last executing test programs: 6m59.64125801s ago: executing program 0 (id=1633): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 6m59.340052717s ago: executing program 0 (id=1634): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) socket(0xf, 0x4, 0x8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) socket$caif_stream(0x25, 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x0, 0x5, 0x3}) mount$bpf(0x0, &(0x7f0000002840)='./file2\x00', &(0x7f00000029c0), 0x228000, &(0x7f0000002c00)={[{@gid}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq}, {@obj_role={'obj_role', 0x3d, ':!)/'}}, {@smackfsdef={'smackfsdef', 0x3d, '%%'}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@appraise_type}, {@subj_type={'subj_type', 0x3d, '\\)\b\'!-'}}, {@appraise_type}]}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000280)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/87, 0x57}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/218, 0xda}, {&(0x7f0000002580)=""/23, 0x17}, {0x0}], 0x6, &(0x7f0000002700)=""/138, 0x8a}, 0x40012060) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@sg0, 0x0, &(0x7f0000002940)) 6m54.023998969s ago: executing program 0 (id=1643): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtfilter={0x8a4, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x8, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x874, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x22, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x3, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0x0, 0xd460, 0x200, 0x80000001, 0x10, 0x4, 0x8, 0x7, 0x7, 0x2, 0x4, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x1, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0x4, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x10000, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x5, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x7ff, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0xfffffffe, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x3, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x7e, 0xfffffb01, 0x4, 0x6, 0xd, 0xb89, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x8, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x6, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x200, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0x4, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}]}}]}, 0x8a4}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) 6m51.108869766s ago: executing program 0 (id=1650): r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000001c0)={0x20000000, 0xc6f, 0x101}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x78, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) keyctl$negate(0xd, 0x0, 0x7, r0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000100)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r6 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r6, 0x110, 0x6, 0x0, 0x0) keyctl$link(0x8, r0, r0) pwritev(r5, &(0x7f0000000280)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x4a628) 6m50.242096416s ago: executing program 0 (id=1652): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0x640b1}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000092010000000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd700004350000020001000000000000000000480003006465666c61746500"/233], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) 6m36.018033292s ago: executing program 0 (id=1683): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, &(0x7f0000000840)={0x9, 0x401}, &(0x7f0000000880)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000000240)="ab", 0x1, 0x400c804, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000008c0)={0x5}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x8000200, 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f00000007c0)="42f1d77a032190040855") preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m34.876756288s ago: executing program 32 (id=1683): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, &(0x7f0000000840)={0x9, 0x401}, &(0x7f0000000880)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000000240)="ab", 0x1, 0x400c804, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000008c0)={0x5}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x8000200, 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f00000007c0)="42f1d77a032190040855") preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m59.103905207s ago: executing program 3 (id=1921): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x2, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0x8000000000000b, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x124, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x1) read(r2, &(0x7f0000000280)=""/249, 0xf9) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="a77704725bebf554", 0x8}], 0x1) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0x2000a78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00005c9000/0x1000)=nil, 0x1000, 0xb) 3m55.914763728s ago: executing program 3 (id=1924): socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x3d, &(0x7f0000000200)=0x10000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x17, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r7 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/214, 0xd6}], 0x1, &(0x7f0000000940)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x0) preadv(r3, &(0x7f00000029c0)=[{&(0x7f0000002200)=""/175, 0xaf}], 0x1, 0x20007c, 0x8001) 3m51.654638045s ago: executing program 3 (id=1930): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) 3m43.096582951s ago: executing program 3 (id=1942): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000040)=[@enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18}, @wrmsr={0x65, 0x20, {0x854, 0xf}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xd9, 0x5, 0x8, 0x2}}, @nested_load_code={0x12e, 0x5e, {0x1, "b9870100000f32430f221e263e670f01c548b801ff26a05c1ab7610f23d00f21f835200000080f23f8f3430f090f01d166b831018ee0460f070f00920f7a0000c4a1a173fe00"}}, @cpuid={0x64, 0x18, {0x36ca, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x77, 0x80, 0x4, 0xb}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_load_syzos={0x136, 0x98, {0x1, 0x6, [@nested_vmlaunch={0x12f, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x8, 0x9}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x9, 0x1}}]}}, @wr_crn={0x67, 0x20, {0x8, 0xfffffffffffffffb}}, @in_dx={0x69, 0x20, {0x5edb, 0x4}}, @nested_load_code={0x12e, 0x5d, {0x3, "48b8ca000000000000000f23c00f21f835000002000f23f82d043a4785470f01df450f2c8749f6000066470f3825e2c4a1f91010660fc7b2f16e937e2e450f01cb0f0947a5"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x52, 0xff, 0x5, 0xb6}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x7, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x77, 0x0, 0x7fff}}], 0x353}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000004c0)={[0x4, 0x1, 0x400, 0x3, 0x9a, 0x9531, 0xffffffffffffffff, 0x0, 0x9, 0xae, 0x6, 0x60, 0x9, 0x3, 0x3, 0x5], 0x25000, 0x20000}) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0xff], 'ip_vti0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x20004000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0xfffffffffffffd83) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 3m40.099178827s ago: executing program 3 (id=1945): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1}, 0x28) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x94) sendmsg$kcm(r1, 0x0, 0x814) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) 3m33.856180555s ago: executing program 3 (id=1951): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x4, 0xffff, 0x0, 0x9, 0x6, 0x10401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0xfff, 0x72, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x80000001, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0x6, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0x2, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bf7, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x4, 0x7, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0x7, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x400, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x5, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f00005aa000/0x4000)=nil, 0x4000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="89000000120081ae08060cdc030000007f366a006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000", 0x8b}], 0x1}, 0x2000404c) 3m17.390653751s ago: executing program 33 (id=1951): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x4, 0xffff, 0x0, 0x9, 0x6, 0x10401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0xfff, 0x72, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x80000001, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0x6, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0x2, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bf7, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x4, 0x7, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0x7, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x400, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x5, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f00005aa000/0x4000)=nil, 0x4000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="89000000120081ae08060cdc030000007f366a006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000", 0x8b}], 0x1}, 0x2000404c) 29.606598212s ago: executing program 5 (id=2253): r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000001c0)={0x20000000, 0xc6f, 0x101}) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x78, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) keyctl$negate(0xd, 0x0, 0x7, r0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000100)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r8 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r8, 0x110, 0x6, 0x0, 0x0) keyctl$link(0x8, r0, r0) pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x4a628) 23.992152463s ago: executing program 2 (id=2254): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) mq_open(0x0, 0x2, 0x48, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0x8d71ca88fffffffd, 0x0) mount$overlay(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000), 0x880, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './cgroup.cpu/cgroup.procs'}}]}) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x4, 0x80007, 0x9, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) 22.106825911s ago: executing program 2 (id=2258): socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x3d, &(0x7f0000000200)=0x10000002) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x17, 0x0) keyctl$session_to_parent(0x12) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r7 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/214, 0xd6}], 0x1, &(0x7f0000000940)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x0) preadv(r3, &(0x7f00000029c0)=[{&(0x7f0000002200)=""/175, 0xaf}], 0x1, 0x20007c, 0x8001) 22.106497221s ago: executing program 4 (id=2259): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r1, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r3) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x1808004, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b26, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xffe1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x100, 0xcb) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12) 20.935635251s ago: executing program 5 (id=2263): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) unshare(0x2040600) statx(r4, 0x0, 0x1000, 0x10, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_NAME(0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r6 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000080)={0x5, {0xf8000002, 0x9, 0x8, 0xb}}) lseek(r5, 0x4, 0x1) getdents64(r5, 0xffffffffffffffff, 0x43) 19.124247716s ago: executing program 5 (id=2264): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000205000100070000008d19e0da1eab44795dee96d502b9dd1c0facca66750302e07ad5035f33ea1709268fc24f1c6db1613898b0be3c12717a4c67"], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80d0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_open_dev$loop(0x0, 0x3, 0x2000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) 18.643692758s ago: executing program 6 (id=2265): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtfilter={0x8a4, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x8, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x874, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x22, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x3, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0x0, 0xd460, 0x200, 0x80000001, 0x10, 0x4, 0x8, 0x7, 0x7, 0x2, 0x4, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x1, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0x4, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x10000, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x5, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x7ff, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0xfffffffe, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x3, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x7e, 0xfffffb01, 0x4, 0x6, 0xd, 0xb89, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x8, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x6, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x200, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0x4, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}]}}]}, 0x8a4}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) 16.909940372s ago: executing program 5 (id=2267): socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x3d, &(0x7f0000000200)=0x10000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 16.803520225s ago: executing program 4 (id=2268): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000280)=0x3, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, 0x0, &(0x7f0000000040), &(0x7f0000000140)) umount2(&(0x7f0000000080)='./file0\x00', 0x9) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000400060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) syslog(0x3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0xffffffff, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x3, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0xd, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x4, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x40000a9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484451], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x20, 0x7e, 0x9, 0x9602, 0x40006, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) 14.988054061s ago: executing program 6 (id=2269): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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") r1 = open(0x0, 0x1, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000001040)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@errors_continue}, {@nodiscard}, {@nodiscard}, {@nodioread_nolock}]}, 0x81, 0xbe0, &(0x7f0000000440)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) connect$can_bcm(r1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x7, &(0x7f00000010c0)=""/138) r6 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000001c00), 0x12) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r9 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r9, 0x2007ffc) sendfile(r9, r9, 0x0, 0x2000000000006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300), 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") 13.791231981s ago: executing program 1 (id=2270): socket$kcm(0xa, 0x3, 0x3a) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) write$sndseq(r4, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) 12.779217427s ago: executing program 1 (id=2271): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="800400001900", 0x0, 0x0, 0x10012, 0xfffbffff, 0x0}) socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.778359427s ago: executing program 5 (id=2281): socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x3d, &(0x7f0000000200)=0x10000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 10.101618794s ago: executing program 6 (id=2272): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtfilter={0x8a4, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x8, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x874, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x22, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x3, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0x0, 0xd460, 0x200, 0x80000001, 0x10, 0x4, 0x8, 0x7, 0x7, 0x2, 0x4, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x1, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0x4, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x10000, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x5, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x7ff, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0xfffffffe, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x3, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x7e, 