last executing test programs: 15m52.918327442s ago: executing program 3 (id=88): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x5000009) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socket$nl_crypto(0x10, 0x3, 0x15) memfd_create(0x0, 0xc) 15m45.160313824s ago: executing program 3 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x20400) lseek(r0, 0x100, 0x4) 15m44.644786695s ago: executing program 4 (id=104): syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) 15m44.325183103s ago: executing program 3 (id=106): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x49) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x2, 0x1) 15m42.019617148s ago: executing program 3 (id=108): socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) 15m42.016221738s ago: executing program 4 (id=109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) 15m39.717408331s ago: executing program 3 (id=113): syz_io_uring_setup(0x5f86, 0x0, 0x0, &(0x7f0000000080)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000019140), 0xe6, 0x0) read$msr(r3, &(0x7f0000019180)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x80010, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') getpeername$ax25(0xffffffffffffffff, &(0x7f0000019080)={{0x3, @rose}, [@remote, @rose, @null, @bcast, @netrom, @default, @remote, @bcast]}, &(0x7f0000019100)=0x48) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x101000) 15m37.68230002s ago: executing program 3 (id=115): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x5000009) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) inotify_init() r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e000000010000c0927bd7000ffdbdf256a6974746572656e74726f70795f726e"], 0xe0}}, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r4 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) pread64(r4, &(0x7f00000000c0)=""/209, 0xd1, 0x578c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r0, 0x9) unshare(0x28040680) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 15m37.51344935s ago: executing program 4 (id=118): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x49) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x2, 0x1) 15m36.071844354s ago: executing program 4 (id=123): r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 15m31.67450567s ago: executing program 4 (id=125): syz_io_uring_setup(0x5f86, 0x0, 0x0, &(0x7f0000000080)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000019140), 0xe6, 0x0) read$msr(r3, &(0x7f0000019180)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x80010, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') getpeername$ax25(0xffffffffffffffff, &(0x7f0000019080)={{0x3, @rose}, [@remote, @rose, @null, @bcast, @netrom, @default, @remote, @bcast]}, &(0x7f0000019100)=0x48) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x101000) 15m29.847171296s ago: executing program 4 (id=128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) 15m21.925514418s ago: executing program 32 (id=115): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x5000009) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) inotify_init() r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e000000010000c0927bd7000ffdbdf256a6974746572656e74726f70795f726e"], 0xe0}}, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r4 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) pread64(r4, &(0x7f00000000c0)=""/209, 0xd1, 0x578c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r0, 0x9) unshare(0x28040680) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 15m14.091341374s ago: executing program 33 (id=128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) 9m2.510471963s ago: executing program 0 (id=839): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) read$FUSE(r1, 0x0, 0x600) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[], 0x118) 8m57.085999049s ago: executing program 0 (id=844): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb829785b7fc", 0xa1, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="014b7669e25e3028d356cfc640adb7f2d0c40bab814675cd9079f5b298389652da8a706d2a568cd46a89d23f9cfb08ce303fe26e1512e06cac54b2f3e1d86a91f92047849549c49fb7cba18737184dc50489e461155a45a0be2d4bb22f7f9f077a9bf476a238a1414465b8fd8cd074a8c6a9d7f4824d102c23c6e85a90b8d32f23421b8c4cdb314a206dc2bccad0cac2d0de059b3bc770ac6991e9d271da969af9888535b788a917df41ef3ffe7b0fd6d616c766bc4e57c9699724ffaaf6284f8656dd8943899bfdb1d0f3f93a213163854af58f130b345b40bc96f97d6a5448f04317cf4f3e6ff0cbe624c922645e8deb2302c95e9ff1d6739c40a28dbeacaff57bceb250334cf85388da7bef29cd236e52372dbb38556bdcf2ffefde403b8ddbb467fe1ffda45a607dc2987e8fdf8b6c18037b4321cd9dc3377a7a24a8337adfb00a232aff31e18e9f6136c86dacaf835a06bcb956e514415e338b20c0d5d67117e4294bf9c3d96312f2e9d8aa9d154980c0c6adc136df45eb0b5510c4a6cfd2ad65e2cc07fdc641ca70c30463538fba95f1c57190f5a6ea155185f62448dc5a1b8875268a6aa6d5fd8e5bae55a2fbfaeec5060b0238fa0ddee4d4c116ba14faf4e15724d98671b3fc733e1be4fbc9211a721041c7f14ffe645b8715467b6227de4fd74e347d09a0990e87d79245a30fdd7e3e73a0037d298b11caffd5e61ae65057d7ae147bb427d638b02fb2bf641629d6108b23d12e9029dd3c333d3cc50989e1e10a565f53cc135fab79d20b06de5c68a82f9644a67330c4b41e845cae815bcdbb3e69ae3fc137c67ca3d846ecf7d72c28c652fbb37913565ea8f3f5adfbfac3e91be97eb96b10247439d7b3a69a7cc36570c1c7535359c58b226ffd78a0baeeeb1d3a95a168182ba8511993d70fb51c7af5ac74a91af4be529c6ff54cb0021a860f352fac728b9c889d44ea4d653f7d9dd06b2b29d421b0beda4e5d1d96ee64673fad447d5fc6db71a536bf80bdd2e963a43405a9379c5704f6ef141f0b3da6beec731112bcc0202558e0094c402d7a8b9ebee1e69b896b80616d2d3f2b951236c61db7e3be19cb10460eacbc30aeb6142506dee44c4bd5e3a6580145baf4b21a9a272182ff8422185e65a1c20ffe18f4ec3fb29f0f620cdc15ce1bfb4af62cb8e69e860f8d97fae6187c1147d184252c5a303f22db02da543b4f883b68c5897c5b134b4e3c548f4687751664ff33287f2171555aab6bff02b475658e5a027be263151b27d116f2441a02fa6a90a335310cead758d8e2924f51849472871ad9467a268d02497b2a87bf481e78a6b6bfd4dcf54a700aa517bc49731a5c644a69c89793458e3bc70a88687864a79e57b51229768c89686b1cec364b06912e23b4b56ba2fa4774a7605b67497eceb4fc03174ee119fc270e45174aa0bc6367c8a3a0160964b6e429e51ad50469282df19c1e38ff17c4c2a3ee8d260023a6b11205daedac7792e1bf8af0c7a22123602d04f4e18c761fe75b0b385edac7c9a05ed66629694853381eeae36f5b712bd8c9359f58ea1bb09b9e62f9bbfe96f798295bd441d6e566f814b20906fbb49e653ed515a02d41db771a90c384c43a1fede01433d680c4226d0a1679d5c07b43eac3abaa79a8bc8f5895ca10c877b07cc55e5f749bbb2a99909f5f362797718b4ab442a09975da06159fdad27ab5f619736a9fdabd5baeb5812f195194fc19b5d828afd98a5ee699e801522cf866f004618c42d24cbe17f4a294146d05c92315474b9ea961df4b153b33fafcca5d962fd0cf83134d7e8d8b88c496e35b35ed22a3e566730c413238d794e8c068332200169259dbcb7d7d778b9d1493c3e581e1789a75a90ff356af2e38c481dfdbc12d6106ecf168f39e32e007806418672608f71aea74250a4fe4dda49e4b519d9a9dc0ebfffbbd10cedac967afa80868bbc7a64f3d81da1fba31b2cdf7596207406f931858703dc2b0415f9a32ee282586491e06d501728920d4857ae72c48f1bcc63a167b9149ffb74927527ce28cd9bf8100ea8abaa5dadd069b6bf39b86afd2d950d4319eb3e4c4165aa5e561479019f64d9beac14b13b559208132cec6f98b73b8540b13eea586b7afda456d2ef2d081a897bd4fbd2417f0d735e365f29a3cab2f209119d0efe2949165bab944e8d63de58fa35f0898ee9831a081e0577691526c0caefe0652cf6e00e21d5038cddbc057cca482515707e6e2a78a4bdfca77b0052c50e14b0a3acb578f932ccb5ea9762a641e3bd281efc640261ecb04d5cb8ed19bbb007e89c1340dc2be7450bbc5c88f5d0938fbd5d5907eb7f4d6a92b0e6dd9ab292b2e51b29bf13dbebefb842aa09c980c3afcb3e2979c6bd291c8f0ee26a8f46cff6abbdc58f36f5e5687ba1c958f6fb6d37c65af53e8894c38e123d157ab5cbecb908a41d51a4d74f9963a4e381826e9d2ccf5c03b30eb68692681af06d761cec0420f35236437fa078f423d753763ff84bbaa34de4d79ea0de4de6f96df080c580ae8bda88f366b0afc6325876072c02b8faaf5f7346b37346e3b0249a7856a61bab74d6fc74bf115dd712b6a7a1ce6385cedebb870520e15b729d23c4c9a9ff141694ca97af614901503dfbffba3d6b1c1972075fe518b5d89618e7a46ad786cb9600d778ad7097a01f2f76e73380fc741b1c299c8f58227a872bbdb5ae838d4b5784c602d934bb8bc2a0d86084f55391e8401e0d4b5be9d9abdb18ba78989742d9ae6c29f1dcfeaf8eef8e6419269920aba9fb9fd92bbaff32257dd808e6b74e34a4079bb973254a09dea77a6e8de99eb4bbcf3a212a7d701d7aae150719627947c361fd663da908faccbce0cad62414962e4bb9e4b6343f94b08778cb2f5488473f45c31c95c76e7a3606f806ac2b133e7ee581382d2f2bacf3d765b9111731053c1509d1acd7fc4873150e49146b57570106ef0f91ab70f68e5e4be862fd4dde3a49a92b5c03d0887aa7ad40ae95d15595a23de5d5b062a51ae0fdf8dbca6a1a32cb1dbb90ad0465f9f730ae90d8004a7f83f180bb861f09344647b213616191120c27be646bbf5833313a8ff6b8a2cbd5e2e07b8de2b8233da12b35831a144584f587067e289fc4434dbf0c6c45cf61c6027e8bde9d3c0c47cc981fc92e71bcbeead7cbb060c6ab8eae63a8ac76649b8dabe30b06ddb80ae0ac423d0130ceb9de7ad3061d1a35b2b7846795dab92da7613d28ba8f4a2807dd273c279accdfd26bbd72afca2ebfd15e097e6438671ae33c6dce57d013d9ab8fb0bcc3f35533c74bc08a6887c682d0807569d4563dd68d08ff13b0583f300748e08b1b35288c5ab9475a6eb01a9f94cde1c47bd0aea7f12c2f1137dc3a51c781d8a83e163f345d301e95a4a68576a50d90e82a0b84b51979b611d13ed790b49a946f9754bc8385217c08b092095d21bfdbf806159930304c9901589fbfee5c7c07fad47f1adf47867d8251c48f32e62f3d6b68a0af23964ce4eaafbc56beb8abf7a8968327dbc0494eafff237eac6b833f00290c3d398de64b7a3fee3ae7e269444cf725f7ddf961908517c6929068d351314780a3190ec7ebb63effe6b600cb71fd002d2d82dc039b3f05a93ed91796414062b0bb6889ddfb869e5ac950e54f2612652b76abbeeac827418d1a2db8530a2f4aad8209ef8685f1a4e5f7d40d7ea58c7336cf8599ff065541596139fcc429bb514f59beba96632c0092efaf402c36ace3c068e5d746ef3bb6ff3aa487de79ef4459296db332b156c2c3c2227a8c7349f9313c99f12e7387bea92b2013c998ed83f2ac03948c108b9a5c12ffdb7ffbc46b0363776a89f5c45d5c704869042948a97a406064e9c453681237345dc72d2637331ab966615aa07b5cb0ccb8afec96396e93725b544acf5b753287e0b1cae1138a6dde4b8a1e09deabad832b2393d443bfd8b3a3ec521c030a7ec5de09fe96c451a4e8ae045ee234578fbaf94e8a8e5945fc9f58de82170d92e53b10e43e51099122782774a5c7470f1174ef83b2cebedb9012395acdd32e2f35150e649537208b7c3be86a599c0ecf1bba9b81e64b673c6466f6d717b0e48b817917240041562e2f2c2a781902f62f52b0fd499aaae54aeb5c224505470bcad8e634488b4de2a99cf0b983cd29de895692b2ffe647903717c992e04233effde932790454b412bc8f06bcdbd67f3bb4eba7cdbd3477a509ab54a3899b2d9097ae37ca31ac575ed8beada0837f6909ed98dc31eeaf5721cbe834231c732bdf52ed75674d1f73faf5f22893d75cfb6164c26447ccb9d0f6bcba9e2ae48b66a99e99f9ff232") openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8m49.951948354s ago: executing program 0 (id=856): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0x58, 0x2) 8m48.680569299s ago: executing program 0 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() 8m47.449670241s ago: executing program 0 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) 8m47.001146636s ago: executing program 0 (id=867): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb829785b7fc", 0xa1, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="014b7669e25e3028d356cfc640adb7f2d0c40bab814675cd9079f5b298389652da8a706d2a568cd46a89d23f9cfb08ce303fe26e1512e06cac54b2f3e1d86a91f92047849549c49fb7cba18737184dc50489e461155a45a0be2d4bb22f7f9f077a9bf476a238a1414465b8fd8cd074a8c6a9d7f4824d102c23c6e85a90b8d32f23421b8c4cdb314a206dc2bccad0cac2d0de059b3bc770ac6991e9d271da969af9888535b788a917df41ef3ffe7b0fd6d616c766bc4e57c9699724ffaaf6284f8656dd8943899bfdb1d0f3f93a213163854af58f130b345b40bc96f97d6a5448f04317cf4f3e6ff0cbe624c922645e8deb2302c95e9ff1d6739c40a28dbeacaff57bceb250334cf85388da7bef29cd236e52372dbb38556bdcf2ffefde403b8ddbb467fe1ffda45a607dc2987e8fdf8b6c18037b4321cd9dc3377a7a24a8337adfb00a232aff31e18e9f6136c86dacaf835a06bcb956e514415e338b20c0d5d67117e4294bf9c3d96312f2e9d8aa9d154980c0c6adc136df45eb0b5510c4a6cfd2ad65e2cc07fdc641ca70c30463538fba95f1c57190f5a6ea155185f62448dc5a1b8875268a6aa6d5fd8e5bae55a2fbfaeec5060b0238fa0ddee4d4c116ba14faf4e15724d98671b3fc733e1be4fbc9211a721041c7f14ffe645b8715467b6227de4fd74e347d09a0990e87d79245a30fdd7e3e73a0037d298b11caffd5e61ae65057d7ae147bb427d638b02fb2bf641629d6108b23d12e9029dd3c333d3cc50989e1e10a565f53cc135fab79d20b06de5c68a82f9644a67330c4b41e845cae815bcdbb3e69ae3fc137c67ca3d846ecf7d72c28c652fbb37913565ea8f3f5adfbfac3e91be97eb96b10247439d7b3a69a7cc36570c1c7535359c58b226ffd78a0baeeeb1d3a95a168182ba8511993d70fb51c7af5ac74a91af4be529c6ff54cb0021a860f352fac728b9c889d44ea4d653f7d9dd06b2b29d421b0beda4e5d1d96ee64673fad447d5fc6db71a536bf80bdd2e963a43405a9379c5704f6ef141f0b3da6beec731112bcc0202558e0094c402d7a8b9ebee1e69b896b80616d2d3f2b951236c61db7e3be19cb10460eacbc30aeb6142506dee44c4bd5e3a6580145baf4b21a9a272182ff8422185e65a1c20ffe18f4ec3fb29f0f620cdc15ce1bfb4af62cb8e69e860f8d97fae6187c1147d184252c5a303f22db02da543b4f883b68c5897c5b134b4e3c548f4687751664ff33287f2171555aab6bff02b475658e5a027be263151b27d116f2441a02fa6a90a335310cead758d8e2924f51849472871ad9467a268d02497b2a87bf481e78a6b6bfd4dcf54a700aa517bc49731a5c644a69c89793458e3bc70a88687864a79e57b51229768c89686b1cec364b06912e23b4b56ba2fa4774a7605b67497eceb4fc03174ee119fc270e45174aa0bc6367c8a3a0160964b6e429e51ad50469282df19c1e38ff17c4c2a3ee8d260023a6b11205daedac7792e1bf8af0c7a22123602d04f4e18c761fe75b0b385edac7c9a05ed66629694853381eeae36f5b712bd8c9359f58ea1bb09b9e62f9bbfe96f798295bd441d6e566f814b20906fbb49e653ed515a02d41db771a90c384c43a1fede01433d680c4226d0a1679d5c07b43eac3abaa79a8bc8f5895ca10c877b07cc55e5f749bbb2a99909f5f362797718b4ab442a09975da06159fdad27ab5f619736a9fdabd5baeb5812f195194fc19b5d828afd98a5ee699e801522cf866f004618c42d24cbe17f4a294146d05c92315474b9ea961df4b153b33fafcca5d962fd0cf83134d7e8d8b88c496e35b35ed22a3e566730c413238d794e8c068332200169259dbcb7d7d778b9d1493c3e581e1789a75a90ff356af2e38c481dfdbc12d6106ecf168f39e32e007806418672608f71aea74250a4fe4dda49e4b519d9a9dc0ebfffbbd10cedac967afa80868bbc7a64f3d81da1fba31b2cdf7596207406f931858703dc2b0415f9a32ee282586491e06d501728920d4857ae72c48f1bcc63a167b9149ffb74927527ce28cd9bf8100ea8abaa5dadd069b6bf39b86afd2d950d4319eb3e4c4165aa5e561479019f64d9beac14b13b559208132cec6f98b73b8540b13eea586b7afda456d2ef2d081a897bd4fbd2417f0d735e365f29a3cab2f209119d0efe2949165bab944e8d63de58fa35f0898ee9831a081e0577691526c0caefe0652cf6e00e21d5038cddbc057cca482515707e6e2a78a4bdfca77b0052c50e14b0a3acb578f932ccb5ea9762a641e3bd281efc640261ecb04d5cb8ed19bbb007e89c1340dc2be7450bbc5c88f5d0938fbd5d5907eb7f4d6a92b0e6dd9ab292b2e51b29bf13dbebefb842aa09c980c3afcb3e2979c6bd291c8f0ee26a8f46cff6abbdc58f36f5e5687ba1c958f6fb6d37c65af53e8894c38e123d157ab5cbecb908a41d51a4d74f9963a4e381826e9d2ccf5c03b30eb68692681af06d761cec0420f35236437fa078f423d753763ff84bbaa34de4d79ea0de4de6f96df080c580ae8bda88f366b0afc6325876072c02b8faaf5f7346b37346e3b0249a7856a61bab74d6fc74bf115dd712b6a7a1ce6385cedebb870520e15b729d23c4c9a9ff141694ca97af614901503dfbffba3d6b1c1972075fe518b5d89618e7a46ad786cb9600d778ad7097a01f2f76e73380fc741b1c299c8f58227a872bbdb5ae838d4b5784c602d934bb8bc2a0d86084f55391e8401e0d4b5be9d9abdb18ba78989742d9ae6c29f1dcfeaf8eef8e6419269920aba9fb9fd92bbaff32257dd808e6b74e34a4079bb973254a09dea77a6e8de99eb4bbcf3a212a7d701d7aae150719627947c361fd663da908faccbce0cad62414962e4bb9e4b6343f94b08778cb2f5488473f45c31c95c76e7a3606f806ac2b133e7ee581382d2f2bacf3d765b9111731053c1509d1acd7fc4873150e49146b57570106ef0f91ab70f68e5e4be862fd4dde3a49a92b5c03d0887aa7ad40ae95d15595a23de5d5b062a51ae0fdf8dbca6a1a32cb1dbb90ad0465f9f730ae90d8004a7f83f180bb861f09344647b213616191120c27be646bbf5833313a8ff6b8a2cbd5e2e07b8de2b8233da12b35831a144584f587067e289fc4434dbf0c6c45cf61c6027e8bde9d3c0c47cc981fc92e71bcbeead7cbb060c6ab8eae63a8ac76649b8dabe30b06ddb80ae0ac423d0130ceb9de7ad3061d1a35b2b7846795dab92da7613d28ba8f4a2807dd273c279accdfd26bbd72afca2ebfd15e097e6438671ae33c6dce57d013d9ab8fb0bcc3f35533c74bc08a6887c682d0807569d4563dd68d08ff13b0583f300748e08b1b35288c5ab9475a6eb01a9f94cde1c47bd0aea7f12c2f1137dc3a51c781d8a83e163f345d301e95a4a68576a50d90e82a0b84b51979b611d13ed790b49a946f9754bc8385217c08b092095d21bfdbf806159930304c9901589fbfee5c7c07fad47f1adf47867d8251c48f32e62f3d6b68a0af23964ce4eaafbc56beb8abf7a8968327dbc0494eafff237eac6b833f00290c3d398de64b7a3fee3ae7e269444cf725f7ddf961908517c6929068d351314780a3190ec7ebb63effe6b600cb71fd002d2d82dc039b3f05a93ed91796414062b0bb6889ddfb869e5ac950e54f2612652b76abbeeac827418d1a2db8530a2f4aad8209ef8685f1a4e5f7d40d7ea58c7336cf8599ff065541596139fcc429bb514f59beba96632c0092efaf402c36ace3c068e5d746ef3bb6ff3aa487de79ef4459296db332b156c2c3c2227a8c7349f9313c99f12e7387bea92b2013c998ed83f2ac03948c108b9a5c12ffdb7ffbc46b0363776a89f5c45d5c704869042948a97a406064e9c453681237345dc72d2637331ab966615aa07b5cb0ccb8afec96396e93725b544acf5b753287e0b1cae1138a6dde4b8a1e09deabad832b2393d443bfd8b3a3ec521c030a7ec5de09fe96c451a4e8ae045ee234578fbaf94e8a8e5945fc9f58de82170d92e53b10e43e51099122782774a5c7470f1174ef83b2cebedb9012395acdd32e2f35150e649537208b7c3be86a599c0ecf1bba9b81e64b673c6466f6d717b0e48b817917240041562e2f2c2a781902f62f52b0fd499aaae54aeb5c224505470bcad8e634488b4de2a99cf0b983cd29de895692b2ffe647903717c992e04233effde932790454b412bc8f06bcdbd67f3bb4eba7cdbd3477a509ab54a3899b2d9097ae37ca31ac575ed8beada0837f6909ed98dc31eeaf5721cbe834231c732bdf52ed75674d1f73faf5f22893d75cfb6164c26447ccb9d0f6bcba9e2ae48b66a99e99f9ff232") openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8m31.526495028s