. [ 570.571273][ T7310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 573.201374][ T7612] loop3: detected capacity change from 0 to 256 [ 573.208269][ T7612] exfat: Deprecated parameter 'utf8' [ 573.213712][ T7612] exfat: Deprecated parameter 'namecase' [ 573.219672][ T7612] exfat: Deprecated parameter 'namecase' [ 573.225366][ T7612] exfat: Deprecated parameter 'utf8' [ 573.240855][ T7612] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 574.267176][ T7310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 574.319571][ T7622] loop2: detected capacity change from 0 to 512 [ 574.367107][ T7622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 574.517327][ T7310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 574.529326][ T7310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 574.617341][ T7310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.699636][ T7622] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.648: corrupted xattr entries [ 575.135609][ T7635] ubi0: attaching mtd0 [ 575.147226][ T7635] ubi0: scanning is finished [ 575.152030][ T7635] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 575.521101][ T7622] EXT4-fs (loop2): Remounting filesystem read-only [ 575.532958][ T7635] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 575.603362][ T7622] EXT4-fs (loop2): 1 truncate cleaned up [ 575.609100][ T7622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 576.980062][ T7310] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.028237][ T7641] virt_wifi0 speed is unknown, defaulting to 1000 [ 577.044558][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 577.285050][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.310692][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.319322][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 577.334343][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 577.343564][ T4758] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.350680][ T4758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.362016][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 577.733079][ T4905] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 577.922893][ T4905] usb 3-1: Using ep0 maxpacket: 16 [ 577.943920][ T4905] usb 3-1: config 6 has an invalid interface number: 221 but max is 0 [ 577.964219][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 577.979898][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 577.980900][ T4905] usb 3-1: config 6 has no interface number 0 [ 577.998663][ T4905] usb 3-1: config 6 interface 221 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 578.010793][ T4905] usb 3-1: config 6 interface 221 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 578.029020][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.036203][ T4772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.049001][ T4905] usb 3-1: config 6 interface 221 has no altsetting 0 [ 578.067693][ T4905] usb 3-1: New USB device found, idVendor=0403, idProduct=e88b, bcdDevice=5e.3f [ 578.083201][ T4905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.091220][ T4905] usb 3-1: Product: syz [ 578.095869][ T4905] usb 3-1: Manufacturer: syz [ 578.100505][ T4905] usb 3-1: SerialNumber: syz [ 578.105901][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 578.393972][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 578.424893][ T4905] ftdi_sio 3-1:6.221: FTDI USB Serial Device converter detected [ 578.436603][ T4905] ftdi_sio ttyUSB0: unknown device type: 0x5e3f [ 579.098925][ T4905] usb 3-1: USB disconnect, device number 7 [ 579.107869][ T4905] ftdi_sio 3-1:6.221: device disconnected [ 579.473854][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 579.593115][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 579.632452][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 579.733627][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 579.772644][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 580.352022][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 580.424241][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 581.434420][ T4777] device hsr_slave_0 left promiscuous mode [ 581.587414][ T4777] device hsr_slave_1 left promiscuous mode [ 581.749779][ T4777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.757570][ T4777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.780426][ T4777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.788112][ T4777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.853943][ T4777] device bridge_slave_1 left promiscuous mode [ 581.876367][ T7683] loop2: detected capacity change from 0 to 256 [ 581.889689][ T7683] exfat: Deprecated parameter 'utf8' [ 581.895177][ T7683] exfat: Deprecated parameter 'namecase' [ 581.901102][ T7683] exfat: Deprecated parameter 'namecase' [ 581.906956][ T7683] exfat: Deprecated parameter 'utf8' [ 581.929285][ T7683] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 582.016766][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.323012][ T4777] device bridge_slave_0 left promiscuous mode [ 582.329308][ T4777] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.336257][ T4777] device veth1_macvtap left promiscuous mode [ 583.342360][ T4777] device veth0_macvtap left promiscuous mode [ 583.349101][ T4777] device veth1_vlan left promiscuous mode [ 583.355411][ T4777] device veth0_vlan left promiscuous mode [ 584.018608][ T4777] team0 (unregistering): Port device team_slave_1 removed [ 584.068520][ T4777] team0 (unregistering): Port device team_slave_0 removed [ 584.112337][ T4777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.158638][ T4777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.489113][ T4777] bond0 (unregistering): Released all slaves [ 584.589686][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 584.598371][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 584.659343][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 584.741434][ T7362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 584.824251][ T7362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 584.860479][ T7362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 584.881546][ T7362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 585.115178][ T7362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.161762][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 585.186905][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.211062][ T7362] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.251590][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 585.264467][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 585.274280][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.281408][ T4772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.290980][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 585.300566][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 585.309505][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.316655][ T4772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.325987][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.333648][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.344766][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 585.357899][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 585.367167][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 585.385078][ T7310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.411584][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 585.422418][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 585.442191][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 585.453263][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.462342][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.478275][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.497411][ T7362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.515797][ T7362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.527070][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 585.537432][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.550571][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.032491][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 586.054362][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 586.066164][ T7362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.096311][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.119639][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.153232][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 586.162400][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.181538][ T7310] device veth0_vlan entered promiscuous mode [ 586.190669][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.199435][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.220419][ T7310] device veth1_vlan entered promiscuous mode [ 586.251208][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 586.260807][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 586.269768][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 586.279160][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 586.290957][ T7310] device veth0_macvtap entered promiscuous mode [ 586.311850][ T7310] device veth1_macvtap entered promiscuous mode [ 