0xfffffb01, 0x4, 0x6, 0xd, 0xb89, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x8, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x6, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x200, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0x4, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}]}}]}, 0x8a4}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) 10.065995155s ago: executing program 5 (id=2273): r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000001c0)={0x20000000, 0xc6f, 0x101}) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x78, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) keyctl$negate(0xd, 0x0, 0x7, r0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000100)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r8 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r8, 0x110, 0x6, 0x0, 0x0) keyctl$link(0x8, r0, r0) pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x4a628) 9.999321187s ago: executing program 4 (id=2274): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtfilter={0x8a4, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x8, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x874, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x22, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x3, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0x0, 0xd460, 0x200, 0x80000001, 0x10, 0x4, 0x8, 0x7, 0x7, 0x2, 0x4, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x1, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0x4, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x10000, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x5, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x7ff, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0xfffffffe, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x3, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x7e, 0xfffffb01, 0x4, 0x6, 0xd, 0xb89, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x8, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x6, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x200, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0x4, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}]}}]}, 0x8a4}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) 9.760472343s ago: executing program 1 (id=2275): setresuid(0x0, 0x0, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x8, 0x0}, 0x0) getrusage(0xffffffffffffffff, 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x249, &(0x7f0000000bc0)="$eJzs2r9vW1UUB/DzQtuEVKmN+KVWQlzBACxPTWaGRtBKiEggqJEKEuoreQErDzvKsyIZIZoJVv4EZsTIhoQ6smThL2Bgy5KxA+Ih1wHskgwVkJjy+Sw+0vXXPlfv+uoM3n/5y483N+p8oxjEXJbF3JXYjbtZtGMufrcbL71w44dn3r7x7uura2tX30rp2ur15ZWU0oVnv3/v02+euzM4/863F76bj732+/sHKz/vPbV3cf/X6x9169StU68/SEW61e8PiltVmda79Wae0ptVWdRl6vbqcntqfaPqb20NU9FbX1rc2i7rOhW9Ydosh2nQT4PtYSo+LLq9lOd5WloM/o7O13ebJg6aszejaZpHv4rzd2Lpp2hF9ljKHr+SPXkze3o3u3jQNK3TbpV/xeTznw/P//9m4lJfiKi+2OnsdMav4/XVjehGFWVcjlb8EqNjcmhcX3tt7erldE87Pq9uH+Zvn+s8Mp1fjla0j84vj/NpMr/TmY/FiLMRh/mVaMUTR+dXjswvxIvPT3x/Hq348YPoRxXrMcr+mf9sOaVX3li7L3/p3vsAAB42efpDe3r+Gc9veX7c+jj/APPhffPVmbh05nT3TkQ9/GSzqKpy+6EtRrucgTZOtMj+uQ98dQa289diPh4olUXsjs7BTDR/bpZ+egvHtnGq1xInZPqeBAAAAAAAAAAA4L/ipP6BCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcJzfAgAA//8vZsmk") r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x105}, 0x38) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x7, 0x0, 0x32315559, 0x8, 0xc, [{0x9, 0x4000008}, {0x3, 0x7}, {0x6c02412a, 0xd}, {0x6, 0x10000007}, {0x3, 0x3}, {0x2, 0x5}, {0x406, 0xffffffff}, {0xd, 0x3}], 0xcb, 0x9, 0x6, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r4 = mq_open(0x0, 0x42, 0x48, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000480)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$uinput_user_dev(r5, &(0x7f0000000180)={'syz1\x00', {0x3, 0x9, 0x0, 0xfff7}, 0x38, [0xffff, 0x5, 0x7, 0x40000e9, 0x4, 0x6, 0x5, 0x10, 0x7, 0x950c, 0x1294, 0x8, 0x2, 0x5506fd78, 0x8000, 0xffffffa2, 0x7, 0x1, 0x8, 0x7f, 0xe5, 0x9, 0x3, 0x222, 0x1, 0xde, 0x10000, 0x3, 0x5, 0xbf7, 0x490, 0x8, 0x6, 0x2, 0x3b66, 0x7, 0x100, 0x9, 0x3, 0x1, 0xb, 0x5, 0x9, 0x6, 0x4, 0x1, 0xa, 0x0, 0x635dfebb, 0x0, 0xffff0001, 0xd, 0x3, 0x0, 0x7, 0x163, 0x0, 0xae, 0x4, 0xfffffff7, 0xd60, 0x3, 0x2, 0xfffffff9], [0x7, 0x7, 0x7, 0xb, 0xdd6, 0x106, 0x400, 0x7fff, 0x7, 0x52263b86, 0x0, 0x3, 0x3, 0xfffffff7, 0x9, 0x3, 0x4, 0x200, 0xfffffff8, 0xb0, 0x6, 0x8, 0x20000, 0x45, 0x2, 0x80000000, 0x2, 0x3, 0x3, 0x9, 0x6, 0x9, 0x3, 0xc, 0x385a, 0x3ff8, 0x9, 0x1, 0x7, 0x5, 0x8, 0x4, 0x1, 0x8, 0x3, 0xfffff305, 0x6a2e, 0x1ff, 0xf4f4, 0x8, 0x2, 0x36, 0xb6, 0x92, 0x0, 0x1, 0x2, 0xcd32, 0x7, 0x1cd4, 0x5a26, 0x17, 0x80000001, 0x49], [0x4, 0x8000, 0x0, 0x23, 0x0, 0xaf, 0x200, 0x0, 0x4, 0x80080000, 0x1, 0x6, 0x51d, 0x9, 0x5, 0xa4, 0x6, 0x0, 0x4, 0x1, 0x2, 0x7, 0x0, 0xe000000, 0xacd, 0x44, 0x7, 0x9, 0x40, 0xc, 0x7, 0x6, 0xa, 0x2, 0x7, 0xb7, 0x2, 0xa4, 0x3, 0x0, 0x4, 0x81, 0xffff, 0x7, 0xfff, 0xdb91, 0x0, 0xd, 0x58cb, 0x1, 0x519eb04a, 0xf, 0xdd7, 0x4, 0xffff, 0x6, 0x6661, 0x4, 0x401, 0x7eedff85, 0x0, 0x1, 0x9, 0xc7fc], [0x7, 0x1, 0xc, 0x5, 0x200, 0x101, 0x101, 0x4, 0x99, 0x4, 0x8001, 0x5, 0xe02c, 0x816b, 0xe, 0x9, 0x101, 0x5, 0x4, 0x200, 0x1, 0x5365, 0x5, 0xb, 0x7, 0x4, 0x5, 0xfffffffb, 0x10, 0x3, 0x1, 0xd6, 0x5, 0x8, 0xfcf, 0x8, 0x8, 0x2, 0x6, 0x10001, 0x3919, 0xffff, 0x1000, 0x1, 0x8, 0x80000000, 0xb, 0xc33, 0x4, 0x3, 0x3, 0xc2e, 0x8, 0x2, 0x8001, 0x1, 0x4, 0x0, 0x2e, 0x7fffdfff, 0xff, 0x1ff, 0x6, 0x5]}, 0x45c) 8.543082924s ago: executing program 2 (id=2276): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mq_open(0x0, 0x2, 0x48, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0x8d71ca88fffffffd, 0x0) mount$overlay(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000), 0x880, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './cgroup.cpu/cgroup.procs'}}]}) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x4, 0x80007, 0x9, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) 8.121323864s ago: executing program 6 (id=2277): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000205000100070000008d19e0da1eab44795dee96d502b9dd1c0facca66750302e07ad5035f33ea1709268fc24f1c6db1613898b0be3c12717a4c67"], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80d0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_open_dev$loop(0x0, 0x3, 0x2000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) 7.463962071s ago: executing program 1 (id=2278): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='my_configfs/nullb/nullb1/power\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[@ANYBLOB="df26337ef300aaaaaaaaaa2608004b00"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) syz_open_dev$I2C(0x0, 0x837, 0x452d40) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x4000044) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000000314230c2ebd7000ffdbdf250900020073797a310000000008004100736977001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 7.396269503s ago: executing program 4 (id=2279): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtfilter={0x8a4, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x8, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x874, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x22, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x3, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0x0, 0xd460, 0x200, 0x80000001, 0x10, 0x4, 0x8, 0x7, 0x7, 0x2, 0x4, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x1, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0x4, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x10000, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x5, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x7ff, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0xfffffffe, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x3, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x7e, 0xfffffb01, 0x4, 0x6, 0xd, 0xb89, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x8, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x6, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x200, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0x4, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}]}}]}, 0x8a4}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) 6.31294366s ago: executing program 2 (id=2280): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2929c0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) timerfd_create(0x9, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x408100) socket$inet6(0xa, 0x2, 0x0) r5 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x24000, 0x148, 0x26}, 0x18) mkdirat(r5, 0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x88c0) close(0x4) close(r0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 5.979009858s ago: executing program 6 (id=2282): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0xdb) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006800090300000000000000000a000000000000000400040008000100010000002c0640da09e7ffbdb1986b14fab1e3ce439c004578647a7a4c4e363f759ce2ada42ea310af3417c04d958511f5df94e166d5c2e40011b7ddbb0a9dcacb65b62ba6900f53b682250d9f5be4b24402587a6a8c85ef"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1\x00', 0x1ff) chdir(&(0x7f0000000400)='./my_configfs/usb_gadget/g1\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000040)='functions/uvc.usb0/streaming/header/h\x00', 0x1ef) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xf, 0x3, 0x68, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2={0xff, 0x5}, 0x3f, 0x8, 0xe3e1, 0xd00}}) symlinkat(&(0x7f0000001300)='functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='configs/c.1/uvc.usb0\x00') 4.879957146s ago: executing program 2 (id=2283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x5fae, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x0, 0x1d, 0x0, r4}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f00000012c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={0x0, 0x2, 0xf}, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a, 0x1000000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {0x0}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3.892167722s ago: executing program 6 (id=2284): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x20000, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 3.891744562s ago: executing program 4 (id=2285): socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x3d, &(0x7f0000000200)=0x10000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 3.846369793s ago: executing program 1 (id=2286): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtfilter={0x8a4, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x8, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x874, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x22, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x3, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0x0, 0xd460, 0x200, 0x80000001, 0x10, 0x4, 0x8, 0x7, 0x7, 0x2, 0x4, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x1, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0x4, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x10000, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x5, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x7ff, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0xfffffffe, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x3, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x7e, 0xfffffb01, 0x4, 0x6, 0xd, 0xb89, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x8, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x6, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x200, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0x4, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}]}}]}, 0x8a4}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) 1.343164066s ago: executing program 2 (id=2287): r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x78, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) keyctl$negate(0xd, 0x0, 0x7, r0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000100)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r8 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r8, 0x110, 0x6, 0x0, 0x0) keyctl$link(0x8, r0, r0) pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x4a628) 478.302168ms ago: executing program 4 (id=2288): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) 0s ago: executing program 1 (id=2289): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtfilter={0x8a4, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x8, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x874, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x22, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x3, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0x0, 0xd460, 0x200, 0x80000001, 0x10, 0x4, 0x8, 0x7, 0x7, 0x2, 0x4, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x1, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0x4, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x10000, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x5, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x7ff, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0xfffffffe, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x3, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x7e, 0xfffffb01, 0x4, 0x6, 0xd, 0xb89, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x8, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x6, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x200, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0x4, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}]}}]}, 0x8a4}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) kernel console output (not intermixed with test programs): yz.2.1564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2e59e019 code=0x7ffc0000 [ 958.552227][ T26] audit: type=1326 audit(1786339382.172:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.2.1564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2e59e019 code=0x7ffc0000 [ 958.577378][ T26] audit: type=1326 audit(1786339382.172:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.2.1564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f9d2e59e019 code=0x7ffc0000 [ 958.602020][ T26] audit: type=1326 audit(1786339382.172:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.2.1564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2e59e019 code=0x7ffc0000 [ 958.952224][T11244] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1569'. [ 960.507646][T11257] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1574'. [ 960.848330][T11260] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1555'. [ 964.503880][T11290] bridge0: port 3(erspan0) entered blocking state [ 964.510586][T11290] bridge0: port 3(erspan0) entered disabled state [ 964.521812][T11290] device erspan0 entered promiscuous mode [ 964.529569][T11290] bridge0: port 3(erspan0) entered blocking state [ 964.536179][T11290] bridge0: port 3(erspan0) entered forwarding state [ 964.550536][T11290] device erspan0 left promiscuous mode [ 964.556893][T11290] bridge0: port 3(erspan0) entered disabled state [ 967.458173][T11310] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1587'. [ 969.445830][T11326] loop3: detected capacity change from 0 to 512 [ 970.153162][T11336] overlayfs: missing 'lowerdir' [ 971.234153][T11316] Process accounting resumed [ 978.015428][T11335] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 978.023015][T11335] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 978.057538][T11335] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 978.065418][T11335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 978.071486][T11335] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 978.084954][T11335] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 978.092215][T11335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 978.098205][T11335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 978.104325][T11335] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 978.111124][T11335] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 979.750028][T11384] ieee802154 phy1 wpan1: encryption failed: -22 [ 979.947827][T11383] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1601'. [ 980.061488][ T4275] Bluetooth: hci0: command 0x0c1a tx timeout [ 980.141550][ T4275] Bluetooth: hci3: command 0x0c1a tx timeout [ 980.148303][ T4275] Bluetooth: hci2: command 0x0c1a tx timeout [ 980.155188][ T4275] Bluetooth: hci1: command 0x0c1a tx timeout [ 982.141328][T11395] Bluetooth: hci0: command 0x0406 tx timeout [ 982.221603][T11395] Bluetooth: hci1: command 0x0406 tx timeout [ 982.221860][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 982.864580][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 982.864598][ T26] audit: type=1800 audit(1786339408.402:158): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1610" name="idVendor" dev="configfs" ino=67700 res=0 errno=0 [ 983.081778][ T26] audit: type=1800 audit(1786339408.432:159): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1610" name="serialnumber" dev="configfs" ino=67701 