ago: executing program 34 (id=867): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb829785b7fc", 0xa1, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m39.276491772s ago: executing program 7 (id=980): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) set_mempolicy(0x4000, &(0x7f0000000300)=0x8, 0x1e7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 7m36.430303837s ago: executing program 7 (id=984): socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) 7m34.511445669s ago: executing program 7 (id=987): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) socket$kcm(0x25, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(r1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x30}, &(0x7f0000000240)=0xc) socket$netlink(0x10, 0x3, 0xb) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 7m32.020760904s ago: executing program 7 (id=991): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setresuid(0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) 7m31.59088032s ago: executing program 7 (id=995): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) set_mempolicy(0x4000, &(0x7f0000000300)=0x8, 0x1e7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 7m28.14045187s ago: executing program 7 (id=998): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r1, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x8}, @dev}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 7m11.756527535s ago: executing program 35 (id=998): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r1, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x8}, @dev}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m29.381296172s ago: executing program 6 (id=1665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x1, r2, 0x4}) 1m27.546180039s ago: executing program 6 (id=1667): socket(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x9, [@datasec={0xc, 0x2, 0x0, 0xf, 0x1, [{0x3, 0xffff, 0x8}, {0x5, 0x101, 0x9}], "b1"}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x55, 0x0, 0x1, 0x401}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c1a5000100"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x50) r7 = socket(0x2, 0x3, 0xff) sendto$inet(r7, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r7, 0x0, 0x0, 0x2022, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000240)={0x6, 0x1}) 1m26.412196284s ago: executing program 6 (id=1668): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 1m23.696715593s ago: executing program 6 (id=1675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x5c) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r7], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r8, r8, r8], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000000c0)={0x34, r4, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}]}, 0x34}}, 0x4000) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) r10 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r10, 0x119, 0x2, 0x0, 0x0) 1m21.673711101s ago: executing program 6 (id=1678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x1, r3, 0x4}) 1m18.101965389s ago: executing program 6 (id=1683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000006080)=@newtfilter={0x30, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1m2.376426385s ago: executing program 36 (id=1683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000006080)=@newtfilter={0x30, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 18.946061566s ago: executing program 1 (id=1791): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r1, 0xb, &(0x7f0000000040)={0xfffffffffffffe00}, &(0x7f0000000340)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r6) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}}, 0x4000800) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0xa048602, 0x0, 0x1, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.566565476s ago: executing program 1 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 17.200631378s ago: executing program 1 (id=1796): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 16.192064606s ago: executing program 2 (id=1799): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000004200010025bd7000fddbdf25020000000800388004000680100001800c00c8000200000000000000040004806afb20ed7d2dfa353c11f993b60fb29b8cea177baf6fe98952dfe69a49c1e6545725ef2d657add74cf"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) unlink(&(0x7f00000004c0)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0xfd, 0xc0, 0x5, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x8000, 0x7, 0xd0, 0x3085}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000680)={'gretap0\x00', r2, 0x7, 0x10, 0x0, 0xc9, {{0x19, 0x4, 0x2, 0x1, 0x64, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4, 0x40, 0x3, 0x2}, @rr={0x7, 0x7, 0x5f, [@loopback]}, @generic={0x83, 0x8, "ca7682a2a251"}, @rr={0x7, 0x23, 0x6, [@rand_addr=0x64010102, @multicast1, @loopback, @remote, @empty, @multicast2, @local, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x7, "97236002b3"}, @generic={0x82, 0x9, "a989a3aae18a7e"}]}}}}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000580)=""/174, 0xff56) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 14.352549883s ago: executing program 2 (id=1803): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086ddde801200"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040890}, 0x10040000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001240)="5a9c243fddce6896c5bf905cef71d213d8313bcfe0f7de6fc12504bf0fa1117397e4797b05a8436ce54f455fcdfdbcb52b6ba125e107479efbe566166e2b64171b056a61823354deb2ebb700b555643b8a724a64b38b05fa7863be48b83fe5dc3934969d5139c903c009d4a6c2319313e34af6db4cc21552cfe43a008e3575c37f6ee8907788f6a759d457728d5b3a295a44a4255d4c9173fcc079ecb5", 0x9d}, {0x0}, {&(0x7f0000000580)}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 13.249553388s ago: executing program 2 (id=1805): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x4002, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 11.939224884s ago: executing program 9 (id=1807): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x201) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240), 0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1c15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 11.430184694s ago: executing program 1 (id=1808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 10.422555833s ago: executing program 9 (id=1811): io_uring_setup(0x1965, &(0x7f0000000180)={0x0, 0x1f8a, 0x0, 0x2, 0x28c}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 10.380599455s ago: executing program 8 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x4008040, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@empty, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000006c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f00000029c0)={0x658, 0x0, 0x0, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, 0x0, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0x8, 0x2, 0xfffffe01, 0x3000, 0x2, 0x0, 0x0, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, 0x0, 0x0, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, 0x0, 0x0, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0x40a, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, 0x0, 0x0, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x20006, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x80000000, 0x69504f9e, 0x80000000, 0x2000, 0x6, 0x0, 0x0, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf53, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, 0x0, 0x0, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, r5, 0x0, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002b80), &(0x7f0000002bc0)=0xc) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) 9.711978824s ago: executing program 8 (id=1813): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) 9.43294393s ago: executing program 9 (id=1814): semget(0x3, 0x4, 0x4) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6b, 0x8, 0x5, 0x2}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf250c00000008000300", @ANYRES32=r6, @ANYBLOB="8b7c79d86f64d7f2776025a4d304fddfe0255c7e9a7ae075f52799c4f85e49425ea8a23e3af2aafef9531749d2889729bea60fd189ff283bb3261f0bfb58caa11515a9253cc103beac5b14427dadeb61dc9c7a04f6d4a6c640022a868cc1c9abbfaaf68112c0bb8b87b8d3831cac92b940e649f79f624ccf024a05fbfb59d8e76d5b371c4bec681b8c6a08ab0c7f830ef92e954577f6dd8f6e23c3b26f042326ed2156ed0dc1a569509310edee9390c0e4f8ce203ae200c01024bf6f31ba804da903e19081ea9fe0e8f3d4874d977cbbf5fee35003e5731b2a5ff268e5b3968cdf10"], 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 7.326714663s ago: executing program 9 (id=1815): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080), &(0x7f0000000140)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0xa0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x5, 0x100000, 0x0, 0x2, 0x1}) socket(0x10, 0x803, 0x0) 7.304008194s ago: executing program 5 (id=1816): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r1}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r2, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) 7.120728455s ago: executing program 8 (id=1817): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x218000, 0x0) r1 = socket(0x22, 0x2, 0x3) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xffffffffffffffdb, 0xfffffffffffffffb}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x1fb}], 0x1}}], 0x1, 0x240080e4) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB='#'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 7.03130746s ago: executing program 9 (id=1818): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 6.042000208s ago: executing program 2 (id=1819): openat$rtc(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x8) r1 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x0, 0x1, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, 0x0}) 6.038970288s ago: executing program 8 (id=1820): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400", @ANYBLOB="0100"], 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r0, 0x4, 0x42800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000700), 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000004c0)={0x42, 0x2, 0x2}, 0x10) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000480), &(0x7f0000000440)=0x4) r4 = dup(r0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x209, 0x4) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback}}}}}}}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x4604, &(0x7f00000007c0)) 5.853716739s ago: executing program 5 (id=1821): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000180)='io\x00') setreuid(0x0, 0xee01) pread64(r6, &(0x7f0000000100)=""/57, 0x39, 0x40000000009) 4.737908484s ago: executing program 5 (id=1822): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x201) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240), 0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1c15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 3.273811399s ago: executing program 5 (id=1823): socket(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc0, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x9, [@datasec={0xc, 0x2, 0x0, 0xf, 0x1, [{0x3, 0xffff, 0x8}, {0x5, 0x101, 0x9}], "b1"}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x55, 0x0, 0x1, 0x401}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c1a5000100"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x50) r7 = socket(0x2, 0x3, 0xff) sendto$inet(r7, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r7, 0x0, 0x0, 0x2022, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000240)={0x6, 0x1}) 2.06224335s ago: executing program 5 (id=1824): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x3ed, 0x612, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x24040015}, 0x20000000) 2.018084073s ago: executing program 1 (id=1825): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, r1, 0xfffffffffffffffd, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000180)=0xdc39) recvfrom$inet_nvme(r3, &(0x7f00000001c0)=""/237, 0xed, 0x40000000, &(0x7f0000000340)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x7, 0x4) 1.982323945s ago: executing program 8 (id=1826): semget(0x3, 0x4, 0x4) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6b, 0x8, 0x5, 0x2}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf250c00000008000300", @ANYRES32=r6, @ANYBLOB="8b7c79d86f64d7f2776025a4d304fddfe0255c7e9a7ae075f52799c4f85e49425ea8a23e3af2aafef9531749d2889729bea60fd189ff283bb3261f0bfb58caa11515a9253cc103beac5b14427dadeb61dc9c7a04f6d4a6c640022a868cc1c9abbfaaf68112c0bb8b87b8d3831cac92b940e649f79f624ccf024a05fbfb59d8e76d5b371c4bec681b8c6a08ab0c7f830ef92e954577f6dd8f6e23c3b26f042326ed2156ed0dc1a569509310edee9390c0e4f8ce203ae200c01024bf6f31ba804da903e19081ea9fe0e8f3d4874d977cbbf5fee35003e5731b2a5ff268e5b3968cdf10"], 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 1.881185721s ago: executing program 2 (id=1827): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000)) 1.450128945s ago: executing program 5 (id=1828): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080), &(0x7f0000000140)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0xa0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x5, 0x100000, 0x0, 0x2, 0x1}) socket(0x10, 0x803, 0x0) 748.310717ms ago: executing program 8 (id=1829): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000002c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 677.13502ms ago: executing program 2 (id=1830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffe67, 0x5, 0x0, {0x0, 0x6, 0x7, 0xe42}}, 0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) faccessat(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef"], 0x0) 538.003059ms ago: executing program 1 (id=1831): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r1}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r2, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) 0s ago: executing program 9 (id=1832): ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): 0x0c25 length: 249 > 3 [ 575.600005][ T8473] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.640136][ T46] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.660927][ T46] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.716243][ T46] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.744686][ T46] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.722128][ T8473] Bluetooth: hci1: command 0x0409 tx timeout [ 578.744905][ T8502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 578.912613][ T8504] overlayfs: missing 'lowerdir' [ 579.268981][ T8472] chnl_net:caif_netlink_parms(): no params data found [ 579.740685][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 580.029024][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.152955][ T8472] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.956439][ T8472] device bridge_slave_0 entered promiscuous mode [ 581.127363][ T8472] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.145357][ T8472] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.221109][ T8472] device bridge_slave_1 entered promiscuous mode [ 581.920647][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 582.534302][ T8472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.594265][ T8472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.622054][ T46] device hsr_slave_0 left promiscuous mode [ 582.645799][ T46] device hsr_slave_1 left promiscuous mode [ 582.662839][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.671008][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.695249][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.741113][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.795974][ T46] device bridge_slave_1 left promiscuous mode [ 582.808263][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.821584][ T46] device bridge_slave_0 left promiscuous mode [ 582.834110][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.920300][ T46] device veth1_macvtap left promiscuous mode [ 582.927169][ T46] device veth0_macvtap left promiscuous mode [ 582.934239][ T46] device veth1_vlan left promiscuous mode [ 582.944395][ T46] device veth0_vlan left promiscuous mode [ 583.207550][ T8554] overlayfs: unrecognized mount option "/" or missing value [ 583.982156][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 587.082428][ T46] team0 (unregistering): Port device team_slave_1 removed [ 587.142859][ T46] team0 (unregistering): Port device team_slave_0 removed [ 587.219567][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.297448][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.865141][ T46] bond0 (unregistering): Released all slaves [ 590.034390][ T8472] team0: Port device team_slave_0 added [ 590.047708][ T8472] team0: Port device team_slave_1 added [ 590.089787][ T8472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.107820][ T8472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.138917][ T8472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.205990][ T8472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.221158][ T8472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.260147][ T8472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.601668][ T8599] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 591.442447][ T8472] device hsr_slave_0 entered promiscuous mode [ 591.461024][ T8472] device hsr_slave_1 entered promiscuous mode [ 594.888979][ T8626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 595.831908][ T8472] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 595.855856][ T8472] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 595.901879][ T8472] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 595.941625][ T8472] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 597.177540][ T8472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.279796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.298440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.602904][ T8472] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.039096][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.102815][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.184038][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.191355][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.310386][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 599.331241][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.340247][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.411457][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.418829][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.508852][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 599.565314][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 599.615630][ T8672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 599.795647][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 599.816753][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 600.613062][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 600.644701][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 600.677144][ T8472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.739924][ T8472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.864611][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 600.893501][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.385423][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.435329][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.508214][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.534646][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 605.689828][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.699044][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.721616][ T8472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.460675][ T126] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 613.441505][ T126] usb 7-1: too many configurations: 71, using maximum allowed: 8 [ 613.533439][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 614.235156][ T126] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 614.261987][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.291491][ T126] usb 7-1: Product: syz [ 614.338157][ T126] usb 7-1: Manufacturer: syz [ 614.344508][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.357448][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.366176][ T126] usb 7-1: SerialNumber: syz [ 614.434208][ T126] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 614.469412][ T8472] device veth0_vlan entered promiscuous mode [ 614.560875][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 614.569450][ T126] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 614.589467][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 614.617805][ T8472] device veth1_vlan entered promiscuous mode [ 614.628563][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 614.641936][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 614.651837][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 614.689263][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 614.700097][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 614.742556][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 614.779090][ T8770] random: crng reseeded on system resumption [ 615.463417][ T8472] device veth0_macvtap entered promiscuous mode [ 615.504458][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 615.549637][ T8472] device veth1_macvtap entered promiscuous mode [ 615.565589][ T5862] usb 7-1: USB disconnect, device number 6 [ 615.661149][ T126] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 615.680033][ T126] ath9k_htc: Failed to initialize the device [ 615.737186][ T5862] usb 7-1: ath9k_htc: USB layer deinitialized [ 615.815043][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.330727][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.352760][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.398307][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.410438][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.435599][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.446132][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.518381][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.564753][ T8472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.588168][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 616.625061][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 618.295396][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.345989][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.566254][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.343186][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.353568][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.364312][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.375400][ T8472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.386931][ T8472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.407735][ T8472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.424274][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 619.463571][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 619.496218][ T8472] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.521304][ T8472] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.542650][ T8472] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.589972][ T8472] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.915013][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.170664][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.657607][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.669536][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.681886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.253269][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 624.382967][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.390821][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.550725][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 624.753362][ T26] usb 2-1: too many configurations: 71, using maximum allowed: 8 [ 625.058329][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.7.887'. [ 625.073002][ T26] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 625.082964][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.091684][ T26] usb 2-1: Product: syz [ 625.096138][ T26] usb 2-1: Manufacturer: syz [ 625.112413][ T26] usb 2-1: SerialNumber: syz [ 625.151500][ T8844] fuse: Bad value for 'rootmode' [ 625.167333][ T26] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 625.246660][ T26] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 625.459640][ T8836] random: crng reseeded on system resumption [ 625.794515][ T126] usb 2-1: USB disconnect, device number 12 [ 626.579322][ T26] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 627.201998][ T26] ath9k_htc: Failed to initialize the device [ 627.208541][ T126] usb 2-1: ath9k_htc: USB layer deinitialized [ 627.581263][ T8875] netlink: 'syz.6.983': attribute type 1 has an invalid length. [ 628.399395][ T8879] netlink: 'syz.7.984': attribute type 16 has an invalid length. [ 628.407560][ T8879] netlink: 'syz.7.984': attribute type 17 has an invalid length. [ 628.520836][ T8879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 628.528785][ T8879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 628.918117][ T8879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.294658][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.985'. [ 629.822227][ T8886] vivid-003: kernel_thread() failed [ 630.563312][ T27] audit: type=1800 audit(1770198512.114:95): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.988" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=40697 res=0 errno=0 [ 631.197209][ T8891] delete_channel: no stack [ 632.187378][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.990'. [ 632.385109][ T8909] fuse: Bad value for 'rootmode' [ 636.117394][ T8936] netlink: 'syz.5.994': attribute type 1 has an invalid length. [ 638.959475][ T8956] netlink: 'syz.2.1000': attribute type 16 has an invalid length. [ 638.967684][ T8956] netlink: 'syz.2.1000': attribute type 17 has an invalid length. [ 638.984900][ T8956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 638.992367][ T8956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 639.001376][ T8956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 639.027436][ T8956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 653.726981][ T9029] delete_channel: no stack [ 654.597033][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1018'. [ 654.629897][ T9055] netlink: 23 bytes leftover after parsing attributes in process `syz.6.1018'. [ 656.869723][ T8473] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 656.884004][ T4427] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.906724][ T8473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 656.919563][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 656.929306][ T8473] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 656.938538][ T8473] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 656.947283][ T8473] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.372550][ T4427] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.775913][ T4427] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.958379][ T4427] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.463511][ T9071] chnl_net:caif_netlink_parms(): no params data found [ 658.851592][ T9094] binder: BINDER_SET_CONTEXT_MGR already set [ 658.887076][ T9094] binder: 9092:9094 ioctl 4018620d 200000004a80 returned -16 [ 658.954444][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 659.040843][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 659.301620][ T9071] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.357194][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.395979][ T9071] device bridge_slave_0 entered promiscuous mode [ 659.510081][ T9071] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.522474][ T9071] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.555353][ T9071] device bridge_slave_1 entered promiscuous mode [ 659.743919][ T9071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.782124][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 659.792611][ T9071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.012525][ T9071] team0: Port device team_slave_0 added [ 660.419180][ T9071] team0: Port device team_slave_1 added [ 661.100592][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 661.209662][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.253765][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.462119][ T9071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.381503][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.444499][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.648382][ T9071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.180869][ T8473] Bluetooth: hci1: command 0x040f tx timeout [ 663.826738][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 663.840888][ T9159] binder: 9158:9159 ioctl c0306201 0 returned -14 [ 663.888235][ T9150] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1036'. [ 663.999460][ T9071] device hsr_slave_0 entered promiscuous mode [ 664.029027][ T9071] device hsr_slave_1 entered promiscuous mode [ 664.057275][ T9071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.089505][ T9071] Cannot create hsr debugfs directory [ 664.328084][ T4427] device hsr_slave_0 left promiscuous mode [ 664.344614][ T4427] device hsr_slave_1 left promiscuous mode [ 664.400588][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.439093][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.470919][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.511042][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.561956][ T4427] device bridge_slave_1 left promiscuous mode [ 664.626180][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.679832][ T4427] device bridge_slave_0 left promiscuous mode [ 664.715493][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.914956][ T4427] device veth1_macvtap left promiscuous mode [ 664.954858][ T4427] device veth0_macvtap left promiscuous mode [ 664.983349][ T4427] device veth1_vlan left promiscuous mode [ 665.007604][ T4427] device veth0_vlan left promiscuous mode [ 665.343671][ T8473] Bluetooth: hci1: command 0x0419 tx timeout [ 667.071672][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 668.088771][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1044'. [ 669.462437][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 669.521164][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 669.589710][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.706637][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.254926][ T4427] bond0 (unregistering): Released all slaves [ 670.521023][ T9196] netlink: 'syz.5.1046': attribute type 4 has an invalid length. [ 675.901526][ T9071] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 675.990394][ T9071] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 676.191018][ T9071] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 676.243104][ T9071] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 676.592688][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 676.605376][ T9240] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1052'. [ 677.135985][ T9071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.151791][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 677.159849][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 677.228183][ T9071] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.267365][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 677.289419][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.360263][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.367481][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.405828][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 677.486289][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 677.516203][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 677.544331][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.551508][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.590368][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 677.621526][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 677.668445][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 677.689031][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 677.712110][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 677.731998][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 677.787173][ T9071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 677.818055][ T9071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.850950][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 677.870446][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 677.889395][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 677.908137][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 677.928183][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 677.964723][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 680.115181][ T9262] delete_channel: no stack [ 685.229052][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.448106][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 685.705008][ T9071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.833534][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.840565][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.176096][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 