586.341840][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.354688][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.372095][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.383959][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.399110][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.410762][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.427345][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.439535][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.451407][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.472970][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 586.486641][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 586.496889][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 586.509049][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 586.521281][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.531885][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.541975][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.554715][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.564972][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.575675][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.590536][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.601184][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.618552][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.628305][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 586.638188][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 586.649871][ T7310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.671137][ T7310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.681437][ T7310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.690304][ T7310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.807965][ T4671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.822063][ T4671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.839918][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 586.870281][ T4770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.879677][ T4770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.896761][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 586.915978][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.929506][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.985304][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 587.012071][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 587.043360][ T7362] device veth0_vlan entered promiscuous mode [ 587.083343][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 587.240128][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 587.271207][ T7362] device veth1_vlan entered promiscuous mode [ 589.284562][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 589.303722][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 589.381880][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 589.401572][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 589.455786][ T7362] device veth0_macvtap entered promiscuous mode [ 589.478942][ T7362] device veth1_macvtap entered promiscuous mode [ 589.500485][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.514645][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.525021][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.536803][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.554829][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.568087][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.582617][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.599459][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.609419][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.620494][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.635880][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.644860][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 589.653876][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 589.662069][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 589.671402][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 589.682609][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.695784][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.706162][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.717622][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.727723][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.742687][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.753547][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.765727][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.775833][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.786625][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.798891][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.807445][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.817121][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.836761][ T7362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.848237][ T7362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.858090][ T7362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.867824][ T7362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.988698][ T4772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.010645][ T4772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.025255][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 590.051690][ T4772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.061965][ T4772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.072535][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 596.302682][ T7790] ubi0: attaching mtd0 [ 596.312286][ T7790] ubi0: scanning is finished [ 596.317183][ T7790] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 596.373174][ T7790] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 598.087007][ T7800] capability: warning: `syz.1.669' uses deprecated v2 capabilities in a way that may be insecure [ 607.186333][ T7881] overlayfs: missing 'lowerdir' [ 608.130546][ T7893] loop3: detected capacity change from 0 to 40427 [ 608.138350][ T7893] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 608.146221][ T7893] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 608.175657][ T7893] F2FS-fs (loop3): invalid crc value [ 608.214706][ T7893] F2FS-fs (loop3): Found nat_bits in checkpoint [ 608.302153][ T7893] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 608.309369][ T7893] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 610.661165][ T7928] overlayfs: missing 'lowerdir' [ 611.403066][ T7932] loop2: detected capacity change from 0 to 40427 [ 611.424177][ T7932] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 611.432188][ T7932] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 611.448871][ T7932] F2FS-fs (loop2): invalid crc value [ 611.613190][ T7932] F2FS-fs (loop2): Found nat_bits in checkpoint [ 612.462306][ T7932] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 612.469505][ T7932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 613.539806][ T4285] Bluetooth: hci0: unexpected event for opcode 0x0c0d [ 613.584954][ T4273] syz-executor: attempt to access beyond end of device [ 613.584954][ T4273] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 613.924560][ T7958] ubi0: attaching mtd0 [ 613.933803][ T7958] ubi0: scanning is finished [ 613.938590][ T7958] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 614.059206][ T7958] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 616.369865][ T4593] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 617.143076][ T4593] usb 4-1: Using ep0 maxpacket: 16 [ 617.166863][ T4593] usb 4-1: config 6 has an invalid interface number: 221 but max is 0 [ 617.296898][ T4593] usb 4-1: config 6 has no interface number 0 [ 617.391096][ T4593] usb 4-1: config 6 interface 221 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 617.568659][ T4593] usb 4-1: config 6 interface 221 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 617.725779][ T4593] usb 4-1: config 6 interface 221 has no altsetting 0 [ 617.880207][ T4593] usb 4-1: New USB device found, idVendor=0403, idProduct=e88b, bcdDevice=5e.3f [ 617.965053][ T7983] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 617.973459][ T7983] netlink: 'syz.1.708': attribute type 2 has an invalid length. [ 617.989386][ T4593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.025534][ T4593] usb 4-1: Product: syz [ 618.048475][ T4593] usb 4-1: Manufacturer: syz [ 618.125811][ T4593] usb 4-1: SerialNumber: syz [ 618.235489][ T4593] usb 4-1: can't set config #6, error -71 [ 618.295571][ T4593] usb 4-1: USB disconnect, device number 7 [ 619.913118][ T8001] ip6t_rpfilter: unknown options [ 623.407612][ T8025] loop5: detected capacity change from 0 to 256 [ 623.422647][ T8025] exfat: Deprecated parameter 'utf8' [ 623.428442][ T8025] exfat: Deprecated parameter 'namecase' [ 623.434446][ T8025] exfat: Deprecated parameter 'namecase' [ 623.440171][ T8025] exfat: Deprecated parameter 'utf8' [ 623.484368][ T8025] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 624.197509][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.204023][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.382882][ T8041] loop5: detected capacity change from 0 to 32768 [ 626.985872][ T8059] loop6: detected capacity change from 0 to 256 [ 627.351881][ T8041] XFS (loop5): Mounting V5 