res=0 errno=0 [ 983.103172][ T26] audit: type=1800 audit(1786339408.432:160): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1610" name="manufacturer" dev="configfs" ino=67702 res=0 errno=0 [ 988.750306][T11452] loop0: detected capacity change from 0 to 256 [ 988.757176][T11452] exfat: Deprecated parameter 'namecase' [ 988.802254][T11452] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 991.680891][T11481] loop3: detected capacity change from 0 to 128 [ 991.801501][T11481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 991.909264][T11481] ext4 filesystem being mounted at /324/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 992.512804][T11496] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 993.201438][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.402314][T11492] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1626'. [ 993.508115][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 995.105978][T11511] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 995.264336][T11511] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 995.277191][T11511] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 995.290610][T11511] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 995.311897][T11511] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 995.322278][T11511] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 995.332395][T11511] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 995.365603][T11511] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 995.393060][T11511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 996.598749][T11518] can0: slcan on ttyS3. [ 996.688169][T11518] can0 (unregistered): slcan off ttyS3. [ 997.225976][T11522] afs: Bad value for 'source' [ 997.247533][T11522] siw: device registration error -23 [ 1003.442465][T11575] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1652'. [ 1006.823913][T11602] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1660'. [ 1011.177904][T11633] loop4: detected capacity change from 0 to 512 [ 1011.196642][T11633] FAT-fs (loop4): Directory bread(block 199916) failed [ 1011.203840][T11633] FAT-fs (loop4): Directory bread(block 199917) failed [ 1011.211371][T11633] FAT-fs (loop4): Directory bread(block 199918) failed [ 1011.219335][T11633] FAT-fs (loop4): Directory bread(block 199919) failed [ 1011.226992][T11633] FAT-fs (loop4): Directory bread(block 199920) failed [ 1011.234479][T11633] FAT-fs (loop4): Directory bread(block 199921) failed [ 1011.241882][T11633] FAT-fs (loop4): Directory bread(block 199922) failed [ 1011.250226][T11633] FAT-fs (loop4): Directory bread(block 199923) failed [ 1011.385824][T11633] FAT-fs (loop4): FAT read failed (blocknr 128) [ 1012.692031][T11643] fuse: Unknown parameter '' [ 1014.370418][T11572] bridge0: port 4(syz_tun) entered disabled state [ 1014.708122][T11572] device syz_tun left promiscuous mode [ 1014.713887][T11572] bridge0: port 4(syz_tun) entered disabled state [ 1017.065388][ T7631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.077847][ T7631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.157861][ T7631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.201650][ T7631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.417475][ T7631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.665002][ T7631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.840658][ T7631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.869696][ T7631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.924014][T11696] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1686'. [ 1019.453746][T11395] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1019.485368][T11395] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1019.494623][T11395] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1019.543399][T11395] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1019.557109][T11395] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1019.569387][T11395] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1021.829260][T11395] Bluetooth: hci3: command 0x0409 tx timeout [ 1024.051460][T11721] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1690'. [ 1024.149467][T11395] Bluetooth: hci3: command 0x041b tx timeout [ 1024.460975][ T7631] bridge0: port 3(erspan0) entered disabled state [ 1024.802254][ T7631] device erspan0 left promiscuous mode [ 1024.870116][ T94] block nbd3: Attempted send on invalid socket [ 1024.876807][ T94] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1024.886995][T11734] efs: cannot read volume header [ 1024.929575][ T7631] bridge0: port 3(erspan0) entered disabled state [ 1025.334060][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 1026.152960][T11698] chnl_net:caif_netlink_parms(): no params data found [ 1026.390028][T11395] Bluetooth: hci3: command 0x040f tx timeout [ 1028.642062][T11395] Bluetooth: hci3: command 0x0419 tx timeout [ 1029.213286][T11698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.376424][T11698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.628512][T11698] device bridge_slave_0 entered promiscuous mode [ 1029.860097][T11698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.867423][T11698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.876197][T11698] device bridge_slave_1 entered promiscuous mode [ 1030.373614][T11698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.387667][T11698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.602620][T11698] team0: Port device team_slave_0 added [ 1030.664618][T11698] team0: Port device team_slave_1 added [ 1030.886420][T11806] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1704'. [ 1031.858210][ T7631] device hsr_slave_0 left promiscuous mode [ 1031.937255][ T7631] device hsr_slave_1 left promiscuous mode [ 1031.959074][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.031478][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.088740][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.150046][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.278711][ T7631] device bridge_slave_1 left promiscuous mode [ 1032.294529][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.325881][ T7631] device bridge_slave_0 left promiscuous mode [ 1032.436418][T11820] loop3: detected capacity change from 0 to 512 [ 1032.579550][T11820] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1032.793316][T11820] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #17: comm syz.3.1707: inode has both inline data and extents flags [ 1032.811784][T11820] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1707: couldn't read orphan inode 17 (err -117) [ 1032.833605][T11820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1032.881350][T11820] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1707: bg 0: block 65: padding at end of block bitmap is not set [ 1032.912981][T11820] Quota error (device loop3): write_blk: dquota write failed [ 1032.930359][T11820] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1032.941301][T11820] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1707: Failed to acquire dquot type 0 [ 1033.000264][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.272533][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 1033.521494][ T7631] device veth0_macvtap left promiscuous mode [ 1033.535688][ T7631] device veth1_vlan left promiscuous mode [ 1033.577773][ T7631] device veth0_vlan left promiscuous mode [ 1037.673789][T11857] IPVS: stopping master sync thread 5018 ... [ 1039.260938][T11883] xt_l2tp: invalid flags combination: 4 [ 1039.370899][ T7631] team0 (unregistering): Port device team_slave_1 removed [ 1039.587521][ T7631] team0 (unregistering): Port device team_slave_0 removed [ 1039.699623][ T7631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.816139][ T7631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.849465][ T7631] bond0 (unregistering): Released all slaves [ 1041.531206][T11698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.603327][T11698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.721590][T11698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.747980][T11698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.754982][T11698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.781194][T11698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.999585][T11698] device hsr_slave_0 entered promiscuous mode [ 1042.049380][T11698] device hsr_slave_1 entered promiscuous mode [ 1042.246973][T11698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1042.276163][T11698] Cannot create hsr debugfs directory [ 1042.770197][T11906] loop3: detected capacity change from 0 to 4096 [ 1042.925818][T11906] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1043.883716][T11698] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1044.172995][T11698] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1044.758970][T11698] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1044.924732][T11698] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1046.172010][T11698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.239563][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1046.270307][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1046.309822][T11698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.291695][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1047.438204][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1047.507205][ T94] block nbd1: Attempted send on invalid socket [ 1047.510872][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.513684][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1047.520888][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.531503][T11943] efs: cannot read volume header [ 1047.593996][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1047.606326][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1732'. [ 1047.615998][T11941] device bridge_slave_1 left promiscuous mode [ 1047.647782][T11941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.686461][T11941] device bridge_slave_0 left promiscuous mode [ 1047.709346][T11941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.991737][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1048.011758][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1048.077186][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.084397][ T7631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.161439][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1048.195802][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1048.239023][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1048.288449][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1048.392144][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1048.449232][T11698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1048.516047][T11698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1048.691340][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1048.774796][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1048.806223][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1048.837141][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1048.890548][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1048.944252][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1048.976102][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1049.991940][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1050.013156][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1051.491317][T11698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.907112][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1053.970182][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1055.118806][ T9729] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1055.207095][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1055.313977][ T9729] usb 5-1: Using ep0 maxpacket: 16 [ 1055.323716][ T9729] usb 5-1: config 111 has too many interfaces: 116, using maximum allowed: 32 [ 1055.324752][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1055.333247][ T9729] usb 5-1: config 111 has an invalid descriptor of length 47, skipping remainder of the config [ 1055.353757][ T9729] usb 5-1: config 111 has 0 interfaces, different from the descriptor's value: 116 [ 1055.371448][ T9729] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1055.383558][ T9729] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1055.391872][ T9729] usb 5-1: Product: syz [ 1055.396668][ T9729] usb 5-1: Manufacturer: syz [ 1055.410986][ T9729] usb 5-1: SerialNumber: syz [ 1055.459555][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1055.476028][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1055.487242][T12019] input: syz0 as /devices/virtual/input/input23 [ 1055.667923][ T9729] usb 5-1: USB disconnect, device number 2 [ 1055.774393][T11698] device veth0_vlan entered promiscuous mode [ 1055.809378][T12019] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1745'. [ 1055.843082][T11698] device veth1_vlan entered promiscuous mode [ 1056.370736][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1056.414624][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1057.177128][T11698] device veth0_macvtap entered promiscuous mode [ 1057.368743][T11698] device veth1_macvtap entered promiscuous mode [ 1057.636100][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.657220][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.708887][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.719485][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.796163][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.844842][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.877767][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.899735][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.936495][T11698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.944204][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1057.983273][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1058.009695][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1058.079504][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1058.153230][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.180178][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.277436][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.376000][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.456693][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.467230][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.423648][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.549413][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.561620][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.587301][T11698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.595410][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1060.619012][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1060.728767][T11698] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.770062][T11698] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.780324][T11698] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.789663][T11698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.333850][ T7653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.353027][ T7653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.420419][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1061.601100][ T4455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.616788][ T4455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.629780][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1062.943941][T12081] overlayfs: missing 'lowerdir' [ 1065.254585][T12098] loop4: detected capacity change from 0 to 128 [ 1065.393158][T12098] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1065.438732][T12098] ext4 filesystem being mounted at /370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.471035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1066.239760][T12114] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1066.927535][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 1069.406136][T12143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1769'. [ 1070.697989][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 1071.074723][ T53] block nbd1: Attempted send on invalid socket [ 1071.081082][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1071.090500][T12151] efs: cannot read volume header [ 1071.208631][T12154] bridge0: port 3(erspan0) entered blocking state [ 1071.215490][T12154] bridge0: port 3(erspan0) entered disabled state [ 1071.226690][T12154] device erspan0 entered promiscuous mode [ 1071.234123][T12154] bridge0: port 3(erspan0) entered blocking state [ 1071.240731][T12154] bridge0: port 3(erspan0) entered forwarding state [ 1071.279819][T12154] device erspan0 left promiscuous mode [ 1071.286023][T12154] bridge0: port 3(erspan0) entered disabled state [ 1076.783298][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1077.010847][ T4321] usb 3-1: Using ep0 maxpacket: 16 [ 1077.030550][ T4321] usb 3-1: config 111 has too many interfaces: 