687.075390][ T9325] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1064'. [ 687.735796][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1070'. [ 688.234596][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1069'. [ 688.993862][ T9346] vivid-003: kernel_thread() failed [ 691.900096][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 692.007128][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 692.120701][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 692.171425][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 692.211251][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 692.261236][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 692.450387][ T9071] device veth0_vlan entered promiscuous mode [ 694.625757][ T9071] device veth1_vlan entered promiscuous mode [ 694.762399][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 696.362208][ T9071] device veth0_macvtap entered promiscuous mode [ 696.372795][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 696.431329][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 696.486845][ T9071] device veth1_macvtap entered promiscuous mode [ 696.549030][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 696.613910][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.630831][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.660592][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.739083][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.878209][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.985990][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.004039][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.014809][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.037982][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.150785][ T9397] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 697.408206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 697.425542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 697.513076][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1082'. [ 698.260288][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.327391][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.367957][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.408835][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.426900][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.438157][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.450034][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.509648][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.532367][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.575307][ T9071] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.600694][ T9071] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.714147][ T9071] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.781095][ T9071] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.864183][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 698.888614][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 699.091753][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.100044][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.211969][ T4518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.228377][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 699.258423][ T4518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.355501][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 700.741128][ T7444] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 700.960613][ T7444] usb 2-1: Using ep0 maxpacket: 8 [ 700.967329][ T7444] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 701.034550][ T7444] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 701.114733][ T7444] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 701.210409][ T7444] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 701.261093][ T7444] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.330863][ T7444] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 701.587270][ T7444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.743615][ T7444] usb 2-1: usb_control_msg returned -32 [ 702.818111][ T7444] usbtmc 2-1:16.0: can't read capabilities [ 704.454351][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1093'. [ 705.742081][ T14] usb 2-1: USB disconnect, device number 13 [ 706.266506][ T9500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1097'. [ 706.320669][ T9500] fuse: Bad value for 'rootmode' [ 709.222911][ T9525] zonefs (nullb0) ERROR: Not a zoned block device [ 710.924016][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1106'. [ 712.294198][ T14] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 712.530754][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 712.544956][ T14] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 712.643454][ T14] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 713.069335][ T14] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 713.753184][ T14] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 713.800877][ T14] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.865379][ T14] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 713.910593][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.185980][ T14] usb 7-1: usb_control_msg returned -32 [ 714.192118][ T14] usbtmc 7-1:16.0: can't read capabilities [ 716.160560][ T9581] tmpfs: Unknown parameter 'quota' [ 716.423212][ T7] usb 7-1: USB disconnect, device number 7 [ 719.563566][ T9617] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 720.025595][ T9617] team0: Port device batadv1 added [ 721.306549][ T9617] hub 9-0:1.0: USB hub found [ 721.313168][ T9617] hub 9-0:1.0: 1 port detected [ 725.011488][ T9674] blk_print_req_error: 2 callbacks suppressed [ 725.011510][ T9674] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 725.156217][ T9674] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 725.201180][ T9674] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 725.254222][ T9674] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 725.290729][ T9674] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 725.290805][ T9674] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 725.290822][ T9674] UDF-fs: Scanning with blocksize 512 failed [ 725.291626][ T9674] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 725.291967][ T9674] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 725.292005][ T9674] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 725.292260][ T9674] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 725.292297][ T9674] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 725.292319][ T9674] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 725.292334][ T9674] UDF-fs: Scanning with blocksize 1024 failed [ 725.329401][ T9674] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 725.329597][ T9674] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 725.329636][ T9674] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 725.329794][ T9674] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 725.329831][ T9674] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 725.329853][ T9674] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 725.329868][ T9674] UDF-fs: Scanning with blocksize 2048 failed [ 725.339419][ T9674] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 725.339630][ T9674] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 725.339790][ T9674] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 725.339813][ T9674] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 725.339829][ T9674] UDF-fs: Scanning with blocksize 4096 failed [ 725.339841][ T9674] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 726.770605][ T4365] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 727.001810][ T4365] usb 6-1: not running at top speed; connect to a high speed hub [ 727.002959][ T4365] usb 6-1: config 1 interface 0 has no altsetting 0 [ 727.008902][ T4365] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 727.008938][ T4365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.008962][ T4365] usb 6-1: Product: syz [ 727.008979][ T4365] usb 6-1: Manufacturer: syz [ 727.008996][ T4365] usb 6-1: SerialNumber: syz [ 727.300978][ T4365] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 727.357311][ T4365] usb 6-1: USB disconnect, device number 9 [ 727.868089][ T9697] device syzkaller0 entered promiscuous mode [ 736.778687][ T7444] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 736.968243][ T7444] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 736.981386][ T7444] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.993118][ T7444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 737.002519][ T7444] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.025720][ T7444] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 737.035009][ T7444] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 737.043464][ T7444] usb 6-1: Product: syz [ 737.047678][ T7444] usb 6-1: Manufacturer: syz [ 737.057753][ T7444] cdc_wdm 6-1:1.0: skipping garbage [ 737.064702][ T7444] cdc_wdm 6-1:1.0: skipping garbage [ 737.085167][ T7444] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 737.265514][ T4319] usb 6-1: USB disconnect, device number 10 [ 738.142803][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1154'. [ 738.436155][ T9763] netlink: 'syz.2.1151': attribute type 21 has an invalid length. [ 738.445019][ T9763] IPv6: NLM_F_CREATE should be specified when creating new route [ 738.453442][ T9763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 738.460750][ T9763] IPv6: NLM_F_CREATE should be set when creating new route [ 740.730655][ T7444] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 740.930570][ T7444] usb 2-1: Using ep0 maxpacket: 8 [ 740.937798][ T7444] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 740.967205][ T7444] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.004719][ T7444] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.045978][ T7444] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.076659][ T7444] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.155285][ T9792] blk_print_req_error: 2 callbacks suppressed [ 741.155323][ T9792] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 741.172509][ T9792] I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 741.576023][ T9792] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 741.586719][ T9792] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 741.596297][ T9792] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 741.606215][ T9792] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 741.614373][ T9792] UDF-fs: Scanning with blocksize 512 failed [ 741.621376][ T9792] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 741.630931][ T9792] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 741.640577][ T9792] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 741.650585][ T9792] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 741.660090][ T9792] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 741.669755][ T9792] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 741.677507][ T9792] UDF-fs: Scanning with blocksize 1024 failed [ 741.684328][ T9792] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 741.774921][ T9792] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 741.784724][ T9792] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 741.794634][ T9792] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 741.804202][ T9792] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 741.813880][ T9792] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 741.825322][ T9792] UDF-fs: Scanning with blocksize 2048 failed [ 741.830979][ T7444] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 741.840576][ T7444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.841881][ T9792] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 741.858189][ T9792] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 741.868027][ T9792] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 741.877920][ T9792] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 741.885990][ T9792] UDF-fs: Scanning with blocksize 4096 failed [ 741.892132][ T9792] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 742.053840][ T7444] usb 2-1: can't set config #16, error -71 [ 742.100746][ T7444] usb 2-1: USB disconnect, device number 14 [ 743.413395][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 743.432117][ T9811] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1161'. [ 743.856851][ T9821] overlayfs: failed to resolve './file1': -2 [ 744.494753][ T9830] netlink: 'syz.8.1159': attribute type 4 has an invalid length. [ 745.270369][ T9837] device syzkaller0 entered promiscuous mode [ 748.022895][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.036142][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.049353][ T9864] binder: 9863:9864 ioctl 4018620d 0 returned -22 [ 750.959290][ T9879] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1179'. [ 755.601068][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1182'. [ 755.648145][ T9895] netlink: 23 bytes leftover after parsing attributes in process `syz.6.1182'. [ 756.034568][ T9907] zonefs (nullb0) ERROR: Not a zoned block device [ 756.817738][ T9911] overlayfs: failed to resolve './file1': -2 [ 756.836940][ T9912] binder: 9910:9912 ioctl 4018620d 0 returned -22 [ 761.029904][ T9970] zonefs (nullb0) ERROR: Not a zoned block device [ 761.137595][ T9971] zonefs (nullb0) ERROR: Not a zoned block device [ 762.039331][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 762.084833][ T9978] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1200'. [ 762.097607][ T9982] binder: 9981:9982 ioctl 4018620d 0 returned -22 [ 764.811611][T10007] blk_print_req_error: 2 callbacks suppressed [ 764.811651][T10007] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 764.828623][T10007] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 764.838168][T10007] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 764.848877][T10007] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 764.858335][T10007] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 764.868205][T10007] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 764.876052][T10007] UDF-fs: Scanning with blocksize 512 failed [ 764.886776][T10007] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 764.896968][T10007] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 764.906577][T10007] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 764.917043][T10007] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 764.926727][T10007] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 764.936554][T10007] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 764.944378][T10007] UDF-fs: Scanning with blocksize 1024 failed [ 764.952877][T10007] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 764.963008][T10007] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 764.972709][T10007] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 764.983361][T10007] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 764.993129][T10007] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 765.002861][T10007] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 765.010673][T10007] UDF-fs: Scanning with blocksize 2048 failed [ 765.018817][T10007] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 765.029000][T10007] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 765.039409][T10007] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 765.049183][T10007] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 765.057014][T10007] UDF-fs: Scanning with blocksize 4096 failed [ 765.063261][T10007] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 765.750954][T10002] input: syz1 as /devices/virtual/input/input7 [ 766.763834][T10033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1211'. [ 766.789249][T10033] netlink: 'syz.1.1211': attribute type 5 has an invalid length. [ 766.800226][T10033] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.808757][T10033] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.817039][T10033] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.825303][T10033] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.868656][T10033] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.877641][T10033] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.886184][T10033] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.894840][T10033] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.994428][T10036] netlink: 'syz.1.1211': attribute type 5 has an invalid length. [ 