Filesystem [ 627.510490][ T8041] XFS (loop5): Ending clean mount [ 627.542920][ T8041] XFS (loop5): Quotacheck needed: Please wait. [ 627.662296][ T8041] XFS (loop5): Quotacheck: Done. [ 628.705126][ T26] audit: type=1800 audit(1786985399.092:44): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.723" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 628.911103][ T7362] XFS (loop5): Unmounting Filesystem [ 628.942532][ T8080] loop6: detected capacity change from 0 to 2048 [ 629.456097][ T8095] loop3: detected capacity change from 0 to 512 [ 629.690655][ T8080] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 629.891646][ T8095] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 630.537898][ T8095] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.732: corrupted xattr entries [ 630.555127][ T8095] EXT4-fs (loop3): Remounting filesystem read-only [ 630.562193][ T8095] EXT4-fs (loop3): 1 truncate cleaned up [ 630.568379][ T8095] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 630.579214][ T7310] EXT4-fs (loop6): unmounting filesystem. [ 631.899214][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 632.515355][ T8125] UBIFS error (pid: 8125): cannot open "", error -22 [ 633.765723][ T8139] ubi0: attaching mtd0 [ 633.786885][ T8139] ubi0: scanning is finished [ 633.791764][ T8139] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 633.834343][ T8139] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 634.510994][ T8147] loop2: detected capacity change from 0 to 256 [ 643.185222][ T8205] kvm [8199]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x30c000000 [ 643.279601][ T8205] kvm [8199]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6f00000000 [ 643.377954][ T8205] kvm [8199]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 643.397206][ T8205] kvm [8199]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x7f00000000 [ 643.457744][ T8205] kvm [8199]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1300000000 [ 644.372393][ T8234] loop2: detected capacity change from 0 to 1024 [ 644.529733][ T8237] loop3: detected capacity change from 0 to 256 [ 646.599633][ T8255] loop2: detected capacity change from 0 to 1024 [ 647.474059][ T8255] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 647.512107][ T8262] loop5: detected capacity change from 0 to 512 [ 647.934558][ T8269] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 648.083354][ T8271] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 648.246109][ T8262] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.762: Unrecognised inode hash code 255 [ 648.258239][ T8262] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.762: Corrupt directory, running e2fsck is recommended [ 648.283215][ T8262] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 648.302428][ T8262] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.762: corrupted in-inode xattr [ 648.315141][ T8262] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.762: couldn't read orphan inode 15 (err -117) [ 648.328381][ T8262] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 648.614990][ T8276] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.762: Unrecognised inode hash code 255 [ 648.626849][ T8276] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.762: Corrupt directory, running e2fsck is recommended [ 648.642153][ T8276] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 4: comm syz.5.762: path /19/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0 [ 649.149769][ T7362] EXT4-fs (loop5): unmounting filesystem. [ 649.290677][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 649.386669][ T8282] loop5: detected capacity change from 0 to 512 [ 649.467561][ T8282] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 649.965931][ T8282] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.768: corrupted xattr entries [ 650.895108][ T8296] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 650.918435][ T8282] EXT4-fs (loop5): Remounting filesystem read-only [ 651.169206][ T8282] EXT4-fs (loop5): 1 truncate cleaned up [ 651.189230][ T8282] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 652.068117][ T7362] EXT4-fs (loop5): unmounting filesystem. [ 652.800874][ T8319] hub 8-0:1.0: USB hub found [ 652.808290][ T8319] hub 8-0:1.0: 1 port detected [ 656.067676][ T8345] loop5: detected capacity change from 0 to 512 [ 656.934057][ T8345] EXT4-fs: inline encryption not supported [ 656.945504][ T8345] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 656.986803][ T8353] loop3: detected capacity change from 0 to 512 [ 658.104930][ T8345] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.783: corrupted in-inode xattr [ 658.143406][ T8345] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.783: couldn't read orphan inode 15 (err -117) [ 658.302488][ T8367] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 659.130753][ T8345] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 659.880037][ T7362] EXT4-fs (loop5): unmounting filesystem. [ 661.030344][ T8395] overlayfs: missing 'lowerdir' [ 662.939799][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 664.264036][ T8409] vivid-004: ================= START STATUS ================= [ 664.272463][ T8409] vivid-004: Radio HW Seek Mode: Bounded [ 664.427323][ T8418] loop3: detected capacity change from 0 to 32768 [ 664.435917][ T8418] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.799 (8418) [ 664.451012][ T8418] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 664.461226][ T8418] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 664.470433][ T8418] BTRFS info (device loop3): use zlib compression, level 3 [ 664.477777][ T8418] BTRFS info (device loop3): turning on sync discard [ 664.484535][ T8418] BTRFS info (device loop3): using free space tree [ 664.538415][ T8409] vivid-004: Radio Programmable HW Seek: false [ 664.553267][ T8409] vivid-004: RDS Rx I/O Mode: Block I/O [ 664.559050][ T8409] vivid-004: Generate RBDS Instead of RDS: false [ 664.623533][ T8409] vivid-004: RDS Reception: true [ 664.858324][ T8409] vivid-004: RDS Program Type: 0 inactive [ 665.621108][ T8409] vivid-004: RDS PS Name: inactive [ 665.641786][ T8409] vivid-004: RDS Radio Text: inactive [ 665.648738][ T8409] vivid-004: RDS Traffic Announcement: false inactive [ 665.657216][ T8409] vivid-004: RDS Traffic Program: false inactive [ 665.665725][ T8409] vivid-004: RDS Music: false inactive [ 665.671451][ T8409] vivid-004: ================== END STATUS ================== [ 665.940539][ T8418] BTRFS info (device loop3): enabling ssd optimizations [ 666.389820][ T8449] loop5: detected capacity change from 0 to 2048 [ 666.489237][ T26] audit: type=1800 audit(1786985437.432:45): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.799" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 667.667526][ T8459] loop2: detected capacity change from 0 to 512 [ 667.677179][ T8459] EXT4-fs: Ignoring removed oldalloc option [ 667.978974][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 668.026872][ T4274] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 668.060494][ T8459] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 668.069667][ T8459] EXT4-fs (loop2): orphan cleanup on readonly fs [ 668.076702][ T8459] EXT4-fs error (device loop2): ext4_quota_enable:7045: comm syz.2.806: Bad quota inum: 2, type: 2 [ 668.093258][ T8459] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 668.108799][ T8459] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 668.115860][ T8459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 668.131151][ T8458] EXT4-fs error (device loop2): ext4_get_parent:1910: comm syz.2.806: inode #2: comm syz.2.806: iget: illegal inode # [ 668.169833][ T8449] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 668.666922][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 672.860788][ T8503] hub 8-0:1.0: USB hub found [ 672.894403][ T8503] hub 8-0:1.0: 1 port detected [ 673.662024][ T8508] loop6: detected capacity change from 0 to 512 [ 675.343778][ T8526] loop6: detected capacity change from 0 to 512 [ 675.371888][ T8526] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 675.432875][ T8526] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.819: corrupted xattr entries [ 675.464299][ T8526] EXT4-fs (loop6): Remounting filesystem read-only [ 675.682985][ T8526] EXT4-fs (loop6): 1 truncate cleaned up [ 675.688695][ T8526] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 676.955950][ T7310] EXT4-fs (loop6): unmounting filesystem. [ 677.030015][ T8544] loop3: detected capacity change from 0 to 1024 [ 677.036839][ T7362] EXT4-fs (loop5): unmounting filesystem. [ 677.038694][ T8544] hfsplus: unable to parse mount options [ 680.363579][ T26] audit: type=1326 audit(1786985450.692:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.5.830" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fd19e0d9 code=0x7fc00000 [ 680.621006][ T26] audit: type=1326 audit(1786985451.102:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.5.830" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10fd13f459 code=0x7fc00000 [ 681.997146][ T8573] loop6: detected capacity change from 0 to 32768 [ 682.218129][ T8573] XFS (loop6): Mounting V5 Filesystem [ 682.841782][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 