116, using maximum allowed: 32 [ 1077.051538][ T4321] usb 3-1: config 111 has an invalid descriptor of length 47, skipping remainder of the config [ 1077.065087][ T4321] usb 3-1: config 111 has 0 interfaces, different from the descriptor's value: 116 [ 1077.088241][ T4321] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1077.105812][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1077.117229][ T4321] usb 3-1: Product: syz [ 1077.143319][ T4321] usb 3-1: Manufacturer: syz [ 1077.161467][ T4321] usb 3-1: SerialNumber: syz [ 1077.433801][ T4321] usb 3-1: USB disconnect, device number 3 [ 1079.702151][T12233] loop5: detected capacity change from 0 to 128 [ 1079.813836][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.822656][T12233] FAT-fs (loop5): Filesystem has been set read-only [ 1079.829775][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.838387][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.847120][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.855584][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.864120][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.872634][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.881105][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.890066][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.898929][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.907755][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.916304][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.924777][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.933357][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.941989][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.950511][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.959104][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.967695][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.976371][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.985005][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1079.993513][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.002196][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.010662][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.019207][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.027751][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.036285][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.044777][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.053588][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.062221][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.070818][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.079364][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.087783][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.096241][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.104766][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.113507][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.124532][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.133160][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.141778][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.150334][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.158869][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.167319][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.175783][T12233] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1080.184366][ T26] audit: type=1800 audit(1786339499.068:161): pid=12233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1784" name="file1" dev="loop5" ino=1048720 res=0 errno=0 [ 1083.316552][T12278] loop5: detected capacity change from 0 to 128 [ 1084.491534][ T26] audit: type=1326 audit(1786339503.035:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.5.1795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce1b9e019 code=0x7ffc0000 [ 1085.151335][ T26] audit: type=1326 audit(1786339503.035:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.5.1795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce1b9e019 code=0x7ffc0000 [ 1085.214157][T12291] loop1: detected capacity change from 0 to 128 [ 1085.241332][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.250011][T12291] FAT-fs (loop1): Filesystem has been set read-only [ 1085.257888][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.266822][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.275596][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.284290][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.293199][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.301831][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.315847][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.325267][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.334747][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.343467][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.352271][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.361122][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.369861][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.378499][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.387191][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.395827][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.404578][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.414572][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.423238][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.431849][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.440532][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.449171][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.457811][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.466425][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.497761][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.506529][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.516255][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.525423][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.534250][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.543182][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.552035][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.560656][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.569387][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.578004][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.595086][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.603818][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.612749][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.621290][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.629844][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.638425][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.646966][T12291] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1085.656327][ T26] audit: type=1800 audit(1786339504.115:164): pid=12291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1799" name="file1" dev="loop1" ino=1048723 res=0 errno=0 [ 1087.161781][T12306] loop5: detected capacity change from 0 to 1024 [ 1087.199490][T12306] EXT4-fs: Ignoring removed bh option [ 1087.375148][T12306] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 1087.402147][T12306] System zones: 0-1, 3-12 [ 1087.450738][T12306] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1088.294590][T12326] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1088.303403][T12326] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1088.372245][T12328] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1088.381918][T12328] cramfs: wrong magic [ 1088.662543][T11698] EXT4-fs (loop5): unmounting filesystem. [ 1088.739391][T12328] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1804'. [ 1088.829156][T12328] bridge0: port 3(erspan0) entered disabled state [ 1088.835850][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.843059][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.787924][T12364] loop4: detected capacity change from 0 to 512 [ 1092.867646][T12364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1092.888430][T12364] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.016164][T12397] SET target dimension over the limit! [ 1098.816610][T12021] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1099.044136][T12021] usb 6-1: Using ep0 maxpacket: 16 [ 1099.064613][T12021] usb 6-1: config 111 has too many interfaces: 116, using maximum allowed: 32 [ 1099.199595][T12021] usb 6-1: config 111 has an invalid descriptor of length 47, skipping remainder of the config [ 1099.358714][T12021] usb 6-1: config 111 has 0 interfaces, different from the descriptor's value: 116 [ 1099.535794][T12021] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1099.678450][T12021] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1099.806447][T12021] usb 6-1: Product: syz [ 1099.871610][T12021] usb 6-1: Manufacturer: syz [ 1099.946968][T12021] usb 6-1: SerialNumber: syz [ 1100.571437][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 1100.675727][T12021] usb 6-1: USB disconnect, device number 2 [ 1102.581883][T12436] loop1: detected capacity change from 0 to 128 [ 1104.219681][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1104.267917][T12445] FAT-fs (loop1): Filesystem has been set read-only [ 1104.274867][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1104.508160][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1104.734398][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1104.821228][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1104.829779][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1104.842431][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1104.897031][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1105.016139][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1105.044749][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1105.211384][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1105.219911][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1105.228703][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1105.237270][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1105.275989][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1105.284506][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1105.300004][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1105.994653][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.040729][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.114040][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.187019][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.195590][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.292395][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.378700][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.460129][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.489563][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.522437][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.531182][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.587657][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.596310][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.666317][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.706695][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.715429][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.776266][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1106.900950][T12445] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1107.353973][ T26] audit: type=1800 audit(1786339524.138:165): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1826" name="file1" dev="loop1" ino=1048724 res=0 errno=0 [ 1110.566646][T12500] 9pnet_fd: Insufficient options for proto=fd [ 1111.837526][T12526] loop4: detected capacity change from 0 to 256 [ 1112.519579][ T4319] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1112.560498][T12526] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1113.620860][ T4319] usb 2-1: Using ep0 maxpacket: 16 [ 1114.380640][ T4319] usb 2-1: device descriptor read/all, error -71 [ 1114.716960][T12519] Process accounting resumed [ 1118.696010][T12575] loop4: detected capacity change from 0 to 32768 [ 1120.092102][T12598] loop5: detected capacity change from 0 to 256 [ 1121.224950][T12598] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1122.291924][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 1122.301289][T12594] device bridge_slave_1 left promiscuous mode [ 1122.307965][T12594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.371127][ T53] block nbd4: Attempted send on invalid socket [ 1123.377522][ T53] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1123.386761][T12600] efs: cannot read volume header [ 1124.630706][T12594] device bridge_slave_0 left promiscuous mode [ 1124.668291][T12594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.011498][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.433942][T12613] Process accounting resumed [ 1128.956510][ T7647] rpcbind: server 127.0.0.1 not responding, timed out [ 1130.091077][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'. [ 1130.101264][T12654] device erspan0 left promiscuous mode [ 1130.107610][T12654] bridge0: port 3(erspan0) entered disabled state [ 1130.123650][T12654] device bridge_slave_1 left promiscuous mode [ 1130.130312][T12654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.259447][T12654] device bridge_slave_0 left promiscuous mode [ 1130.266129][T12654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.323081][ T94] block nbd2: Attempted send on invalid socket [ 1130.329373][ T94] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1130.339622][T12657] efs: cannot read volume header [ 1134.641433][ T7604] Bluetooth: (null): Invalid header checksum [ 1134.649394][ T7604] Bluetooth: (null): Invalid header checksum [ 1134.754732][ T7604] Bluetooth: (null): Invalid header checksum [ 1134.874359][ T4366] Bluetooth: (null): Invalid header checksum [ 1134.993358][ T4359] Bluetooth: (null): Invalid header checksum [ 1135.125354][ T7604] Bluetooth: (null): Invalid header checksum [ 1135.253459][ T7604] Bluetooth: (null): Invalid header checksum [ 1135.373123][ T4427] Bluetooth: (null): Invalid header checksum [ 1135.506213][ T4366] Bluetooth: (null): Invalid header checksum [ 1140.251481][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1873'. [ 1140.261711][T12727] device bridge_slave_1 left promiscuous mode [ 1140.268500][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.290035][T12727] device bridge_slave_0 left promiscuous mode [ 1140.297029][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.387521][ T94] block nbd5: Attempted send on invalid socket [ 1140.394472][ T94] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1140.404303][T12728] efs: cannot read volume header [ 1142.966392][T12753] overlayfs: missing 'lowerdir' [ 1151.370911][T12810] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1151.380227][T12810] cramfs: wrong magic [ 1152.015691][T12813] loop3: detected capacity change from 0 to 4096 [ 1152.137203][T12813] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1152.524322][T12821] loop5: detected capacity change from 0 to 512 [ 1153.625350][T12830] overlayfs: missing 'lowerdir' [ 1160.172089][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1901'. [ 1160.313084][ T53] block nbd5: Attempted send on invalid socket [ 1160.319401][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.328743][T12876] efs: cannot read volume header [ 1161.692864][T12882] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1161.705562][T12882] cramfs: wrong magic [ 1167.586093][T12962] loop1: detected capacity change from 0 to 128 [ 1167.651212][T12964] futex_wake_op: syz.4.1913 tries to shift op by 144; fix this program [ 1167.690383][T12964] loop4: detected capacity change from 0 to 256 [ 1168.569067][T12964] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1168.623467][ T26] audit: type=1800 audit(1786339580.681:166): pid=12963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1913" name="file1" dev="loop4" ino=1048743 res=0 errno=0 [ 1168.658866][T12963] syz.4.1913: attempt to access beyond end of device [ 1168.658866][T12963] loop4: rw=0, sector=184, nr_sectors = 120 limit=256 [ 1168.699389][T12963] syz.4.1913: attempt to access beyond end of device [ 1168.699389][T12963] loop4: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 1168.715144][T12963] syz.4.1913: attempt to access beyond end of device [ 1168.715144][T12963] loop4: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 1168.729912][T12963] syz.4.1913: attempt to access beyond end of device [ 1168.729912][T12963] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1168.743418][T12963] syz.4.1913: attempt to access beyond end of device [ 1168.743418][T12963] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1168.756694][T12963] syz.4.1913: attempt to access beyond end of device [ 1168.756694][T12963] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1168.770093][T12963] syz.4.1913: attempt to access beyond end of device [ 1168.770093][T12963] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1168.783388][T12963] syz.4.1913: attempt to access beyond end of device [ 1168.783388][T12963] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1168.796666][T12963] syz.4.1913: attempt to access beyond end of device [ 1168.796666][T12963] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1168.809941][T12963] syz.4.1913: attempt to access beyond end of device [ 1168.809941][T12963] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1169.063063][T12962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1169.208648][T12974] futex_wake_op: syz.4.1915 tries to shift op by 144; fix this program [ 1169.341345][T12962] ext4 filesystem being mounted at /393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1169.650121][T12978] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1170.220366][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 1171.469897][T12981] input: syz0 as /devices/virtual/input/input24 [ 1171.629437][T12981] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1905'. [ 1172.817455][T13001] loop5: detected capacity change from 0 to 32768 [ 1172.830306][T13001] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1918 (13001) [ 1172.889388][T13001] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1172.900301][T13001] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1172.909205][T13001] BTRFS info (device loop5): using free space tree [ 1173.680395][T13001] BTRFS info (device loop5): enabling ssd optimizations [ 1175.048580][ T26] audit: type=1800 audit(1786339585.958:167): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1918" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1177.546955][T11698] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1178.125859][T13054] serio: Serial port ptm0 [ 1182.603082][T13086] input: syz0 as /devices/virtual/input/input25 [ 1182.993002][T13086] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1931'. [ 1183.764637][T13100] overlayfs: missing 'lowerdir' [ 1185.942872][T13112] futex_wake_op: syz.5.1934 tries to shift op by 144; fix this program [ 1190.265916][T13139] device syz_tun entered promiscuous mode [ 1191.228554][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 1191.368466][ T53] block nbd4: Attempted send on invalid socket [ 1191.374858][ T53] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1191.384157][T13144] efs: cannot read volume header [ 1192.599517][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1193.966289][T13163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1946'. [ 1193.975625][T13163] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1946'. [ 1194.294670][T13161] 0x000000000007-0x000000020000 : "" [ 1194.332525][T13161] ftl_cs: FTL header corrupt! [ 1195.102088][T13173] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1195.285833][T13181] netlink: 'syz.4.1944': attribute type 21 has an invalid length. [ 1195.328611][T13180] block device autoloading is deprecated and will be removed. [ 1200.348447][T13209] device syz_tun entered promiscuous mode [ 1206.160219][T13240] loop4: detected capacity change from 0 to 128 [ 1206.334884][T13240] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1207.778001][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1962'. [ 1208.365149][T13256] futex_wake_op: syz.2.1964 tries to shift op by 144; fix this program [ 1208.484877][T13240] loop4: detected capacity change from 0 to 4096 [ 1208.514534][T13240] EXT4-fs: inline encryption not supported [ 1208.669074][T13240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1208.723487][T13240] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002] [ 1208.731733][T13240] System zones: 0-5 [ 1208.756741][T13240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1210.955941][T13265] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 1212.345473][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 1212.634803][T13292] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1212.650135][T13287] IPVS: stopping master sync thread 13292 ... [ 1212.732212][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1970'. [ 1214.368805][T13303] serio: Serial port ptm0 [ 1216.079321][T13321] block device autoloading is deprecated and will be removed. [ 1216.087599][T13321] md: loop0 has zero or unknown size, marking faulty! [ 1216.262161][ T26] audit: type=1326 audit(1786339624.629:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.1.1976" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa779e019 code=0x7ffc0000 [ 1216.291707][T13313] loop5: detected capacity change from 0 to 4096 [ 1216.373507][ T26] audit: type=1326 audit(1786339624.629:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.1.1976" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa779e019 code=0x7ffc0000 [ 1216.409094][ T26] audit: type=1326 audit(1786339624.666:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.1.1976" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa779e019 code=0x7ffc0000 [ 1216.667432][ T26] audit: type=1326 audit(1786339624.666:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.1.1976" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa779e019 code=0x7ffc0000 [ 1216.819117][ T26] audit: type=1326 audit(1786339624.666:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.1.1976" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9fa779e019 code=0x7ffc0000 [ 1216.915447][T13313] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1217.988407][ T26] audit: type=1326 audit(1786339624.666:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.1.1976" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa779e019 code=0x7ffc0000 [ 1219.749564][ T26] audit: type=1326 audit(1786339624.666:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.1.1976" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa779e019 code=0x7ffc0000 [ 1219.857664][ T26] audit: type=1326 audit(1786339624.666:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.1.1976" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa779e019 code=0x7ffc0000 [ 1220.030466][ T26] audit: type=1326 audit(1786339624.666:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.1.1976" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa779e019 code=0x7ffc0000 [ 1220.253639][ T26] audit: type=1326 audit(1786339624.666:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.1.1976" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fa779e019 code=0x7ffc0000 [ 1221.883464][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1221.910782][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1221.927089][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1221.936919][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1221.945291][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1221.953018][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1221.973868][T11395] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1221.988017][T11395] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1221.995235][T11395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1222.003498][T11395] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1222.036567][T11395] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1222.044120][T11395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1222.443693][T13362] loop1: detected capacity change from 0 to 2048 [ 1222.487278][T13362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1223.135050][T13364] UBIFS error (pid: 13364): cannot open "(null)", error -22 [ 1223.506347][ T4332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.450548][T11395] Bluetooth: hci4: command 0x0409 tx timeout [ 1224.732412][ T4332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.918424][ T4332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.077493][ T4332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.217438][ T5187] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1225.448020][ T5187] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.556856][ T5187] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1225.766808][ T5187] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1225.910482][ T5187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1226.057031][ T5187] usb 6-1: Product: syz [ 1226.117033][ T5187] usb 6-1: Manufacturer: syz [ 1226.185207][ T5187] usb 6-1: SerialNumber: syz [ 1226.670949][T11395] Bluetooth: hci4: command 0x041b tx timeout [ 1226.774279][T13355] chnl_net:caif_netlink_parms(): no params data found [ 1226.874994][T13355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.882351][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.892502][T13355] device bridge_slave_0 entered promiscuous mode [ 1226.940098][T13355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.948036][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.959284][T13355] device bridge_slave_1 entered promiscuous mode [ 1227.032477][T13355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.049547][T12067] usb 6-1: USB disconnect, device number 3 [ 1227.134122][T13355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.212728][T13355] team0: Port device team_slave_0 added [ 1227.231800][T13355] team0: Port device team_slave_1 added [ 1227.316107][T13355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.324464][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.361598][T13355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.403683][T13355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.410871][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.447851][T13355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.534275][T13355] device hsr_slave_0 entered promiscuous mode [ 1227.553127][T13355] device hsr_slave_1 entered promiscuous mode [ 1227.565031][T13355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.576977][T13355] Cannot create hsr debugfs directory [ 1227.645942][ T4332] IPVS: stopping master sync thread 8016 ... [ 1227.825038][T13418] loop1: detected capacity change from 0 to 128 [ 1228.107734][T13425] serio: Serial port ptm0 [ 1228.880481][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'. [ 1228.923704][T11395] Bluetooth: hci4: command 0x040f tx timeout [ 1228.934270][ T53] block nbd2: Attempted send on invalid socket [ 1228.940916][ T53] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1228.950700][T13421] efs: cannot read volume header [ 1229.457900][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.466433][T13432] FAT-fs (loop1): Filesystem has been set read-only [ 1229.473172][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.481689][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.490184][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.498698][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.507167][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.515667][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.524246][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.533142][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.541819][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.550275][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.558861][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.567390][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.575888][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.584336][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.592851][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.601381][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.609873][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.618990][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.627416][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.635912][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.644396][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.652890][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.661457][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.669959][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.678529][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.687302][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.696138][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.704733][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.713172][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.721726][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.730340][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.739058][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.747662][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.756172][T13432] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1229.766724][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 1229.766740][ T26] audit: type=1800 audit(1786339637.094:223): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1989" name="file1" dev="loop1" ino=1048744 res=0 errno=0 [ 1229.973490][ T26] audit: type=1326 audit(1786339637.279:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13422 comm="syz.4.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404eb9e019 code=0x7ffc0000 [ 1230.376740][ T26] audit: type=1326 audit(1786339637.307:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13422 comm="syz.4.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f404eb5e84e code=0x7ffc0000 [ 1230.462567][ T26] audit: type=1326 audit(1786339637.307:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13422 comm="syz.4.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404eb9e019 code=0x7ffc0000 [ 1230.571087][ T26] audit: type=1326 audit(1786339637.307:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13422 comm="syz.4.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f404eb5e84e code=0x7ffc0000 [ 1230.689262][T13448] siw: device registration error -23 [ 1230.704755][T13448] smc: removing ib device syz2 [ 1231.178021][T11395] Bluetooth: hci4: command 0x0419 tx timeout [ 1231.908576][ T26] audit: type=1326 audit(1786339637.556:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13422 comm="syz.4.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f404eb9e019 code=0x7ffc0000 [ 1231.944102][ T26] audit: type=1326 audit(1786339637.556:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13422 comm="syz.4.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f404eb9e019 code=0x7ffc0000 [ 1234.088147][T13355] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1234.517801][T13355] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1234.568399][ T4332] device hsr_slave_0 left promiscuous mode [ 1234.610820][ T4332] device hsr_slave_1 left promiscuous mode [ 1234.662124][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.691868][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.742796][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.838194][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.254487][ T4332] device veth1_macvtap left promiscuous mode [ 1235.260616][ T4332] device veth0_macvtap left promiscuous mode [ 1235.279137][ T4332] device veth1_vlan left promiscuous mode [ 1235.295904][ T4332] device veth0_vlan left promiscuous mode [ 1242.048047][T13539] futex_wake_op: syz.4.2002 tries to shift op by 144; fix this program [ 1242.146479][T13540] loop4: detected capacity change from 0 to 128 [ 1242.544109][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 1243.008691][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 1243.084634][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.150182][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.657436][ T4332] bond0 (unregistering): Released all slaves [ 1243.707783][T13355] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1243.890625][T13355] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1245.920637][T13355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.989472][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1246.001874][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1246.053008][T13355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.172508][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1246.530406][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1246.774031][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.781142][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.815811][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1246.872477][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1246.893066][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.900227][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.976624][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1247.740878][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1247.791102][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1247.829585][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1247.862097][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1247.888143][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1247.958931][T12940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1247.968066][T12940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1248.102515][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1248.113646][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1248.171059][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1248.228016][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1248.261611][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1250.254838][T13598] loop4: detected capacity change from 0 to 512 [ 1250.284349][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1250.311384][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1250.364989][T13355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.384923][T13598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1250.486262][T13598] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1250.973681][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 1251.575710][T13609] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2015'. [ 1251.610083][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 1253.648078][ T26] audit: type=1800 audit(1786339659.132:230): pid=13640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2012" name="power" dev="configfs" ino=78981 res=0 errno=0 [ 1254.475193][T13642] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1254.490593][T13642] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1255.415919][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1255.490201][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1255.581731][T12953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1255.648467][T12953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1255.691608][T13355] device veth0_vlan entered promiscuous mode [ 1255.773578][T12953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1255.793360][T12953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1255.817206][T13355] device veth1_vlan entered promiscuous mode [ 1256.488683][T13355] device veth0_macvtap entered promiscuous mode [ 1257.262537][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1257.276534][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1257.285481][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1257.296084][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1257.309306][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1257.319840][T13355] device veth1_macvtap entered promiscuous mode [ 1257.393025][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.427671][T13686] loop5: detected capacity change from 0 to 512 [ 1257.459906][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.491113][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.512733][T13677] ceph: No mds server is up or the cluster is laggy [ 1258.077464][T13692] "syz.2.2028" (13692) uses obsolete ecb(arc4) skcipher [ 1258.937232][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.981322][T13686] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1258.997094][T13686] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.107612][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.125326][T13697] syz.4.2027 sent an empty control message without MSG_MORE. [ 1259.186746][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1259.317673][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.505257][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.350709][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.363121][T13355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.379081][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1260.433213][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1260.456365][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.476350][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.486869][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.497803][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.507893][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.518883][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.534086][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.545823][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.658458][T13355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.707309][T13355] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.769063][T13355] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.778056][T13355] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.787221][T13355] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.803681][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1260.832756][T11698] EXT4-fs (loop5): unmounting filesystem. [ 1260.853072][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1261.205410][T12953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.213470][T12953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.049792][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1262.191160][ T4455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.220885][ T4455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.252416][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1265.460267][T13756] loop6: detected capacity change from 0 to 256 [ 1265.467847][T13756] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1265.582617][T13756] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1268.104452][T13776] loop4: detected capacity change from 0 to 2048 [ 1268.167208][ T9281] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1268.267064][T13776] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1268.429781][ T9281] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1271.411379][T13790] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1271.429013][T13790] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 1271.441754][T13790] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1271.441754][T13790] [ 1271.451409][T13790] EXT4-fs (loop4): Total free blocks count 0 [ 1271.457404][T13790] EXT4-fs (loop4): Free/Dirty block details [ 1271.463444][T13790] EXT4-fs (loop4): free_blocks=2415919104 [ 1271.469365][T13790] EXT4-fs (loop4): dirty_blocks=38752 [ 1271.474759][T13790] EXT4-fs (loop4): Block reservation details [ 1271.480734][T13790] EXT4-fs (loop4): i_reserved_data_blocks=2422 [ 1271.874488][ T9281] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1271.890836][ T9281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.921807][ T9281] usb 3-1: Product: syz [ 1271.933004][ T9281] usb 3-1: config 0 descriptor?? [ 1271.944271][ T9281] usb 3-1: can't set config #0, error -71 [ 1271.961414][ T9281] usb 3-1: USB disconnect, device number 4 [ 1272.203350][T13807] device syz_tun entered promiscuous mode [ 1273.536859][T13813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1274.002947][T12953] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2048 with error 28 [ 1274.176632][T12953] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1274.176632][T12953] [ 1274.186678][T12953] EXT4-fs (loop4): Total free blocks count 0 [ 1274.193246][T12953] EXT4-fs (loop4): Free/Dirty block details [ 1274.199243][T12953] EXT4-fs (loop4): free_blocks=2415919104 [ 1274.225470][T12953] EXT4-fs (loop4): dirty_blocks=38752 [ 1274.230920][T12953] EXT4-fs (loop4): Block reservation details [ 1274.316883][T12953] EXT4-fs (loop4): i_reserved_data_blocks=2422 [ 1274.390346][T13825] loop6: detected capacity change from 0 to 128 [ 1274.548492][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.557565][T13825] FAT-fs (loop6): Filesystem has been set read-only [ 1274.564834][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.573342][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.581825][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.590666][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.599252][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.606199][T12953] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2054 with max blocks 2048 with error 28 [ 1274.607764][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.629082][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.637921][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.646638][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.655728][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.664484][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.673214][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.681761][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.690613][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.699871][T12953] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1274.699871][T12953] [ 1274.711292][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.719847][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.728385][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.737341][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.745944][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.754423][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.763528][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.772082][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.780617][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.789189][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.797661][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.806229][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.814919][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.823557][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.832043][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.840943][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.849479][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.858030][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.866679][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.875745][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.884525][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.893191][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.901735][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.910297][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.918794][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.927336][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.935867][T13825] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1274.944683][ T26] audit: type=1800 audit(1786339678.776:231): pid=13825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2054" name="file1" dev="loop6" ino=1048750 res=0 errno=0 [ 1276.304159][T13840] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1281.381083][T13880] loop1: detected capacity change from 0 to 128 [ 1281.435450][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.443994][T13880] FAT-fs (loop1): Filesystem has been set read-only [ 1281.450729][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.459755][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.468304][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.476831][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.485238][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.493694][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.502196][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.510814][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.519432][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.527851][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.536299][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.544774][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.553269][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.561721][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.570203][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.578701][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.587189][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.595810][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.604241][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.612727][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.621214][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.629702][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.638160][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.646797][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.655324][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.663818][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.672406][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.680828][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.689587][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.698071][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.706674][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.715172][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.724063][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.732849][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.746555][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.755347][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.763873][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.772431][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.780975][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.789424][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.797903][T13880] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1281.806520][ T26] audit: type=1800 audit(1786339685.115:232): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2067" name="file1" dev="loop1" ino=1048751 res=0 errno=0 [ 1283.601721][T13894] futex_wake_op: syz.1.2070 tries to shift op by 144; fix this program [ 1285.141893][ T4276] EXT4-fs: 6 callbacks suppressed [ 1285.141949][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 1285.193526][ T53] block nbd5: Attempted send on invalid socket [ 1285.199777][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1285.208987][T13907] FAT-fs (nbd5): unable to read boot sector [ 1285.238156][T13907] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2065'. [ 1287.893085][T13926] loop5: detected capacity change from 0 to 1024 [ 1289.864111][T13941] Bluetooth: MGMT ver 1.22 [ 1290.264272][T13926] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1291.333478][T11698] EXT4-fs (loop5): unmounting filesystem. [ 1291.877338][ T9729] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1292.134749][ T9729] usb 6-1: Using ep0 maxpacket: 32 [ 1292.154047][ T9729] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1292.348707][ T9729] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1292.572147][ T9729] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.746590][ T9729] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1292.764799][ T9729] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1292.774417][ T9729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.793507][ T9729] usb 6-1: config 0 descriptor?? [ 1292.858676][T13973] loop1: detected capacity change from 0 to 128 [ 1296.240670][T13990] loop1: detected capacity change from 0 to 256 [ 1296.328333][ T4871] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1296.964450][ T9281] usb 6-1: USB disconnect, device number 4 [ 1299.147587][T14017] loop1: detected capacity change from 0 to 128 [ 1299.291241][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.360376][T14020] FAT-fs (loop1): Filesystem has been set read-only [ 1299.368203][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.422636][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.478610][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.507667][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.547037][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.575041][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.605764][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.662104][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.715285][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.850507][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.859848][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.868477][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.877321][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.886280][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.895246][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.929012][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1299.978041][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.223380][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.619615][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.628147][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.715339][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.822448][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.831003][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.876740][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.890713][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.924819][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.963092][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1300.971593][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1301.027562][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1301.036079][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1301.129664][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1301.156142][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1301.217416][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1301.226651][T14020] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1301.235812][ T26] audit: type=1800 audit(1786864247.112:233): pid=14020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2091" name="file1" dev="loop1" ino=1048752 res=0 errno=0 [ 1303.632195][T14058] ceph: No mds server is up or the cluster is laggy [ 1303.650835][ T9281] libceph: mon0 (1)[c::]:6789 socket error on write [ 1305.735886][ T4319] libceph: mon0 (1)[c::]:6789 socket error on write [ 1311.912118][T14127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1315.316146][T14147] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1317.168051][T14171] loop4: detected capacity change from 0 to 128 [ 1317.412156][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1317.446257][T14179] FAT-fs (loop4): Filesystem has been set read-only [ 1317.457543][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1318.170117][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1318.236620][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1318.278587][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1318.289286][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1318.350123][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1318.438117][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1318.517346][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1318.661644][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1318.803493][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1318.955457][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.103675][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.252910][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.261634][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.277215][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.285850][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.295240][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.304072][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.312900][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.321571][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.330035][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.342907][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.351570][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.360185][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.370550][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.379194][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.388333][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.397202][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.415422][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.464929][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.532386][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.559191][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.655239][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.663843][T14179] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1319.885897][T14201] loop5: detected capacity change from 0 to 512 [ 1320.615303][T14201] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1320.617675][ T26] audit: type=1800 audit(1786864265.109:234): pid=14179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2125" name="file1" dev="loop4" ino=1048753 res=0 errno=0 [ 1320.624322][T14201] EXT4-fs (loop5): DAX unsupported by block device. [ 1320.751908][T14200] (syz.6.2130,14200,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1325.544549][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1327.942620][T14251] loop6: detected capacity change from 0 to 128 [ 1328.230549][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.239661][T14257] FAT-fs (loop6): Filesystem has been set read-only [ 1328.246442][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.254983][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.263504][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.272018][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.280518][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.288972][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.297552][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.306162][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.314825][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.323341][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.331789][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.340295][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.349140][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.357634][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.366152][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.374603][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.383102][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.391758][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.400245][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.408702][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.417217][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.425700][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.434194][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.442763][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.451218][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.460082][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.468717][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.477311][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.485790][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.494244][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.502851][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.511452][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.519964][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.528443][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.550325][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.558834][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.568152][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.576689][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.585173][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.593755][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.602406][T14257] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1328.614450][ T26] audit: type=1800 audit(1786864272.520:235): pid=14257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2143" name="file1" dev="loop6" ino=1048754 res=0 errno=0 [ 1329.322509][T14263] loop0: detected capacity change from 0 to 32768 [ 1329.378615][T14263] loop1: detected capacity change from 0 to 32768 [ 1329.438453][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 1330.229583][T14263] loop3: detected capacity change from 0 to 32768 [ 1330.602087][T14267] md: array md0 already has disks! [ 1331.270691][T14263] md/raid:md0: not clean -- starting background reconstruction [ 1331.278828][T14263] md/raid:md0: invalid chunk size 0 [ 1331.284147][T14263] md: pers->run() failed ... [ 1333.307655][T14296] loop6: detected capacity change from 0 to 4096 [ 1333.341733][T14296] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1338.421694][T14331] tipc: Started in network mode [ 1338.426820][T14331] tipc: Node identity ac14140f, cluster identity 4711 [ 1338.437553][T14331] tipc: New replicast peer: 172.30.0.3 [ 1338.444180][T14331] tipc: Enabled bearer , priority 10 [ 1338.454986][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 1338.464209][T14331] tipc: Disabling bearer [ 1341.565174][T14345] sch_tbf: burst 4398 is lower than device lo mtu (32783) ! [ 1342.448633][T14352] Bluetooth: MGMT ver 1.22 [ 1342.522715][T14358] futex_wake_op: syz.4.2167 tries to shift op by 144; fix this program [ 1349.888364][T14420] loop6: detected capacity change from 0 to 128 [ 1349.969163][T14423] netlink: 'syz.4.2182': attribute type 13 has an invalid length. [ 1350.045160][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.055332][T14424] FAT-fs (loop6): Filesystem has been set read-only [ 1350.062380][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.073905][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.082589][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.084890][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1350.098177][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.106771][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.115277][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.123779][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.132331][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.141265][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.150018][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.158592][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.167171][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.175717][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.184437][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.193295][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.201914][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.210711][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.220430][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.229302][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.238016][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.651652][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.660548][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.669245][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.677836][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.683728][T14426] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1350.687202][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.704042][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.712885][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.721602][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.732016][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.740646][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.749347][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.757815][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.766372][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.774904][T14424] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1350.809113][ T26] audit: type=1800 audit(1786864293.091:236): pid=14424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2184" name="file1" dev="loop6" ino=1048755 res=0 errno=0 [ 1350.866673][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1350.880655][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1351.118412][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1351.237575][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1351.382094][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1351.562310][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1352.596739][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1352.674216][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1352.684873][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1355.321915][T14478] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2190'. [ 1355.449569][T11395] Bluetooth: hci4: command 0x0406 tx timeout [ 1356.389517][T14489] loop5: detected capacity change from 0 to 128 [ 1356.670842][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.683700][T14499] FAT-fs (loop5): Filesystem has been set read-only [ 1356.690644][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.699128][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.707641][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.716197][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.724726][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.733225][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.751851][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.760621][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.769375][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.777925][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.786478][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.795000][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.803849][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.812390][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.820924][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.829454][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.837974][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.846685][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.855216][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.863766][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.872289][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.880823][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.889441][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.897987][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.906527][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.915048][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.923839][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.932548][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.941089][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.949624][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.958231][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.966766][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.983354][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1356.992003][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1357.003883][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1357.012505][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1357.021161][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1357.029662][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1357.038189][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1357.046698][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1357.055169][T14499] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1357.063816][ T26] audit: type=1800 audit(1786864298.877:237): pid=14499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2196" name="file1" dev="loop5" ino=1048756 res=0 errno=0 [ 1357.159602][T14502] 9pnet_fd: Insufficient options for proto=fd [ 1360.466096][T14533] loop5: detected capacity change from 0 to 128 [ 1360.577283][T14533] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1360.712105][ T4871] udevd[4871]: incorrect ext4 checksum on /dev/loop5 [ 1362.212204][T14533] loop5: detected capacity change from 0 to 4096 [ 1362.219403][T14533] EXT4-fs: inline encryption not supported [ 1362.235081][T14541] futex_wake_op: syz.6.2206 tries to shift op by 144; fix this program [ 1362.384202][T14533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1362.576802][T14533] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002] [ 1362.668430][T14533] System zones: 0-5 [ 1362.765333][T14533] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1363.811949][T14559] loop4: detected capacity change from 0 to 128 [ 1364.746833][T14568] 9pnet_fd: Insufficient options for proto=fd [ 1364.788136][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.796856][T14569] FAT-fs (loop4): Filesystem has been set read-only [ 1364.803597][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.812014][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.820588][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.829306][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.837883][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.846447][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.854878][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.863420][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.871956][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.880442][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.888871][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.897372][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.905829][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.914320][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.923109][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.931526][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.940386][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.948967][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.957427][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.965879][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.974288][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.982731][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.991186][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1364.999611][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.008082][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.016497][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.025072][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.033520][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.042003][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.050673][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.059119][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.067559][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.076055][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.084529][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.118349][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.126842][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.135328][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.143811][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.152281][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.161000][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.169441][T14569] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1365.178613][ T26] audit: type=1800 audit(1786864306.384:238): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2211" name="file1" dev="loop4" ino=1048757 res=0 errno=0 [ 1366.038174][T14571] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 1366.252085][T11698] EXT4-fs (loop5): unmounting filesystem. [ 1367.502779][T14586] loop6: detected capacity change from 0 to 128 [ 1368.340969][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.349649][T14586] FAT-fs (loop6): Filesystem has been set read-only [ 1368.357200][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.365883][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.374510][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.383306][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.391910][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.400386][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.408911][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.417523][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.427002][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.435731][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.444203][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.452754][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.461270][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.469787][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.478666][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.487135][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.495703][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.504338][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.512874][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.521375][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.529838][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.538543][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.547083][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.555630][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.564224][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.572702][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.581481][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.590425][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.598974][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.607580][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.616142][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.624696][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.633203][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1368.641779][T14586] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1369.797278][ T26] audit: type=1800 audit(1786864309.604:239): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2217" name="file1" dev="loop6" ino=1048758 res=0 errno=0 [ 1372.500081][T14643] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2223'. [ 1374.767377][T14644] loop4: detected capacity change from 0 to 128 [ 1377.649216][T14671] loop6: detected capacity change from 0 to 128 [ 1378.140626][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.149216][T14671] FAT-fs (loop6): Filesystem has been set read-only [ 1378.156092][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.164594][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.173049][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.181533][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.190007][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.198628][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.207234][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.215795][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.224500][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.233182][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.241762][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.250276][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.259401][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.267936][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.276846][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.285428][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.293954][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.302512][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.311011][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.319520][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.328002][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.336498][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.345011][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.353484][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.362027][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.370515][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.379277][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.387738][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.396207][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.404695][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.413228][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.421696][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.430220][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.439148][T14671] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1378.469313][ T26] audit: type=1800 audit(1786864318.688:240): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2232" name="file1" dev="loop6" ino=1048759 res=0 errno=0 [ 1380.050540][T14691] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2236'. [ 1382.358353][ T26] audit: type=1800 audit(1786864322.276:241): pid=14700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2229" name="bus" dev="ramfs" ino=82764 res=0 errno=0 [ 1386.529648][T14758] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2247'. [ 1389.288306][T14786] loop4: detected capacity change from 0 to 128 [ 1389.654489][T14793] 9pnet_fd: Insufficient options for proto=fd [ 1390.594077][T14795] futex_wake_op: syz.1.2256 tries to shift op by 144; fix this program [ 1391.910447][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1392.863269][T14823] loop6: detected capacity change from 0 to 128 [ 1393.754397][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.763029][T14834] FAT-fs (loop6): Filesystem has been set read-only [ 1393.776577][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.785161][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.793795][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.802655][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.819925][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.837484][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.846157][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.855080][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.864554][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.873190][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.881887][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.890585][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.899661][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.908316][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.916893][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.925479][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.934091][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.942816][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.960606][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.969800][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.978318][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.987045][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1393.995731][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.004174][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.012662][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.021172][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.030248][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.038828][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.047306][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.055848][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.064391][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.073113][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.081588][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.090468][T14834] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1394.211626][ T26] audit: type=1800 audit(1786864333.141:242): pid=14834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2260" name="file1" dev="loop6" ino=1048760 res=0 errno=0 [ 1394.989324][T14809] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 1399.398050][T14864] loop6: detected capacity change from 0 to 128 [ 1399.999631][T14864] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1400.075852][ T4871] udevd[4871]: incorrect ext4 checksum on /dev/loop6 [ 1400.200375][T14864] loop6: detected capacity change from 0 to 4096 [ 1400.244298][T14864] EXT4-fs: inline encryption not supported [ 1400.271174][T14864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1400.311568][T14864] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002] [ 1400.357808][T14864] System zones: 0-5 [ 1400.422941][T14864] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1403.135281][T13355] EXT4-fs (loop6): unmounting filesystem. [ 1406.500211][ T26] audit: type=1800 audit(1786864344.588:243): pid=14914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2278" name="power" dev="configfs" ino=83012 res=0 errno=0 [ 1407.367384][T14924] siw: device registration error -23 [ 1413.320794][T14965] [ 1413.323186][T14965] ====================================================== [ 1413.330260][T14965] WARNING: possible circular locking dependency detected [ 1413.337301][T14965] syzkaller #0 Not tainted [ 1413.341742][T14965] ------------------------------------------------------ [ 1413.348777][T14965] syz.4.2288/14965 is trying to acquire lock: [ 1413.354862][T14965] ffff888140cf5aa0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 1413.366485][T14965] [ 1413.366485][T14965] but task is already holding lock: [ 1413.373872][T14965] ffff888055ac1520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 1413.383020][T14965] [ 1413.383020][T14965] which lock already depends on the new lock. [ 1413.383020][T14965] [ 1413.393452][T14965] [ 1413.393452][T14965] the existing dependency chain (in reverse order) is: [ 1413.402499][T14965] [ 1413.402499][T14965] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 1413.410196][T14965] __mutex_lock+0x12d/0xae0 [ 1413.415298][T14965] tcm_set_name+0x26/0x90 [ 1413.420199][T14965] function_make+0x195/0x350 [ 1413.425431][T14965] configfs_mkdir+0x511/0x9e0 [ 1413.430680][T14965] vfs_mkdir+0x386/0x570 [ 1413.435540][T14965] do_mkdirat+0x1d8/0x440 [ 1413.440435][T14965] __x64_sys_mkdir+0x6a/0x80 [ 1413.445581][T14965] do_syscall_64+0x4c/0xa0 [ 1413.450565][T14965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1413.457029][T14965] [ 1413.457029][T14965] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1413.465325][T14965] __mutex_lock+0x12d/0xae0 [ 1413.470401][T14965] configfs_rmdir+0x638/0x980 [ 1413.475641][T14965] vfs_rmdir+0x34e/0x4a0 [ 1413.480526][T14965] do_rmdir+0x29a/0x5c0 [ 1413.485239][T14965] __x64_sys_rmdir+0x45/0x50 [ 1413.490383][T14965] do_syscall_64+0x4c/0xa0 [ 1413.495363][T14965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1413.501812][T14965] [ 1413.501812][T14965] -> #0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}: [ 1413.510545][T14965] __lock_acquire+0x2d18/0x7c40 [ 1413.516376][T14965] lock_acquire+0x1bb/0x4a0 [ 1413.521393][T14965] down_write+0x36/0x60 [ 1413.526071][T14965] configfs_depend_item_unlocked+0x14f/0x430 [ 1413.532615][T14965] usbg_make_tpg+0x1f3/0x580 [ 1413.537720][T14965] target_fabric_make_tpg+0xa0/0x6d0 [ 1413.543614][T14965] configfs_mkdir+0x511/0x9e0 [ 1413.548855][T14965] vfs_mkdir+0x386/0x570 [ 1413.553767][T14965] do_mkdirat+0x1d8/0x440 [ 1413.558613][T14965] __x64_sys_mkdir+0x6a/0x80 [ 1413.563724][T14965] do_syscall_64+0x4c/0xa0 [ 1413.568675][T14965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1413.575087][T14965] [ 1413.575087][T14965] other info that might help us debug this: [ 1413.575087][T14965] [ 1413.585337][T14965] Chain exists of: [ 1413.585337][T14965] &sb->s_type->i_mutex_key#27 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1413.585337][T14965] [ 1413.600437][T14965] Possible unsafe locking scenario: [ 1413.600437][T14965] [ 1413.607894][T14965] CPU0 CPU1 [ 1413.613257][T14965] ---- ---- [ 1413.618734][T14965] lock(&opts->dep_lock); [ 1413.623166][T14965] lock(gadget_subsys.su_mutex); [ 1413.630720][T14965] lock(&opts->dep_lock); [ 1413.637713][T14965] lock(&sb->s_type->i_mutex_key#27); [ 1413.643170][T14965] [ 1413.643170][T14965] *** DEADLOCK *** [ 1413.643170][T14965] [ 1413.651326][T14965] 5 locks held by syz.4.2288/14965: [ 1413.656511][T14965] #0: ffff888146ebc460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1413.665734][T14965] #1: ffff888074314b70 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 1413.676616][T14965] #2: ffffffff8d4e96b0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 1413.686370][T14965] #3: ffffffff8d8089e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 1413.696119][T14965] #4: ffff888055ac1520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 1413.705589][T14965] [ 1413.705589][T14965] stack backtrace: [ 1413.711468][T14965] CPU: 0 PID: 14965 Comm: syz.4.2288 Not tainted syzkaller #0 [ 1413.718932][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1413.729085][T14965] Call Trace: [ 1413.732444][T14965] [ 1413.735442][T14965] dump_stack_lvl+0x188/0x24e [ 1413.740163][T14965] ? load_image+0x410/0x410 [ 1413.744762][T14965] ? show_regs_print_info+0x12/0x12 [ 1413.750059][T14965] ? print_circular_bug+0x12b/0x1a0 [ 1413.755262][T14965] check_noncircular+0x296/0x330 [ 1413.760199][T14965] ? add_chain_block+0x9b0/0x9b0 [ 1413.765136][T14965] ? lockdep_lock+0xf1/0x1f0 [ 1413.769736][T14965] ? _find_first_zero_bit+0xd2/0x100 [ 1413.775108][T14965] __lock_acquire+0x2d18/0x7c40 [ 1413.780075][T14965] ? __kernel_text_address+0x9/0x30 [ 1413.785337][T14965] ? verify_lock_unused+0x140/0x140 [ 1413.790540][T14965] ? __mutex_trylock_common+0x15c/0x260 [ 1413.796090][T14965] lock_acquire+0x1bb/0x4a0 [ 1413.800608][T14965] ? configfs_depend_item_unlocked+0x14f/0x430 [ 1413.806780][T14965] ? __might_sleep+0xd0/0xd0 [ 1413.811446][T14965] ? read_lock_is_recursive+0x10/0x10 [ 1413.816818][T14965] ? __mutex_trylock_common+0x15c/0x260 [ 1413.822368][T14965] ? usbg_make_tpg+0x144/0x580 [ 1413.827141][T14965] ? mutex_lock_nested+0x10/0x10 [ 1413.832077][T14965] down_write+0x36/0x60 [ 1413.836237][T14965] ? configfs_depend_item_unlocked+0x14f/0x430 [ 1413.842391][T14965] configfs_depend_item_unlocked+0x14f/0x430 [ 1413.848367][T14965] usbg_make_tpg+0x1f3/0x580 [ 1413.852951][T14965] ? configfs_mkdir+0x4b5/0x9e0 [ 1413.857796][T14965] ? usbg_drop_tport+0x20/0x20 [ 1413.862554][T14965] ? vscnprintf+0x80/0x80 [ 1413.866904][T14965] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1413.872546][T14965] target_fabric_make_tpg+0xa0/0x6d0 [ 1413.877844][T14965] ? target_fabric_release_wwn+0xa0/0xa0 [ 1413.883571][T14965] configfs_mkdir+0x511/0x9e0 [ 1413.888253][T14965] vfs_mkdir+0x386/0x570 [ 1413.892502][T14965] do_mkdirat+0x1d8/0x440 [ 1413.896825][T14965] ? vfs_mkdir+0x570/0x570 [ 1413.901247][T14965] ? getname_flags+0x206/0x500 [ 1413.906003][T14965] __x64_sys_mkdir+0x6a/0x80 [ 1413.910585][T14965] do_syscall_64+0x4c/0xa0 [ 1413.915015][T14965] ? clear_bhb_loop+0x60/0xb0 [ 1413.919685][T14965] ? clear_bhb_loop+0x60/0xb0 [ 1413.924357][T14965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1413.930268][T14965] RIP: 0033:0x7f404eb9e019 [ 1413.934729][T14965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1413.955949][T14965] RSP: 002b:00007f404fa34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1413.964501][T14965] RAX: ffffffffffffffda RBX: 00007f404ee25fa0 RCX: 00007f404eb9e019 [ 1413.972472][T14965] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 1413.980456][T14965] RBP: 00007f404ec3500c R08: 0000000000000000 R09: 0000000000000000 [ 1413.988421][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1413.996385][T14965] R13: 00007f404ee26038 R14: 00007f404ee25fa0 R15: 00007ffd646d05f8 [ 1414.004373][T14965]