767.034628][T10036] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.043120][T10036] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.051544][T10036] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.059765][T10036] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.385093][T10036] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.393981][T10036] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.402439][T10036] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.410848][T10036] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.097276][T10050] blktrace: Concurrent blktraces are not allowed on loop4 [ 768.874383][T10051] binder: 10049:10051 ioctl 4018620d 0 returned -22 [ 770.570665][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1217'. [ 772.090817][T10079] blk_print_req_error: 2 callbacks suppressed [ 772.090888][T10079] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 772.108864][T10079] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 772.118899][T10079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 772.130899][T10079] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 772.141586][T10079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 772.151338][T10079] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 772.159205][T10079] UDF-fs: Scanning with blocksize 512 failed [ 772.183764][T10079] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 772.195683][T10079] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 772.205625][T10079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 772.219209][T10079] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 772.229486][T10079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 772.239326][T10079] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 772.247403][T10079] UDF-fs: Scanning with blocksize 1024 failed [ 772.260219][T10079] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 772.271808][T10079] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 772.281869][T10079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 772.292805][T10079] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 772.302944][T10079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 772.312747][T10079] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 772.320707][T10079] UDF-fs: Scanning with blocksize 2048 failed [ 772.332436][T10079] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 772.344512][T10079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 772.355647][T10079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 772.365495][T10079] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 772.373419][T10079] UDF-fs: Scanning with blocksize 4096 failed [ 772.379696][T10079] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 773.713004][T10095] zonefs (nullb0) ERROR: Not a zoned block device [ 775.287095][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 775.296257][T10098] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1223'. [ 775.893790][T10108] binder: 10106:10108 ioctl 4018620d 0 returned -22 [ 775.951118][T10110] netlink: 'syz.6.1230': attribute type 10 has an invalid length. [ 775.975196][T10110] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 778.058764][T10130] blk_print_req_error: 2 callbacks suppressed [ 778.058803][T10130] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 778.075875][T10130] I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 778.085553][T10130] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 778.096488][T10130] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 778.106575][T10130] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 778.116639][T10130] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 778.124476][T10130] UDF-fs: Scanning with blocksize 512 failed [ 778.135602][T10130] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 778.145975][T10130] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 778.155614][T10130] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 778.166192][T10130] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 778.176037][T10130] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 778.185811][T10130] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 778.193630][T10130] UDF-fs: Scanning with blocksize 1024 failed [ 778.202048][T10130] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 778.212443][T10130] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 778.222142][T10130] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 778.232641][T10130] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 778.242495][T10130] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 778.252237][T10130] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 778.260028][T10130] UDF-fs: Scanning with blocksize 2048 failed [ 778.268291][T10130] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 778.278520][T10130] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 778.288867][T10130] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 778.298624][T10130] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 778.306451][T10130] UDF-fs: Scanning with blocksize 4096 failed [ 778.312687][T10130] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 778.944635][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 781.025577][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 781.038352][ T4965] wlan1: Trigger new scan to find an IBSS to join [ 781.697550][T10148] zonefs (nullb0) ERROR: Not a zoned block device [ 784.965131][ T4664] wlan1: Creating new IBSS network, BSSID 9e:17:43:58:c6:96 [ 784.997284][T10162] netlink: 'syz.8.1244': attribute type 10 has an invalid length. [ 785.099116][T10164] binder: 10161:10164 ioctl 4018620d 0 returned -22 [ 785.134510][ T4616] Bluetooth: hci5: Frame reassembly failed (-84) [ 785.636680][T10162] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 787.180652][ T4271] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 787.180698][ T8473] Bluetooth: hci5: command 0xfc11 tx timeout [ 787.232737][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1246'. [ 787.241855][T10171] netlink: 23 bytes leftover after parsing attributes in process `syz.6.1246'. [ 788.839091][ T4965] wlan1: Trigger new scan to find an IBSS to join [ 789.360252][T10208] zonefs (nullb0) ERROR: Not a zoned block device [ 790.694093][T10218] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1259'. [ 790.704219][T10218] netlink: 'syz.8.1259': attribute type 5 has an invalid length. [ 790.715369][T10218] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.724241][T10218] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.733022][T10218] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.741820][T10218] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.752844][T10218] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.761836][T10218] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.771066][T10218] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.780061][T10218] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.827857][T10225] binder: 10221:10225 ioctl 4018620d 0 returned -22 [ 790.837189][T10224] netlink: 'syz.8.1259': attribute type 5 has an invalid length. [ 790.857018][T10224] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.866057][T10224] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.875129][T10224] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.884005][T10224] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.006747][T10224] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.016120][T10224] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.025312][T10224] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.034545][T10224] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.601680][ T8325] wlan1: Trigger new scan to find an IBSS to join [ 794.016459][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1265'. [ 794.205035][T10263] netlink: 23 bytes leftover after parsing attributes in process `syz.5.1265'. [ 795.003179][ T4460] wlan1: Creating new IBSS network, BSSID fa:6e:53:ae:67:a8 [ 795.648569][T10275] fuse: Bad value for 'rootmode' [ 796.689037][T10287] binder: 10286:10287 ioctl 4018620d 0 returned -22 [ 798.639532][T10306] netlink: 'syz.2.1276': attribute type 10 has an invalid length. [ 798.732540][T10306] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 798.885839][T10311] fuse: Bad value for 'user_id' [ 800.592322][T10335] fuse: Bad value for 'rootmode' [ 800.742780][T10341] binder: 10337:10341 ioctl 4018620d 0 returned -22 [ 803.124803][T10367] blk_print_req_error: 2 callbacks suppressed [ 803.124841][T10367] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 803.140895][T10367] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 803.150485][T10367] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 803.161334][T10367] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 803.170895][T10367] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 803.180764][T10367] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 803.188666][T10367] UDF-fs: Scanning with blocksize 512 failed [ 803.197960][T10367] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 803.208163][T10367] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 803.217864][T10367] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 803.228473][T10367] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 803.238194][T10367] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 803.247948][T10367] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 803.255839][T10367] UDF-fs: Scanning with blocksize 1024 failed [ 803.264695][T10367] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 803.274864][T10367] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 803.284549][T10367] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 803.294881][T10367] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 803.304578][T10367] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 803.314418][T10367] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 803.322223][T10367] UDF-fs: Scanning with blocksize 2048 failed [ 803.330488][T10367] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 803.340771][T10367] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 803.351176][T10367] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 803.360931][T10367] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 803.368878][T10367] UDF-fs: Scanning with blocksize 4096 failed [ 803.375144][T10367] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 804.165480][T10369] fuse: Bad value for 'user_id' [ 806.541132][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1293'. [ 806.550242][T10378] netlink: 23 bytes leftover after parsing attributes in process `syz.6.1293'. [ 807.930198][T10397] fuse: Bad value for 'rootmode' [ 808.219927][T10400] binder: 10399:10400 ioctl 4018620d 0 returned -22 [ 808.703942][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.711389][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.792495][T10432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1307'. [ 815.102897][ T4616] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 817.330910][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1308'. [ 817.339993][T10457] netlink: 23 bytes leftover after parsing attributes in process `syz.8.1308'. [ 817.435681][T10465] fuse: Bad value for 'rootmode' [ 817.540606][T10468] fuse: Bad value for 'fd' [ 817.682418][ T8036] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 818.420133][T10494] binder: 10493:10494 ioctl 4018620d 0 returned -22 [ 819.832679][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1323'. [ 821.455806][T10524] fuse: Bad value for 'fd' [ 822.856329][ T9] wlan1: Trigger new scan to find an IBSS to join [ 823.088887][T10538] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1331'. [ 823.131539][T10538] netlink: 'syz.5.1331': attribute type 5 has an invalid length. [ 823.143090][T10538] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.151463][T10538] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.159643][T10538] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.168152][T10538] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.178505][T10538] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.187207][T10538] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.195709][T10538] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.204086][T10538] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.429398][T10541] netlink: 'syz.5.1331': attribute type 5 has an invalid length. [ 823.658408][T10541] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.666836][T10541] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.675262][T10541] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.683552][T10541] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.712303][T10541] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.720798][T10541] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.729511][T10541] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.738392][T10541] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.864864][T10543] netlink: 'syz.6.1332': attribute type 21 has an invalid length. [ 823.873243][T10543] IPv6: NLM_F_CREATE should be specified when creating new route [ 823.882095][T10543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 823.889649][T10543] IPv6: NLM_F_CREATE should be set when creating new route [ 823.898753][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 823.933232][T10544] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1330'. [ 824.499637][T10556] binder: 10555:10556 ioctl 4018620d 0 returned -22 [ 825.052382][ T5861] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 825.510860][T10563] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1337'. [ 826.485915][T10575] blk_print_req_error: 2 callbacks suppressed [ 826.485935][T10575] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 826.502085][T10575] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 826.512767][T10575] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 826.522885][T10575] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 826.532414][T10575] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 826.542668][T10575] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 826.550503][T10575] UDF-fs: Scanning with blocksize 512 failed [ 826.558022][T10575] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 826.567874][T10575] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 826.577543][T10575] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 826.587498][T10575] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 826.597093][T10575] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 826.606909][T10575] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 826.614809][T10575] UDF-fs: Scanning with blocksize 1024 failed [ 826.621634][T10575] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 826.631280][T10575] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 826.640863][T10575] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 826.650765][T10575] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 826.661600][T10575] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 826.671279][T10575] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 826.679039][T10575] UDF-fs: Scanning with blocksize 2048 failed [ 826.685727][T10575] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 826.695241][T10575] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 826.705218][T10575] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 826.714878][T10575] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 826.722612][T10575] UDF-fs: Scanning with blocksize 4096 failed [ 826.728896][T10575] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 826.871450][ T9] wlan1: Trigger new scan to find an IBSS to join [ 827.892760][T10581] fuse: Bad value for 'rootmode' [ 827.900968][T10587] fuse: Bad value for 'fd' [ 827.994244][ T4778] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 828.755162][ T9] wlan1: Creating new IBSS network, BSSID 72:19:71:51:be:ba [ 829.293580][T10623] binder: 10622:10623 ioctl 4018620d 0 returned -22 [ 830.553134][T10641] zonefs (nullb0) ERROR: Not a zoned block device [ 832.369917][T10652] fuse: Bad value for 'fd' [ 832.642842][T10654] fuse: Bad value for 'rootmode' [ 832.958029][T10663] netlink: 'syz.5.1360': attribute type 10 has an invalid length. [ 833.037525][T10663] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 833.319205][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1362'. [ 833.673628][T10672] device syzkaller0 entered promiscuous mode [ 833.938940][T10681] binder: 10679:10681 ioctl 4018620d 0 returned -22 [ 836.246700][T10698] zonefs (nullb0) ERROR: Not a zoned block device [ 841.237393][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1362'. [ 841.522108][T10725] fuse: Bad value for 'fd' [ 841.746234][T10733] fuse: Bad value for 'rootmode' [ 842.016911][T10744] binder: 