682.872429][ T8571] device bridge_slave_1 left promiscuous mode [ 682.880841][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.917677][ T8573] XFS (loop6): Ending clean mount [ 682.925577][ T8573] XFS (loop6): Quotacheck needed: Please wait. [ 682.963163][ T8573] XFS (loop6): Quotacheck: Done. [ 683.632994][ T26] audit: type=1800 audit(1786985454.202:48): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.833" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0 [ 683.738947][ T8571] device bridge_slave_0 left promiscuous mode [ 683.748605][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.791859][ T7310] XFS (loop6): Unmounting Filesystem [ 685.442862][ T8597] loop2: detected capacity change from 0 to 512 [ 685.470696][ T8597] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 685.585250][ T8597] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.836: corrupted xattr entries [ 685.634866][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.641192][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.663287][ T8597] EXT4-fs (loop2): Remounting filesystem read-only [ 685.725830][ T8597] EXT4-fs (loop2): 1 truncate cleaned up [ 685.731645][ T8597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 686.437745][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 687.521939][ T8623] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 692.328427][ T8662] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7310] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8662] [ 693.566881][ T8667] loop6: detected capacity change from 0 to 512 [ 693.661094][ T8667] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.851: Unrecognised inode hash code 255 [ 693.760172][ T8667] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.851: Corrupt directory, running e2fsck is recommended [ 694.122295][ T8667] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 694.433101][ T8667] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.851: corrupted in-inode xattr [ 694.674582][ T8667] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.851: couldn't read orphan inode 15 (err -117) [ 694.694333][ T8677] overlayfs: failed to clone upperpath [ 694.718509][ T8667] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 694.985996][ T8683] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.851: Unrecognised inode hash code 255 [ 694.997600][ T8683] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.851: Corrupt directory, running e2fsck is recommended [ 695.010771][ T8683] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 4: comm syz.6.851: path /35/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0 [ 695.952233][ T7310] EXT4-fs (loop6): unmounting filesystem. [ 696.185295][ T8688] loop6: detected capacity change from 0 to 512 [ 696.236753][ T8688] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.865: iget: bad i_size value: 38620345925642 [ 696.284962][ T8688] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.865: couldn't read orphan inode 15 (err -117) [ 696.525204][ T8688] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 697.787559][ T4366] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:8: bg 0: block 5: invalid block bitmap [ 698.788942][ T4366] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 804 with error 28 [ 698.810617][ T4366] EXT4-fs (loop6): This should not happen!! Data will be lost [ 698.810617][ T4366] [ 698.851886][ T4366] EXT4-fs (loop6): Total free blocks count 0 [ 698.872853][ T4366] EXT4-fs (loop6): Free/Dirty block details [ 698.894331][ T4366] EXT4-fs (loop6): free_blocks=0 [ 698.955158][ T4366] EXT4-fs (loop6): dirty_blocks=804 [ 698.975369][ T4366] EXT4-fs (loop6): Block reservation details [ 699.083466][ T4366] EXT4-fs (loop6): i_reserved_data_blocks=804 [ 699.321512][ T8712] ubi0: attaching mtd0 [ 699.330218][ T8712] ubi0: scanning is finished [ 699.335083][ T8712] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 699.359347][ T8713] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 699.390631][ T8712] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 699.668266][ T7310] EXT4-fs (loop6): unmounting filesystem. [ 700.732953][ T8724] loop3: detected capacity change from 0 to 1024 [ 708.494701][ T8792] loop2: detected capacity change from 0 to 1024 [ 710.024469][ T8792] hfsplus: unable to parse mount options [ 714.840173][ T8839] mmap: syz.3.888 (8839) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 716.435907][ T26] audit: type=1800 audit(1786985487.402:49): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.889" name="pnp_string" dev="configfs" ino=52784 res=0 errno=0 [ 721.728778][ T26] audit: type=1326 audit(1786985492.692:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fae19e0d9 code=0x7fc00000 [ 722.939071][ T26] audit: type=1326 audit(1786985492.762:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f7fae19e0d9 code=0x7fc00000 [ 723.113132][ T26] audit: type=1326 audit(1786985493.612:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fae19e0d9 code=0x7fc00000 [ 723.801179][ T8910] loop5: detected capacity change from 0 to 1024 [ 723.810714][ T26] audit: type=1326 audit(1786985493.612:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7fae19e0d9 code=0x7fc00000 [ 723.917356][ T8910] EXT4-fs: inline encryption not supported [ 724.068922][ T8921] loop2: detected capacity change from 0 to 1024 [ 724.805412][ T8910] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 727.204919][ T8910] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.323397][ T7362] EXT4-fs (loop5): unmounting filesystem. [ 730.365397][ T4285] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 730.376898][ T4285] CPU: 0 PID: 4285 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 730.384491][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.394565][ T4285] Workqueue: hci1 hci_rx_work [ 730.399373][ T4285] Call Trace: [ 730.402710][ T4285] [ 730.405716][ T4285] dump_stack_lvl+0x188/0x24e [ 730.410479][ T4285] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 730.416205][ T4285] ? show_regs_print_info+0x12/0x12 [ 730.421438][ T4285] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 730.427113][ T4285] sysfs_create_dir_ns+0x26a/0x290 [ 730.432273][ T4285] ? __lock_acquire+0x7c40/0x7c40 [ 730.437368][ T4285] ? sysfs_warn_dup+0xa0/0xa0 [ 730.442087][ T4285] ? do_raw_spin_unlock+0x11d/0x230 [ 730.447313][ T4285] kobject_add_internal+0x617/0xca0 [ 730.452573][ T4285] kobject_add+0x160/0x230 [ 730.457017][ T4285] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 730.462777][ T4285] ? kobject_init+0x1c0/0x1c0 [ 730.467485][ T4285] ? get_device_parent+0x7c/0x3e0 [ 730.472661][ T4285] ? get_device_parent+0x121/0x3e0 [ 730.477811][ T4285] device_add+0x470/0x1050 [ 730.482280][ T4285] hci_conn_add_sysfs+0xd1/0x1e0 [ 730.487397][ T4285] le_conn_complete_evt+0xfac/0x15c0 [ 730.492732][ T4285] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 730.499008][ T4285] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 730.504718][ T4285] hci_le_conn_complete_evt+0x183/0x440 [ 730.510304][ T4285] ? hci_remote_host_features_evt+0x230/0x230 [ 730.516406][ T4285] hci_event_packet+0x7b3/0x1290 [ 730.521422][ T4285] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 730.527098][ T4285] ? bis_list+0x280/0x280 [ 730.531473][ T4285] ? kcov_remote_start+0x1b1/0x7e0 [ 730.536648][ T4285] ? hci_send_to_monitor+0x9c/0x4a0 [ 730.541877][ T4285] hci_rx_work+0x3eb/0xd40 [ 730.546365][ T4285] ? _raw_spin_unlock+0x40/0x40 [ 730.551266][ T4285] ? process_one_work+0x7b4/0x1160 [ 730.556512][ T4285] process_one_work+0x8ab/0x1160 [ 730.561497][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 730.567183][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 730.572289][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 730.577886][ T4285] ? wq_worker_running+0x97/0x190 [ 730.583004][ T4285] worker_thread+0xaf5/0x12a0 [ 730.587750][ T4285] kthread+0x29d/0x330 [ 730.591859][ T4285] ? worker_clr_flags+0x1a0/0x1a0 [ 730.596924][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 730.601551][ T4285] ret_from_fork+0x1f/0x30 [ 730.606053][ T4285] [ 730.892842][ T4285] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 730.906784][ T4285] Bluetooth: hci1: failed to register connection device [ 731.244014][ T8957] loop3: detected capacity change from 0 to 512 [ 731.276816][ T8957] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 731.517275][ T8957] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 731.743565][ T8957] loop3: detected capacity change from 0 to 32768 [ 731.802014][ T8957] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 731.918796][ T8968] overlayfs: missing 'lowerdir' [ 734.097329][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 739.333215][ T9021] overlayfs: missing 'lowerdir' [ 740.801040][ T9030] zram0: detected capacity change from 0 to 8 [ 741.545176][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 742.264733][ T9041] futex_wake_op: syz.6.934 tries to shift op by 144; fix this program [ 742.311113][ T9041] loop6: detected capacity change from 0 to 256 [ 744.011569][ T9049] loop2: detected capacity change from 0 to 512 [ 744.095297][ T9041] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 744.117712][ T26] audit: type=1800 audit(1786985515.082:54): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.934" name="file1" dev="loop6" ino=1048716 res=0 errno=0 [ 744.195603][ T9051] loop3: detected capacity change from 0 to 2048 [ 744.384509][ T9054] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 744.488686][ T9051] syz.3.936: attempt to access beyond end of device [ 744.488686][ T9051] loop3: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 744.503466][ T9051] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 744.561300][ T9049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 744.565834][ T9049] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 745.474360][ T9063] bridge0: port 3(syz_tun) entered blocking state [ 745.481535][ T9063] bridge0: port 3(syz_tun) entered disabled state [ 745.497698][ T9063] device syz_tun entered promiscuous mode [ 745.508028][ T9063] bridge0: port 3(syz_tun) entered blocking state [ 745.515002][ T9063] bridge0: port 3(syz_tun) entered forwarding state [ 745.559018][ T9063] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 745.620682][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 747.095049][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.101477][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.759543][ T9096] futex_wake_op: syz.6.945 tries to shift op by 144; fix this program [ 747.784308][ T9093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.831550][ T9096] loop6: detected capacity change from 0 to 256 [ 747.943794][ T9096] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 748.059379][ T26] audit: type=1800 audit(1786985519.993:55): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.945" name="file1" dev="loop6" ino=1048717 res=0 errno=0 [ 749.052375][ T4422] kworker/u4:12: attempt to access beyond end of device [ 749.052375][ T4422] loop6: rw=1, sector=2800, nr_sectors = 5616 limit=256 [ 750.303742][ T9109] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 753.202021][ T9132] loop2: detected capacity change from 0 to 256 [ 753.861645][ T9143] usb usb1: usbfs: process 9143 (syz.6.955) did not claim interface 0 before use [ 753.982074][ T9144] Bluetooth: MGMT ver 1.22 [ 756.289489][ T4285] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 756.298820][ T4285] Bluetooth: hci2: command 0x0401 tx timeout [ 759.365631][ T9195] virt_wifi0 speed is unknown, defaulting to 1000 [ 763.952907][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 764.966068][ T9212] Mass Storage Function, version: 2009/09/11 [ 764.973479][ T9212] LUN: removable file: (no medium) [ 764.992501][ T9212] LUN: removable file: (no medium) [ 768.798747][ T9229] loop6: detected capacity change from 0 to 1024 [ 768.827316][ T9229] EXT4-fs: inline encryption not supported [ 769.795254][ T9229] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 770.002241][ T9229] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.341855][ T7310] EXT4-fs (loop6): unmounting filesystem. [ 770.774263][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.988'. [ 771.021488][ T9252] No such timeout policy "syz1" [ 772.225557][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 772.237364][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 772.245609][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 772.254866][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 772.262351][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 772.272179][ T9261] sctp: failed to load transform for md5: -2 [ 772.352044][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 772.582417][ T9257] virt_wifi0 speed is unknown, defaulting to 1000 [ 772.626072][ T9277] loop3: detected capacity change from 0 to 512 [ 773.376517][ T9278] loop5: detected capacity change from 0 to 1024 [ 773.447694][ T9278] ext4: Unknown parameter 'uid' [ 773.476507][ T9277] EXT4-fs (loop3): 1 orphan inode deleted [ 773.691183][ T9277] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 773.729078][ T9126] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 773.743162][ T9277] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.775081][ T9126] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 774.595494][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 774.905088][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 775.073303][ T9257] chnl_net:caif_netlink_parms(): no params data found [ 775.146323][ T9296] loop3: detected capacity change from 0 to 256 [ 776.219193][ T9257] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.226436][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.234878][ T9257] device bridge_slave_0 entered promiscuous mode [ 776.291109][ T9257] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.340574][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.404958][ T9311] loop5: detected capacity change from 0 to 2048 [ 776.557758][ T9257] device bridge_slave_1 entered promiscuous mode [ 776.702973][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 777.218351][ T9311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 777.264640][ T9314] 0x000000000007-0x000000020000 : "" [ 777.302546][ T9314] ftl_cs: FTL header corrupt! [ 778.762866][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 779.033740][ T9257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.078333][ T9257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.260204][ T9257] team0: Port device team_slave_0 added [ 779.294869][ T9257] team0: Port device team_slave_1 added [ 779.366155][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.377362][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.413252][ T9257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.432265][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.448852][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.488885][ T9257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.582185][ T9257] device hsr_slave_0 entered promiscuous mode [ 779.594027][ T9257] device hsr_slave_1 entered promiscuous mode [ 779.603805][ T9257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.625794][ T9257] Cannot create hsr debugfs directory [ 779.743198][ T9329] loop5: detected capacity change from 0 to 512 [ 779.772573][ T9329] ext4: Unknown parameter 'nouser_xattr' [ 780.782130][ T9329] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 780.832830][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 782.540866][ T9351] misc userio: No port type given on /dev/userio [ 783.172344][ T9257] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 783.561414][ T9257] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 783.602048][ T9257] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 784.474459][ T9257] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 784.634749][ T9377] file system registered [ 785.321504][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 785.332836][ T9377] netlink: 'syz.3.1007': attribute type 5 has an invalid length. [ 785.371163][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 785.551120][ T9381] read descriptors [ 785.594717][ T9377] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 785.613782][ T9377] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 785.653121][ T9377] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 785.942888][ T9377] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 785.973095][ T9377] device geneve2 entered promiscuous mode [ 786.178603][ T4274] ffs_data_put(): freeing [ 786.271007][ T9257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.409108][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 786.445069][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 786.496699][ T9257] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.603068][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 787.858642][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 787.929885][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.937119][ T4762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.069605][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 788.078604][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 788.087560][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.094756][ T4762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.102840][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 788.111773][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 788.382112][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 788.410197][ T26] audit: type=1800 audit(1786985560.373:56): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1014" name="device_path" dev="configfs" ino=55040 res=0 errno=0 [ 788.451559][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 788.461914][ T9404] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 788.519493][ T26] audit: type=1800 audit(1786985560.413:57): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1014" name="buffered_io" dev="configfs" ino=55426 res=0 errno=0 [ 788.540591][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 788.594623][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 788.672263][ T26] audit: type=1800 audit(1786985560.433:58): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1014" name="enable" dev="configfs" ino=55041 res=0 errno=0 [ 788.675008][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 