10742:10744 ioctl 4018620d 0 returned -22 [ 845.032796][T10759] zonefs (nullb0) ERROR: Not a zoned block device [ 845.547684][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1380'. [ 846.969087][T10777] device syzkaller0 entered promiscuous mode [ 847.079797][T10783] fuse: Bad value for 'fd' [ 848.830801][ T4404] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 849.040689][ T4404] usb 9-1: Using ep0 maxpacket: 8 [ 849.055631][ T4404] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 849.103474][ T4404] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 849.250737][ T4404] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 849.519517][ T4404] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 849.630147][ T4404] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.664033][ T4404] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 849.696146][ T4404] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.034049][ T4404] usb 9-1: usb_control_msg returned -32 [ 850.039752][ T4404] usbtmc 9-1:16.0: can't read capabilities [ 852.247108][ T5729] usb 9-1: USB disconnect, device number 2 [ 853.035682][T10843] fuse: Invalid rootmode [ 856.420572][ T7444] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 856.533376][T10878] fuse: Invalid rootmode [ 856.610655][ T7444] usb 7-1: Using ep0 maxpacket: 8 [ 856.618042][ T7444] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 856.647462][ T7444] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 856.688450][ T7444] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 856.729425][ T7444] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 856.767930][ T7444] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.790772][ T7444] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 856.834017][ T7444] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.243045][ T7444] usb 7-1: usb_control_msg returned -32 [ 857.250105][ T7444] usbtmc 7-1:16.0: can't read capabilities [ 858.825733][ T9872] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 859.383358][ T4778] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 859.571763][T10907] device syzkaller0 entered promiscuous mode [ 860.114445][ T7444] usb 7-1: USB disconnect, device number 8 [ 861.082176][T10934] blk_print_req_error: 2 callbacks suppressed [ 861.082196][T10934] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.097923][T10934] I/O error, dev loop8, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.107348][T10934] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 861.117331][T10934] I/O error, dev loop8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.126785][T10934] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 861.136462][T10934] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 861.144184][T10934] UDF-fs: Scanning with blocksize 512 failed [ 861.151075][T10934] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.160642][T10934] I/O error, dev loop8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.170010][T10934] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 861.179903][T10934] I/O error, dev loop8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.189420][T10934] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 861.199064][T10934] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 861.206799][T10934] UDF-fs: Scanning with blocksize 1024 failed [ 861.213582][T10934] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.223109][T10934] I/O error, dev loop8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.232679][T10934] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 861.242573][T10934] I/O error, dev loop8, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.252110][T10934] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 861.261748][T10934] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 861.269429][T10934] UDF-fs: Scanning with blocksize 2048 failed [ 861.276188][T10934] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.285720][T10934] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 861.295655][T10934] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 861.305299][T10934] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 861.313026][T10934] UDF-fs: Scanning with blocksize 4096 failed [ 861.319137][T10934] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 862.654833][T10954] zonefs (nullb0) ERROR: Not a zoned block device [ 864.150203][T10960] fuse: Invalid rootmode [ 867.187179][ T7444] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 867.380607][ T7444] usb 2-1: Using ep0 maxpacket: 8 [ 867.387729][ T7444] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 867.404536][ T7444] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 867.414811][ T7444] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 867.432751][ T7444] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 867.443189][ T7444] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.464078][ T7444] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 867.474661][ T7444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.704665][ T7444] usb 2-1: usb_control_msg returned -32 [ 867.710317][ T7444] usbtmc 2-1:16.0: can't read capabilities [ 868.855340][T10989] blk_print_req_error: 2 callbacks suppressed [ 868.855389][T10989] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 868.871933][T10989] I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 868.881657][T10989] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 868.892198][T10989] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.248684][T10989] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 869.258475][T10989] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 869.266313][T10989] UDF-fs: Scanning with blocksize 512 failed [ 869.278032][T10989] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.289804][T10989] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.311623][T10989] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 869.322660][T10989] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.333501][T10989] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 869.343276][T10989] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 869.351134][T10989] UDF-fs: Scanning with blocksize 1024 failed [ 869.358019][T10989] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.368051][T10989] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.377795][T10989] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 869.387873][T10989] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.397489][T10989] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 869.407379][T10989] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 869.415170][T10989] UDF-fs: Scanning with blocksize 2048 failed [ 869.421806][T10989] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.431368][T10989] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 869.441225][T10989] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 869.451071][T10989] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 869.459162][T10989] UDF-fs: Scanning with blocksize 4096 failed [ 869.465494][T10989] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 870.047912][ T4319] usb 2-1: USB disconnect, device number 15 [ 870.189333][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.216609][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.304526][T11012] xt_connbytes: Forcing CT accounting to be enabled [ 870.311891][T11012] set match dimension is over the limit! [ 870.349516][T11012] SQUASHFS error: Failed to read block 0x0: -5 [ 871.327608][T11015] blktrace: Concurrent blktraces are not allowed on loop16 [ 874.116057][T11035] device syzkaller0 entered promiscuous mode [ 874.625605][T11050] fuse: Bad value for 'rootmode' [ 879.568573][ T7] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 881.050563][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 881.057531][ T7] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 881.065983][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.096736][ T7] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 881.126306][ T7] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 881.149486][ T7] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 881.160124][ T7] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.174057][ T7] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 881.183567][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.409396][ T7] usb 7-1: usb_control_msg returned -32 [ 881.427686][ T7] usbtmc 7-1:16.0: can't read capabilities [ 883.051894][ T7] usb 7-1: USB disconnect, device number 9 [ 883.561115][T11096] blktrace: Concurrent blktraces are not allowed on loop12 [ 884.400817][T11058] netlink: 'syz.2.1448': attribute type 10 has an invalid length. [ 885.986777][T11110] fuse: Bad value for 'rootmode' [ 886.184485][T11111] overlayfs: missing 'lowerdir' [ 886.858716][T11114] capability: warning: `syz.2.1459' uses 32-bit capabilities (legacy support in use) [ 888.601767][T11139] netlink: 'syz.2.1465': attribute type 10 has an invalid length. [ 888.780596][ T126] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 888.904991][T11141] blktrace: Concurrent blktraces are not allowed on loop16 [ 889.620731][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 889.635476][ T126] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 889.668573][ T126] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 889.698829][ T126] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 889.747852][ T126] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 889.800869][ T126] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.905903][ T126] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 889.965657][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.457709][ T8325] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 890.487894][ T4353] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 890.660111][T11146] device syzkaller0 entered promiscuous mode [ 890.932197][ T126] usb 2-1: usb_control_msg returned -32 [ 890.937864][ T126] usbtmc 2-1:16.0: can't read capabilities [ 891.027377][T11163] fuse: Unknown parameter 'use00000000000000000000' [ 891.474405][T11172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1471'. [ 891.527342][T11172] fuse: Bad value for 'rootmode' [ 891.686265][ T4778] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 892.581845][ T126] usb 2-1: USB disconnect, device number 16 [ 893.989521][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1474'. [ 894.003886][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1474'. [ 899.623311][T11231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1482'. [ 899.674133][T11231] fuse: Bad value for 'rootmode' [ 902.130141][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 902.139611][T11180] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1472'. [ 902.155932][T11215] netlink: 'syz.1.1478': attribute type 4 has an invalid length. [ 902.225044][T11228] netem: incorrect ge model size [ 902.231740][T11228] netem: change failed [ 902.860536][ T4404] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 903.060588][ T4404] usb 9-1: Using ep0 maxpacket: 8 [ 903.067814][ T4404] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 903.112866][ T4404] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 903.173487][ T4404] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 903.228710][ T4404] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 903.377164][ T4404] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 905.208043][ T4404] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 905.416682][ T4404] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.716456][ T4404] usb 9-1: usb_control_msg returned -71 [ 905.730264][ T4404] usbtmc 9-1:16.0: can't read capabilities [ 905.805298][ T4404] usb 9-1: USB disconnect, device number 3 [ 908.113632][T11286] blk_print_req_error: 3 callbacks suppressed [ 908.113651][T11286] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 908.129973][T11286] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 908.139440][T11286] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 908.149427][T11286] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 908.158900][T11286] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 908.168609][T11286] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 908.172635][T11278] device syzkaller0 entered promiscuous mode [ 908.177590][T11286] UDF-fs: Scanning with blocksize 512 failed [ 908.189334][T11286] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 908.199093][T11286] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 908.208721][T11286] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 908.219859][T11286] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 908.229612][T11286] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 908.239363][T11286] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 908.247145][T11286] UDF-fs: Scanning with blocksize 1024 failed [ 908.253941][T11286] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 908.263618][T11286] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 908.273173][T11286] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 908.283479][T11286] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 908.295055][T11286] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 908.306952][T11286] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 908.314821][T11286] UDF-fs: Scanning with blocksize 2048 failed [ 908.321849][T11286] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 908.331461][T11286] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 908.341825][T11286] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 908.351538][T11286] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 908.359224][T11286] UDF-fs: Scanning with blocksize 4096 failed [ 908.365448][T11286] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 912.880659][T11324] netlink: 'syz.8.1498': attribute type 4 has an invalid length. [ 913.621876][T11343] zonefs (nullb0) ERROR: Not a zoned block device [ 915.091289][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1503'. [ 915.100750][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1503'. [ 916.493862][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 918.508484][T11375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1510'. [ 918.615131][T11375] fuse: Bad value for 'rootmode' [ 921.719702][ T4353] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 921.735155][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1514'. [ 921.762257][T11397] netlink: 23 bytes leftover after parsing attributes in process `syz.8.1514'. [ 922.894866][ T4460] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 923.191546][T11413] netlink: 'syz.1.1516': attribute type 10 has an invalid length. [ 923.358582][T11413] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 923.697160][T11420] zonefs (nullb0) ERROR: Not a zoned block device [ 925.818860][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 925.891101][T11434] fuse: Bad value for 'rootmode' [ 926.399835][T11448] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 927.740525][T11457] blktrace: Concurrent blktraces are not allowed on loop4 [ 929.406019][T11471] zonefs (nullb0) ERROR: Not a zoned block device [ 929.633237][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 929.678325][T11469] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1531'. [ 930.720264][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'. [ 931.611633][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.766614][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.880802][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1539'. [ 932.803053][T11496] fuse: Bad value for 'rootmode' [ 933.074707][T11506] fuse: Unknown parameter 'user_i00000000000000000000' [ 934.681309][T11522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1546'. [ 934.728706][T11522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1546'. [ 935.099201][T11524] xt_TPROXY: Can be used only with -p tcp or -p udp [ 938.056496][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 938.070516][T11540] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1549'. [ 939.008559][T11555] binder: 11554:11555 ioctl 4018620d 0 returned -22 [ 939.324940][T11553] device syzkaller0 entered promiscuous mode [ 939.562723][T11561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1553'. [ 939.619936][T11561] fuse: Bad value for 'rootmode' [ 940.054870][T11565] fuse: Unknown parameter 'user_id00000000000000000000' [ 940.947699][T11573] zonefs (nullb0) ERROR: Not a zoned block device [ 941.921355][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1558'. [ 941.924867][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1558'. [ 945.532868][T11620] binder: 11619:11620 ioctl 4018620d 0 returned -22 [ 946.500098][T11624] fuse: Unknown parameter 'user_id00000000000000000000' [ 946.597682][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1566'. [ 948.488606][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1563'. [ 948.497692][T11613] netlink: 23 bytes leftover after parsing attributes in process `syz.5.1563'. [ 948.507347][T11629] netlink: 'syz.2.1568': attribute type 10 has an invalid length. [ 948.957215][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1571'. [ 949.143693][T11644] zonefs (nullb0) ERROR: Not a zoned block device [ 951.498605][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1573'. [ 951.512434][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1573'. [ 952.226832][T11666] binder: 11665:11666 ioctl 4018620d 0 returned -22 [ 952.253664][T11662] blk_print_req_error: 2 callbacks suppressed [ 952.253688][T11662] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 952.269588][T11662] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 952.279037][T11662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 952.289087][T11662] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 952.298528][T11662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 952.308427][T11662] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 952.316263][T11662] UDF-fs: Scanning with blocksize 512 failed [ 952.323401][T11662] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 952.333282][T11662] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 952.342833][T11662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 952.352853][T11662] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 952.362458][T11662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 952.372175][T11662] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 952.380075][T11662] UDF-fs: Scanning with blocksize 1024 failed [ 952.387070][T11662] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 952.396743][T11662] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 952.406467][T11662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 952.422438][T11662] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 952.432082][T11662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 952.441938][T11662] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 952.449624][T11662] UDF-fs: Scanning with blocksize 2048 failed [ 952.456429][T11662] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 952.466582][T11662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 952.476609][T11662] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 952.486284][T11662] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 952.494148][T11662] UDF-fs: Scanning with blocksize 4096 failed [ 952.500280][T11662] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 953.259452][ T5861] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 953.349108][T11673] fuse: Unknown parameter 'user_id00000000000000000000' [ 953.981942][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 953.995031][T11680] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1579'. [ 954.390641][ T8325] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 955.114625][T11691] netlink: 'syz.6.1582': attribute type 10 has an invalid length. [ 955.458016][T11695] device syzkaller0 entered promiscuous mode [ 955.880673][T11705] zonefs (nullb0) ERROR: Not a zoned block device [ 958.307476][T11731] fuse: Bad value for 'fd' [ 958.985187][T11740] blktrace: Concurrent blktraces are not allowed on loop4 [ 961.319064][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1594'. [ 962.370650][T11758] blk_print_req_error: 2 callbacks suppressed [ 962.370670][T11758] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.386590][T11758] I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.396277][T11758] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 962.406336][T11758] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.415780][T11758] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 962.425668][T11758] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 962.433456][T11758] UDF-fs: Scanning with blocksize 512 failed [ 962.440513][T11758] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.450312][T11758] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.459987][T11758] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 962.470150][T11758] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.479866][T11758] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 962.489704][T11758] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 962.497576][T11758] UDF-fs: Scanning with blocksize 1024 failed [ 962.504638][T11758] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.514320][T11758] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.524067][T11758] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 962.533983][T11758] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.543560][T11758] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 962.553360][T11758] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 962.561161][T11758] UDF-fs: Scanning with blocksize 2048 failed [ 962.567880][T11758] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 962.577573][T11758] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 962.587493][T11758] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 962.597464][T11758] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 962.605346][T11758] UDF-fs: Scanning with blocksize 4096 failed [ 962.611555][T11758] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 965.008965][T11770] fuse: Bad value for 'fd' [ 966.496704][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 966.505688][T11717] netlink: 23 bytes leftover after parsing attributes in process `syz.5.1586'. [ 966.590563][T11752] netlink: 'syz.1.1595': attribute type 10 has an invalid length. [ 967.983561][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1604'. [ 967.997216][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1604'. [ 968.761697][T11791] netlink: 'syz.2.1603': attribute type 4 has an invalid length. [ 968.779441][T11794] blk_print_req_error: 2 callbacks suppressed [ 968.779454][T11794] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 968.795618][T11794] I/O error, dev loop8, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 968.805063][T11794] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 968.815047][T11794] I/O error, dev loop8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 968.824507][T11794] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 968.834111][T11794] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 968.841871][T11794] UDF-fs: Scanning with blocksize 512 failed [ 968.848565][T11794] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 968.858017][T11794] I/O error, dev loop8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 968.867642][T11794] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 968.877564][T11794] I/O error, dev loop8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 968.887102][T11794] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 968.896881][T11794] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 968.904660][T11794] UDF-fs: Scanning with blocksize 1024 failed [ 968.911345][T11794] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 968.920827][T11794] I/O error, dev loop8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 968.930554][T11794] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 968.940319][T11794] I/O error, dev loop8, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 968.950280][T11794] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 968.960034][T11794] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 968.967765][T11794] UDF-fs: Scanning with blocksize 2048 failed [ 968.974307][T11794] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 968.983750][T11794] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 968.993520][T11794] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 969.003366][T11794] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 969.011061][T11794] UDF-fs: Scanning with blocksize 4096 failed [ 969.017163][T11794] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 969.493379][T11804] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1606'. [ 970.898035][T11810] fuse: Bad value for 'fd' [ 971.306974][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1612'. [ 971.587319][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 971.596450][T11821] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1614'. [ 972.660794][T11837] netlink: 'syz.5.1616': attribute type 10 has an invalid length. [ 973.321811][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1619'. [ 973.336040][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1619'. [ 976.584269][T11880] fuse: Unknown parameter '0x0000000000000004' [ 976.954099][T11885] zonefs (nullb0) ERROR: Not a zoned block device [ 977.428844][T11887] device syzkaller0 entered promiscuous mode [ 977.448771][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'. [ 977.457964][T11889] netlink: 23 bytes leftover after parsing attributes in process `syz.5.1627'. [ 978.546277][T11899] blk_print_req_error: 2 callbacks suppressed [ 978.546295][T11899] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 978.562321][T11899] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 978.571831][T11899] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 978.581913][T11899] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 978.591476][T11899] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 978.601221][T11899] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 978.610270][T11899] UDF-fs: Scanning with blocksize 512 failed [ 978.616969][T11899] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 978.626932][T11899] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 978.636579][T11899] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 978.646939][T11899] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 978.656585][T11899] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 978.666259][T11899] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 978.674022][T11899] UDF-fs: Scanning with blocksize 1024 failed [ 978.680750][T11899] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 978.690430][T11899] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 978.700001][T11899] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 978.710039][T11899] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 978.719537][T11899] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 978.729351][T11899] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 978.737069][T11899] UDF-fs: Scanning with blocksize 2048 failed [ 978.743779][T11899] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 978.753228][T11899] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 978.763137][T11899] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 978.772926][T11899] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 978.780688][T11899] UDF-fs: Scanning with blocksize 4096 failed [ 978.786777][T11899] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 982.186800][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'. [ 982.207356][T11917] fuse: Unknown parameter '0x0000000000000004' [ 983.565679][T11929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1638'. [ 984.679429][T11933] zonefs (nullb0) ERROR: Not a zoned block device [ 985.327965][T11900] netlink: 'syz.5.1630': attribute type 10 has an invalid length. [ 985.343504][T11908] netlink: 'syz.8.1629': attribute type 4 has an invalid length. [ 985.351096][ T4419] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 986.308747][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 986.317712][T11939] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1641'. [ 986.745774][T11950] blk_print_req_error: 2 callbacks suppressed [ 986.745795][T11950] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 986.761732][T11950] I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 986.771161][T11950] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 986.781664][T11950] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 986.791451][T11950] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 986.801108][T11950] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 986.808777][T11950] UDF-fs: Scanning with blocksize 512 failed [ 986.815539][T11950] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 986.825180][T11950] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 986.834543][T11950] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 986.844334][T11950] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 986.853923][T11950] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 986.863544][T11950] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 986.871518][T11950] UDF-fs: Scanning with blocksize 1024 failed [ 986.878144][T11950] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 986.887605][T11950] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 986.897107][T11950] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 986.906869][T11950] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 986.916655][T11950] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 986.926356][T11950] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 986.934039][T11950] UDF-fs: Scanning with blocksize 2048 failed [ 986.940659][T11950] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 986.950181][T11950] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 986.960090][T11950] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 986.969796][T11950] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 986.977582][T11950] UDF-fs: Scanning with blocksize 4096 failed [ 986.983722][T11950] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 988.577480][T11973] fuse: Unknown parameter '0x0000000000000004' [ 989.447724][T11980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1649'. [ 989.479973][T11980] fuse: Bad value for 'rootmode' [ 990.871610][T12004] netlink: 'syz.8.1654': attribute type 10 has an invalid length. [ 991.079361][T12003] device syzkaller0 entered promiscuous mode [ 993.025868][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.032351][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.315329][T12032] fuse: Unknown parameter '0x0000000000000004' [ 993.529729][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 993.563571][T12038] fuse: Bad value for 'rootmode' [ 994.641129][T12043] zonefs (nullb0) ERROR: Not a zoned block device [ 997.396389][T12061] blk_print_req_error: 2 callbacks suppressed [ 997.396428][T12061] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 997.412926][T12061] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 997.422819][T12061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 997.432851][T12061] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 997.448849][T12061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 997.458594][T12061] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 997.466473][T12061] UDF-fs: Scanning with blocksize 512 failed [ 997.473317][T12061] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 997.482894][T12061] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 997.492369][T12061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 997.515676][T12061] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 997.525419][T12061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 997.535245][T12061] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 997.543117][T12061] UDF-fs: Scanning with blocksize 1024 failed [ 997.549979][T12061] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 997.559698][T12061] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 997.569490][T12061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 997.583259][T12061] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 997.593457][T12061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 997.603422][T12061] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 997.611363][T12061] UDF-fs: Scanning with blocksize 2048 failed [ 997.625332][T12061] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 997.638142][T12061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 997.651407][T12061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 997.661380][T12061] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 997.669223][T12061] UDF-fs: Scanning with blocksize 4096 failed [ 997.675585][T12061] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 999.796179][T12009] netlink: 'syz.5.1653': attribute type 4 has an invalid length. [ 1000.061591][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1656'. [ 1000.070884][T12017] netlink: 23 bytes