788.848106][ T26] audit: type=1800 audit(1786985560.433:59): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1014" name="addr_trtype" dev="configfs" ino=55042 res=0 errno=0 [ 788.854865][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 790.064002][ T9412] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1016'. [ 790.073095][ T9412] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1016'. [ 790.082173][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 790.093214][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 790.107354][ T9257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.133848][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 790.194244][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 790.304407][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 791.124433][ T9423] loop3: detected capacity change from 0 to 32768 [ 791.135462][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1019'. [ 791.859190][ T9423] XFS (loop3): Mounting V5 Filesystem [ 792.361322][ T9423] XFS (loop3): Ending clean mount [ 793.109910][ T4274] XFS (loop3): Unmounting Filesystem [ 794.822596][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 794.882656][ T4285] Bluetooth: hci4: failed to read key size for handle 200 [ 795.640312][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 795.668739][ T9257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.571992][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 802.599227][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 802.707570][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 802.817626][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 802.832338][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 802.857739][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 802.983645][ T9257] device veth0_vlan entered promiscuous mode [ 803.005559][ T9509] loop5: detected capacity change from 0 to 512 [ 803.024433][ T9257] device veth1_vlan entered promiscuous mode [ 803.109789][ T9509] EXT4-fs: inline encryption not supported [ 803.211536][ T9509] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 803.525914][ T9509] EXT4-fs (loop5): 1 truncate cleaned up [ 803.594839][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 803.655032][ T9509] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 803.666430][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 803.749968][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 803.770516][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 803.815370][ T9257] device veth0_macvtap entered promiscuous mode [ 803.977202][ T9257] device veth1_macvtap entered promiscuous mode [ 804.075494][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.086793][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.012203][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.026226][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.046499][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.057151][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.068039][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.079125][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.089452][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.100161][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.110914][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.122229][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.144891][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.153215][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 805.164774][ T7362] EXT4-fs (loop5): unmounting filesystem. [ 805.184418][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 805.194300][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 805.208523][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.258843][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.278608][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.292015][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.302164][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.329496][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.340315][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.366248][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.400468][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.483863][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.512938][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.556527][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.860074][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.871496][ T9257] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.964855][ T9257] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.021236][ T9257] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.059980][ T9257] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.235369][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 806.250350][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 806.707184][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.740209][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.777699][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 806.812593][ T4768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.720657][ T4768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.752053][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 808.515409][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.608826][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.914964][ T9578] FAULT_INJECTION: forcing a failure. [ 809.914964][ T9578] name fail_futex, interval 1, probability 0, space 0, times 1 [ 809.927910][ T9578] CPU: 1 PID: 9578 Comm: syz.5.1052 Not tainted syzkaller #0 [ 809.935320][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.945400][ T9578] Call Trace: [ 809.948701][ T9578] [ 809.951655][ T9578] dump_stack_lvl+0x188/0x24e [ 809.956394][ T9578] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 809.962060][ T9578] ? show_regs_print_info+0x12/0x12 [ 809.967293][ T9578] ? load_image+0x410/0x410 [ 809.971863][ T9578] should_fail_ex+0x390/0x4c0 [ 809.976646][ T9578] get_futex_key+0x1b1/0x1000 [ 809.981401][ T9578] ? preempt_schedule_thunk+0x16/0x18 [ 809.986826][ T9578] ? try_to_wake_up+0x6c1/0x10b0 [ 809.991877][ T9578] ? futex_setup_timer+0xc0/0xc0 [ 809.996860][ T9578] futex_wake+0x123/0x4f0 [ 810.001247][ T9578] ? __fget_files+0x28/0x460 [ 810.005885][ T9578] ? futex_wake_mark+0x150/0x150 [ 810.010851][ T9578] ? __lock_acquire+0x7c40/0x7c40 [ 810.015915][ T9578] ? file_end_write+0x204/0x250 [ 810.020841][ T9578] ? __fget_files+0x28/0x460 [ 810.025469][ T9578] do_futex+0x2e2/0x320 [ 810.029660][ T9578] ? __ia32_sys_get_robust_list+0x100/0x100 [ 810.035584][ T9578] ? __fdget+0x18e/0x200 [ 810.039859][ T9578] __se_sys_futex+0x381/0x410 [ 810.044567][ T9578] ? __x64_sys_futex+0xf0/0xf0 [ 810.049364][ T9578] ? __x64_sys_futex+0x1d/0xf0 [ 810.054152][ T9578] do_syscall_64+0x4c/0xa0 [ 810.058593][ T9578] ? clear_bhb_loop+0x60/0xb0 [ 810.063332][ T9578] ? clear_bhb_loop+0x60/0xb0 [ 810.068043][ T9578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.073975][ T9578] RIP: 0033:0x7f10fd19e0d9 [ 810.078420][ T9578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.098119][ T9578] RSP: 002b:00007f10fdfe90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 810.106645][ T9578] RAX: ffffffffffffffda RBX: 00007f10fd426188 RCX: 00007f10fd19e0d9 [ 810.114653][ T9578] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10fd42618c [ 810.122651][ T9578] RBP: 00007f10fd426180 R08: 003391cb0d5512cc R09: 0000000000000000 [ 810.130646][ T9578] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 810.138650][ T9578] R13: 00007f10fd426218 R14: 00007ffec69f2180 R15: 00007ffec69f2268 [ 810.146668][ T9578] [ 814.522651][ T9617] futex_wake_op: syz.6.1061 tries to shift op by 144; fix this program [ 814.537546][ T9617] loop6: detected capacity change from 0 to 256 [ 814.690964][ T9617] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 814.720136][ T26] audit: type=1800 audit(1786985586.683:60): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1061" name="file1" dev="loop6" ino=1048722 res=0 errno=0 [ 814.834595][ T9621] loop7: detected capacity change from 0 to 1024 [ 816.142334][ T9621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 816.237189][ T9629] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 817.289720][ T9621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 817.344473][ T9621] System zones: 0-1, 3-12 [ 817.453363][ T9621] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 818.432901][ T9257] EXT4-fs (loop7): unmounting filesystem. [ 819.900606][ T9661] using random self ethernet address [ 819.907025][ T9661] using random host ethernet address [ 819.918521][ T26] audit: type=1800 audit(1786985591.883:61): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1075" name="UDC" dev="configfs" ino=55811 res=0 errno=0 [ 819.920667][ T9661] udc dummy_udc.0: failed to start g1: -19 [ 819.945127][ T9661] UDC core: g1: couldn't find an available UDC or it's busy [ 824.235156][ T4285] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 825.860914][ T4759] Bluetooth: Error in BCSP hdr checksum [ 826.149387][ T33] Bluetooth: Error in BCSP hdr checksum [ 826.425908][ T9715] tmpfs: Unknown parameter 'usrquota' [ 827.916648][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 827.923841][ T4282] Bluetooth: hci5: command 0x1003 tx timeout [ 830.740232][ T9736] virt_wifi0 speed is unknown, defaulting to 1000 [ 832.514511][ T9750] loop3: detected capacity change from 0 to 256 [ 836.067720][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 836.075689][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 836.625699][ T9769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 839.442819][ T4319] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 840.125494][ T9797] overlayfs: overlapping lowerdir path [ 840.816926][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 840.832434][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 840.965137][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 840.978131][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 840.990402][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 841.008744][ T9798] overlayfs: missing 'lowerdir' [ 841.017463][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 841.029465][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 841.314873][ T4319] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.339464][ T4319] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.362942][ T4319] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 841.372043][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.384534][ T4319] qmi_wwan 6-1:1.0: skipping garbage [ 841.530727][ T9805] netlink: 'syz.7.1097': attribute type 2 has an invalid length. [ 842.706330][ T4319] qmi_wwan: probe of 6-1:1.0 failed with error -22 [ 843.197528][ T4319] usb 6-1: USB disconnect, device number 2 [ 843.384886][ T9824] loop7: detected capacity change from 0 to 32768 [ 843.670897][ T9824] XFS (loop7): Mounting V5 Filesystem [ 844.064208][ T9824] XFS (loop7): Ending clean mount [ 845.253637][ T9257] XFS (loop7): Unmounting Filesystem [ 845.381006][ T4671] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 850.424353][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 850.703765][ T9883] tipc: Enabling of bearer rejected, failed to enable media [ 850.743172][ T9883] rt1719: probe of 0-0049 failed with error -5 [ 850.750280][ T9883] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 850.769081][ T9883] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 850.832438][ T9883] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 851.451372][ T9890] comedi comedi3: comedi_config --init_data is deprecated [ 853.406600][ T955] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 853.648553][ T955] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 853.708705][ T955] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 853.933731][ T955] usb 4-1: config 0 interface 0 has no altsetting 0 [ 853.949310][ T955] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 853.962369][ T955] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 853.971124][ T955] usb 4-1: Product: syz [ 853.975578][ T955] usb 4-1: Manufacturer: syz [ 853.980220][ T955] usb 4-1: SerialNumber: syz [ 854.694331][ T955] usb 4-1: config 0 descriptor?? [ 854.939215][ T955] usb 4-1: can't set config #0, error -71 [ 854.955459][ T955] usb 4-1: USB disconnect, device number 8 [ 856.293834][ T4288] Bluetooth: hci3: Malformed LE Event: 0x0d [ 857.009710][ T9929] loop3: detected capacity change from 0 to 16 [ 857.617608][ T9929] erofs: (device loop3): mounted with root inode @ nid 36. [ 857.635314][ T9927] syz.3.1132: attempt to access beyond end of device [ 857.635314][ T9927] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 857.650485][ T9927] syz.3.1132: attempt to access beyond end of device [ 857.650485][ T9927] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 858.679814][ T9937] loop6: detected capacity change from 0 to 40427 [ 858.688759][ T9937] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 858.696621][ T9937] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 858.723746][ T9937] F2FS-fs (loop6): invalid crc value [ 858.745066][ T9938] loop7: detected capacity change from 0 to 16 [ 858.781957][ T9937] F2FS-fs (loop6): Found nat_bits in checkpoint [ 858.822925][ T9938] erofs: (device loop7): mounted with root inode @ nid 36. [ 858.831957][ T9937] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 858.839675][ T9937] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 858.900753][ T9938] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 858.919614][ T9938] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 858.930604][ T9938] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 860.004058][ T9947] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 860.045858][ T9947] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 860.249719][ T9947] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 860.587074][ T9961] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 860.596205][ T9961] overlayfs: missing 'lowerdir' [ 864.300501][ T9985] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 864.682988][ T9983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 864.695905][ T9983] loop5: detected capacity change from 0 to 7 [ 864.707673][ T9983] Dev loop5: unable to read RDB block 7 [ 864.713340][ T9983] loop5: unable to read partition table [ 864.719186][ T9983] loop5: partition table beyond EOD, truncated [ 864.725585][ T9983] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 864.793443][ T9983] Dev loop5: unable to read RDB block 7 [ 864.799046][ T9983] loop5: unable to read partition table [ 864.804827][ T9983] loop5: partition table beyond EOD, truncated [ 864.811032][ T9983] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 865.153974][ T9994] loop6: detected capacity change from 0 to 164 [ 869.955094][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.961561][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.442971][ T4288] Bluetooth: hci2: command 0x0405 tx timeout [ 870.489831][T10024] loop3: detected capacity change from 0 to 512 [ 870.533768][T10024] EXT4-fs: inline encryption not supported [ 870.578025][T10024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 870.606365][T10029] device dummy0 entered promiscuous mode [ 870.922148][T10024] EXT4-fs (loop3): 1 truncate cleaned up [ 870.947670][T10024] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 871.807605][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 873.269097][T10046] virt_wifi0 speed is unknown, defaulting to 1000 [ 873.349894][T10059] loop6: detected capacity change from 0 to 512 [ 883.099619][T10114] loop6: detected capacity change from 0 to 2048 [ 883.147862][T10114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 884.408336][ T26] audit: type=1800 audit(1786985656.373:62): pid=10124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1180" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=1370 res=0 errno=0 [ 890.364368][T10174] loop7: detected capacity change from 0 to 8 [ 891.295377][T10174] SQUASHFS error: lzo decompression failed, data probably corrupt [ 891.303393][T10174] SQUASHFS error: Failed to read block 0x91: -5 [ 891.309903][T10174] SQUASHFS error: Unable to read metadata cache entry [8f] [ 891.317225][T10174] SQUASHFS error: Unable to read inode 0x7 [ 891.332137][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1195'. [ 894.271111][T10187] loop6: detected capacity change from 0 to 2048 [ 894.330976][T10187] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 895.833795][T10187] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 896.021365][T10206] tmpfs: Unknown parameter 'usrquota' [ 896.733157][T10187] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 896.931511][T10187] UDF-fs: Scanning with blocksize 512 failed [ 896.945598][T10187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 897.873741][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 898.370294][T10216] loop5: detected capacity change from 0 to 128 [ 898.480112][T10216] EXT4-fs (loop5): Test dummy encryption mode enabled [ 898.960607][T10216] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 898.988726][T10216] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 899.253671][T10230] loop6: detected capacity change from 0 to 128 [ 900.536455][T10230] FAT-fs (loop6): Directory bread(block 414) failed [ 900.543435][T10230] FAT-fs (loop6): Directory bread(block 415) failed [ 900.550174][T10230] FAT-fs (loop6): Directory bread(block 416) failed [ 900.557023][T10230] FAT-fs (loop6): Directory bread(block 417) failed [ 900.563883][T10230] FAT-fs (loop6): Directory bread(block 418) failed [ 900.570608][T10230] FAT-fs (loop6): Directory bread(block 419) failed [ 900.577468][T10230] FAT-fs (loop6): Directory bread(block 420) failed [ 900.605882][T10230] FAT-fs (loop6): Directory bread(block 421) failed [ 901.344731][ T7362] EXT4-fs (loop5): unmounting filesystem. [ 910.140717][T10309] loop6: detected capacity change from 0 to 256 [ 910.153225][T10309] exfat: Deprecated parameter 'namecase' [ 910.216509][T10309] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 911.435803][ T26] audit: type=1326 audit(1786985683.403:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.7.1231" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8387d9e0d9 code=0x7fc00000 [ 911.681279][ T26] audit: type=1326 audit(1786985683.433:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.7.1231" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8387d9e0d9 code=0x7fc00000 [ 911.956641][ T26] audit: type=1326 audit(1786985683.923:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.7.1231" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8387d9e0d9 code=0x7fc00000 [ 916.639898][T10358] loop5: detected capacity change from 0 to 128 [ 916.710342][T10358] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 916.748033][T10358] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.240251][T10358] ================================================================== [ 917.240263][T10358] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 917.240386][T10358] Write of size 4 at addr ffffc900043c9fe0 by task syz.5.1243/10358 [ 917.240399][T10358] [ 917.240408][T10358] CPU: 0 PID: 10358 Comm: syz.5.1243 Not tainted syzkaller #0 [ 917.240422][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.240431][T10358] Call Trace: [ 917.240437][T10358] [ 917.240443][T10358] dump_stack_lvl+0x188/0x24e [ 917.240464][T10358] ? sys_imageblit+0x1ba8/0x25d0 [ 917.240479][T10358] ? show_regs_print_info+0x12/0x12 [ 917.240498][T10358] ? load_image+0x410/0x410 [ 917.240514][T10358] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 917.240531][T10358] ? verify_lock_unused+0x140/0x140 [ 917.240551][T10358] ? __virt_addr_valid+0xbf/0x540 [ 917.240577][T10358] ? sys_imageblit+0x1ba8/0x25d0 [ 917.240590][T10358] print_report+0xa8/0x210 [ 917.240606][T10358] kasan_report+0x10b/0x140 [ 917.240632][T10358] ? sys_imageblit+0x1ba8/0x25d0 [ 917.240648][T10358] sys_imageblit+0x1ba8/0x25d0 [ 917.240667][T10358] ? sys_copyarea+0x2530/0x2530 [ 917.240682][T10358] ? __lock_acquire+0x7c40/0x7c40 [ 917.240701][T10358] ? trace_contention_end+0x5f/0x170 [ 917.240719][T10358] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 917.240770][T10358] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 917.240795][T10358] cw_putcs+0x15ef/0x18a0 [ 917.240820][T10358] ? cw_clear+0x250/0x250 [ 917.240834][T10358] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 917.240856][T10358] ? fb_get_color_depth+0x15e/0x280 [ 917.240890][T10358] fbcon_putcs+0x358/0x510 [ 917.240911][T10358] ? cw_clear+0x250/0x250 [ 917.240924][T10358] do_update_region+0x4e5/0x640 [ 917.240949][T10358] ? memcpy+0x3c/0x60 [ 917.240986][T10358] ? hide_cursor+0x320/0x320 [ 917.241002][T10358] redraw_screen+0xa2c/0x1000 [ 917.241016][T10358] ? _raw_spin_unlock+0x40/0x40 [ 917.241034][T10358] ? clear_buffer_attributes+0x320/0x320 [ 917.241050][T10358] ? tty_do_resize+0xeb/0x160 [ 917.241066][T10358] vc_do_resize+0x122c/0x17b0 [ 917.241089][T10358] ? vc_resize+0x50/0x50 [ 917.241130][T10358] ? __kmem_cache_alloc_node+0x19d/0x270 [ 917.241152][T10358] ? crc32_le_base+0x59e/0xd60 [ 917.241173][T10358] fbcon_do_set_font+0xb5c/0x1ae0 [ 917.241213][T10358] ? fbcon_blank+0xb30/0xb30 [ 917.241240][T10358] con_font_op+0xac1/0xdb0 [ 917.241263][T10358] ? reset_palette+0xdc0/0xdc0 [ 917.241286][T10358] ? __might_fault+0xa6/0x120 [ 917.241348][T10358] ? __lock_acquire+0x7c40/0x7c40 [ 917.241389][T10358] ? __might_fault+0xc2/0x120 [ 917.241407][T10358] ? __might_fault+0xa6/0x120 [ 917.241428][T10358] vt_ioctl+0x1635/0x1cc0 [ 917.241455][T10358] ? __vt_event_wait+0x260/0x260 [ 917.241484][T10358] ? __fget_files+0x28/0x460 [ 917.241511][T10358] ? tty_jobctrl_ioctl+0x164/0xb00 [ 917.241532][T10358] tty_ioctl+0x7e6/0xba0 [ 917.241551][T10358] ? security_file_ioctl+0x7c/0xa0 [ 917.241596][T10358] ? tty_get_icount+0xa0/0xa0 [ 917.241616][T10358] __se_sys_ioctl+0xfa/0x170 [ 917.241665][T10358] do_syscall_64+0x4c/0xa0 [ 917.241690][T10358] ? clear_bhb_loop+0x60/0xb0 [ 917.241714][T10358] ? clear_bhb_loop+0x60/0xb0 [ 917.241739][T10358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 917.241763][T10358] RIP: 0033:0x7f10fd19e0d9 [ 917.241780][T10358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.241797][T10358] RSP: 002b:00007f10fe02b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.241819][T10358] RAX: ffffffffffffffda RBX: 00007f10fd425fa0 RCX: 00007f10fd19e0d9 [ 917.241834][T10358] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 000000000000000a [ 917.241848][T10358] RBP: 00007f10fd235024 R08: 0000000000000000 R09: 0000000000000000 [ 917.241861][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.241873][T10358] R13: 00007f10fd426038 R14: 00007f10fd425fa0 R15: 00007ffec69f2268 [ 917.241893][T10358] [ 917.241900][T10358] [ 917.241903][T10358] The buggy address belongs to a 2-page vmalloc region starting at 0xffffc900043ca000 allocated at kcov_ioctl+0x54/0x610 [ 917.241941][T10358] Memory state around the buggy address: [ 917.241952][T10358] ffffc900043c9e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 917.241965][T10358] ffffc900043c9f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 917.241977][T10358] >ffffc900043c9f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 917.241987][T10358] ^ [ 917.241997][T10358] ffffc900043ca000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.242008][T10358] ffffc900043ca080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.242017][T10358] ================================================================== [ 917.247382][T10358] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 917.247394][T10358] CPU: 0 PID: 10358 Comm: syz.5.1243 Not tainted syzkaller #0 [ 917.247408][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.247417][T10358] Call Trace: [ 917.247422][T10358] [ 917.247427][T10358] dump_stack_lvl+0x188/0x24e [ 917.247452][T10358] ? memcpy+0x3c/0x60 [ 917.247467][T10358] ? show_regs_print_info+0x12/0x12 [ 917.247487][T10358] ? load_image+0x410/0x410 [ 917.247507][T10358] panic+0x2d3/0x710 [ 917.247520][T10358] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 917.247553][T10358] ? bpf_jit_dump+0xd0/0xd0 [ 917.247567][T10358] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 917.247583][T10358] ? _raw_spin_unlock+0x40/0x40 [ 917.247599][T10358] check_panic_on_warn+0x80/0xa0 [ 917.247616][T10358] ? sys_imageblit+0x1ba8/0x25d0 [ 917.247629][T10358] end_report+0x66/0x110 [ 917.247647][T10358] kasan_report+0x118/0x140 [ 917.247667][T10358] ? sys_imageblit+0x1ba8/0x25d0 [ 917.247682][T10358] sys_imageblit+0x1ba8/0x25d0 [ 917.247701][T10358] ? sys_copyarea+0x2530/0x2530 [ 917.247716][T10358] ? __lock_acquire+0x7c40/0x7c40 [ 917.247734][T10358] ? trace_contention_end+0x5f/0x170 [ 917.247752][T10358] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 917.247772][T10358] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 917.247793][T10358] cw_putcs+0x15ef/0x18a0 [ 917.247815][T10358] ? cw_clear+0x250/0x250 [ 917.247829][T10358] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 917.247852][T10358] ? fb_get_color_depth+0x15e/0x280 [ 917.247869][T10358] fbcon_putcs+0x358/0x510 [ 917.247890][T10358] ? cw_clear+0x250/0x250 [ 917.247902][T10358] do_update_region+0x4e5/0x640 [ 917.247915][T10358] ? memcpy+0x3c/0x60 [ 917.247930][T10358] ? hide_cursor+0x320/0x320 [ 917.247946][T10358] redraw_screen+0xa2c/0x1000 [ 917.247959][T10358] ? _raw_spin_unlock+0x40/0x40 [ 917.247976][T10358] ? clear_buffer_attributes+0x320/0x320 [ 917.247990][T10358] ? tty_do_resize+0xeb/0x160 [ 917.248005][T10358] vc_do_resize+0x122c/0x17b0 [ 917.248027][T10358] ? vc_resize+0x50/0x50 [ 917.248041][T10358] ? __kmem_cache_alloc_node+0x19d/0x270 [ 917.248056][T10358] ? crc32_le_base+0x59e/0xd60 [ 917.248070][T10358] fbcon_do_set_font+0xb5c/0x1ae0 [ 917.248128][T10358] ? fbcon_blank+0xb30/0xb30 [ 917.248156][T10358] con_font_op+0xac1/0xdb0 [ 917.248179][T10358] ? reset_palette+0xdc0/0xdc0 [ 917.248200][T10358] ? __might_fault+0xa6/0x120 [ 917.248222][T10358] ? __lock_acquire+0x7c40/0x7c40 [ 917.248253][T10358] ? __might_fault+0xc2/0x120 [ 917.248271][T10358] ? __might_fault+0xa6/0x120 [ 917.248310][T10358] vt_ioctl+0x1635/0x1cc0 [ 917.248336][T10358] ? __vt_event_wait+0x260/0x260 [ 917.248364][T10358] ? __fget_files+0x28/0x460 [ 917.248391][T10358] ? tty_jobctrl_ioctl+0x164/0xb00 [ 917.248414][T10358] tty_ioctl+0x7e6/0xba0 [ 917.248432][T10358] ? security_file_ioctl+0x7c/0xa0 [ 917.248452][T10358] ? tty_get_icount+0xa0/0xa0 [ 917.248471][T10358] __se_sys_ioctl+0xfa/0x170 [ 917.248496][T10358] do_syscall_64+0x4c/0xa0 [ 917.248519][T10358] ? clear_bhb_loop+0x60/0xb0 [ 917.248544][T10358] ? clear_bhb_loop+0x60/0xb0 [ 917.248568][T10358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 917.248591][T10358] RIP: 0033:0x7f10fd19e0d9 [ 917.248608][T10358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.248624][T10358] RSP: 002b:00007f10fe02b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.248644][T10358] RAX: ffffffffffffffda RBX: 00007f10fd425fa0 RCX: 00007f10fd19e0d9 [ 917.248658][T10358] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 000000000000000a [ 917.248671][T10358] RBP: 00007f10fd235024 R08: 0000000000000000 R09: 0000000000000000 [ 917.248683][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.248695][T10358] R13: 00007f10fd426038 R14: 00007f10fd425fa0 R15: 00007ffec69f2268 [ 917.248715][T10358] [ 917.249320][T10358] Kernel Offset: disabled [ 918.095362][T10358] Rebooting in 86400 seconds..