leftover after parsing attributes in process `syz.8.1656'. [ 1000.851357][T12080] fuse: Unknown parameter '0x0000000000000004' [ 1002.164673][T12090] zonefs (nullb0) ERROR: Not a zoned block device [ 1004.696678][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1679'. [ 1006.881461][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 1006.890554][T12115] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1681'. [ 1007.371793][T12121] device syzkaller0 entered promiscuous mode [ 1009.374021][T12137] fuse: Unknown parameter '0x0000000000000004' [ 1013.390151][T12162] zonefs (nullb0) ERROR: Not a zoned block device [ 1016.595894][T12182] fuse: Unknown parameter 'fd0x0000000000000004' [ 1017.773643][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1701'. [ 1017.944947][T12190] fuse: Bad value for 'rootmode' [ 1020.520066][T12216] zonefs (nullb0) ERROR: Not a zoned block device [ 1023.456759][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1023.470789][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1023.480280][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1023.499848][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1023.508510][ T4275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1023.516706][ T4275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1023.560723][T12232] fuse: Unknown parameter 'fd0x0000000000000004' [ 1023.899163][T12159] netlink: 'syz.2.1694': attribute type 10 has an invalid length. [ 1025.590615][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 1025.789887][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 1026.059034][T12243] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1712'. [ 1026.170677][T12229] chnl_net:caif_netlink_parms(): no params data found [ 1026.197946][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 1027.660527][ T4275] Bluetooth: hci5: command 0x041b tx timeout [ 1028.261917][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.269153][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.280986][T12229] device bridge_slave_0 entered promiscuous mode [ 1028.292548][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.300783][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.309450][T12229] device bridge_slave_1 entered promiscuous mode [ 1028.385884][T12229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.420267][T12229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.504308][T12229] team0: Port device team_slave_0 added [ 1028.524792][T12229] team0: Port device team_slave_1 added [ 1028.686073][T12229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.709383][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.802895][T12229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.872907][T12229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.890209][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.001994][T12229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.830764][ T4271] Bluetooth: hci5: command 0x040f tx timeout [ 1029.921908][T12229] device hsr_slave_0 entered promiscuous mode [ 1029.952815][T12229] device hsr_slave_1 entered promiscuous mode [ 1030.658012][T12274] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1717'. [ 1030.669337][T12274] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1717'. [ 1031.079185][T12280] fuse: Unknown parameter 'fd0x0000000000000004' [ 1031.092023][T12278] netlink: 'syz.8.1721': attribute type 10 has an invalid length. [ 1031.354856][T12229] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1031.497102][T12229] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1031.910750][ T4271] Bluetooth: hci5: command 0x0419 tx timeout [ 1031.995048][T12229] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1032.071857][T12229] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1035.217473][T12229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.256216][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1035.272334][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1035.293047][T12229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.338246][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1035.360017][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1035.378822][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.386068][ T4616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.419909][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1035.436779][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1035.454318][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1035.485932][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.493189][ T4616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.510175][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1035.519952][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1035.561538][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1035.595641][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1035.627435][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1035.639528][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1035.660173][T12229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1035.677863][T12229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1035.708629][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1035.724389][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1035.738519][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1035.754963][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1035.768316][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1035.795564][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1037.528016][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1037.549111][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1037.578858][T12229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.906011][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1731'. [ 1038.919888][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1731'. [ 1039.678150][T12343] netlink: 'syz.1.1732': attribute type 10 has an invalid length. [ 1042.775408][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1042.897080][T12367] zonefs (nullb0) ERROR: Not a zoned block device [ 1042.928172][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1043.040028][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1043.051765][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1043.060990][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1043.071284][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1043.106429][T12229] device veth0_vlan entered promiscuous mode [ 1043.150255][T12229] device veth1_vlan entered promiscuous mode [ 1043.318351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1043.327515][T12380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1740'. [ 1043.339727][T12380] fuse: Bad value for 'rootmode' [ 1044.073623][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1044.094442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1044.114298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1044.265786][T12229] device veth0_macvtap entered promiscuous mode [ 1044.329156][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1044.345122][T12385] netlink: 'syz.5.1742': attribute type 10 has an invalid length. [ 1044.357111][T12229] device veth1_macvtap entered promiscuous mode [ 1044.484911][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.517953][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.538176][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.558135][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.569935][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.581289][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.597430][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.609681][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.621261][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.632629][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.655599][T12229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.671758][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1044.697311][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1044.719647][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.743616][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.768320][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.781719][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.792880][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.804030][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.814606][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.825889][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.837193][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.848637][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.883665][T12229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.902110][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1044.913752][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1044.933498][T12229] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.952973][T12229] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.976373][T12229] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.004589][T12229] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.139804][ T4616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.180087][ T4616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.284182][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1046.375305][ T4616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.399662][ T4616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.141652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1050.323494][T12432] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1752'. [ 1050.365556][T12432] fuse: Bad value for 'rootmode' [ 1054.464200][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.470788][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.582730][T12468] zonefs (nullb0) ERROR: Not a zoned block device [ 1056.051391][T12475] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1766'. [ 1056.076400][T12475] fuse: Bad value for 'rootmode' [ 1059.286215][T12512] zonefs (nullb0) ERROR: Not a zoned block device [ 1060.132004][T12515] zonefs (nullb0) ERROR: Not a zoned block device [ 1060.624314][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1770'. [ 1060.635609][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1770'. [ 1060.796343][T12527] fuse: Bad value for 'rootmode' [ 1061.654374][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 1061.670199][T12532] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1777'. [ 1062.312115][T12543] blk_print_req_error: 2 callbacks suppressed [ 1062.312137][T12543] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1062.328001][T12543] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1062.337711][T12543] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1062.347652][T12543] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1062.357346][T12543] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1062.367177][T12543] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1062.374958][T12543] UDF-fs: Scanning with blocksize 512 failed [ 1062.381897][T12543] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1062.391901][T12543] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1062.401482][T12543] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1062.411455][T12543] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1062.421059][T12543] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1062.430781][T12543] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1062.438596][T12543] UDF-fs: Scanning with blocksize 1024 failed [ 1062.445554][T12543] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1062.455217][T12543] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1062.464805][T12543] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1062.475045][T12543] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1062.484645][T12543] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1062.494370][T12543] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1062.502228][T12543] UDF-fs: Scanning with blocksize 2048 failed [ 1062.508976][T12543] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1062.518788][T12543] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1062.528724][T12543] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1062.538489][T12543] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1062.546379][T12543] UDF-fs: Scanning with blocksize 4096 failed [ 1062.552586][T12543] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 1063.161162][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1781'. [ 1064.797922][T12559] zonefs (nullb0) ERROR: Not a zoned block device [ 1065.943664][T12569] fuse: Bad value for 'rootmode' [ 1067.276241][T12578] netlink: 'syz.1.1795': attribute type 10 has an invalid length. [ 1067.661311][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 1067.670459][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1794'. [ 1069.183535][T12592] overlayfs: missing 'lowerdir' [ 1070.030704][T12591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1070.079444][T12591] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1070.090795][T12591] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1070.443182][T12605] zonefs (nullb0) ERROR: Not a zoned block device [ 1070.496692][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1796'. [ 1070.713098][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1796'. [ 1071.916291][T12619] random: crng reseeded on system resumption [ 1072.649383][T12624] fuse: Bad value for 'fd' [ 1074.034006][T12633] netlink: 'syz.5.1809': attribute type 10 has an invalid length. [ 1076.085586][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1808'. [ 1076.183650][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1814'. [ 1076.786199][T12650] infiniband syz2: set active [ 1076.791551][T12650] infiniband syz2: added veth1_to_team [ 1076.816659][T12650] infiniband syz2: Couldn't open port 1 [ 1076.871350][T12650] RDS/IB: syz2: added [ 1076.876102][T12650] smc: adding ib device syz2 with port count 1 [ 1076.882720][T12650] smc: ib device syz2 port 1 has pnetid [ 1077.817759][T12665] kAFS: No cell specified [ 1079.899294][T12681] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1818'. [ 1079.910284][T12681] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1818'. [ 1082.817832][T12693] binder: 12692:12693 ioctl 4018620d 0 returned -22 [ 1083.340235][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1826'. [ 1083.355747][T12704] rdma_rxe: rxe_register_device failed with error -23 [ 1083.364055][T12704] rdma_rxe: failed to add veth1_to_team [ 1084.440557][ T4347] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1084.640575][ T4347] usb 3-1: Using ep0 maxpacket: 32 [ 1084.647636][ T4347] usb 3-1: no configurations [ 1084.688569][ T4347] usb 3-1: can't read configurations, error -22 [ 1084.900465][ T4347] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1085.086320][T12729] [ 1085.088729][T12729] ====================================================== [ 1085.090576][ T4347] usb 3-1: Using ep0 maxpacket: 32 [ 1085.095767][T12729] WARNING: possible circular locking dependency detected [ 1085.095813][T12729] syzkaller #0 Not tainted [ 1085.112393][T12729] ------------------------------------------------------ [ 1085.119433][T12729] syz.9.1832/12729 is trying to acquire lock: [ 1085.125616][T12729] ffff8880645d1458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x10d/0xae0 [ 1085.137707][T12729] [ 1085.137707][T12729] but task is already holding lock: [ 1085.145102][T12729] ffff8880645d0130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 1085.154270][T12729] [ 1085.154270][T12729] which lock already depends on the new lock. [ 1085.154270][T12729] [ 1085.164960][T12729] [ 1085.164960][T12729] the existing dependency chain (in reverse order) is: [ 1085.174182][T12729] [ 1085.174182][T12729] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1085.181960][T12729] lock_sock_nested+0x44/0x100 [ 1085.187326][T12729] smc_listen_out+0x109/0x3d0 [ 1085.192545][T12729] smc_listen_work+0x581/0xd70 [ 1085.197845][T12729] process_one_work+0x8a2/0x1160 [ 1085.203376][T12729] worker_thread+0xaa2/0x1270 [ 1085.208586][T12729] kthread+0x29d/0x330 [ 1085.213287][T12729] ret_from_fork+0x1f/0x30 [ 1085.218399][T12729] [ 1085.218399][T12729] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1085.228593][T12729] __lock_acquire+0x2d07/0x7d10 [ 1085.234078][T12729] lock_acquire+0x1bb/0x4a0 [ 1085.239124][T12729] __flush_work+0x126/0xae0 [ 1085.244338][T12729] __cancel_work_timer+0x3f4/0x560 [ 1085.250033][T12729] smc_clcsock_release+0x5c/0xe0 [ 1085.255571][T12729] __smc_release+0x661/0x7d0 [ 1085.260878][T12729] smc_close_non_accepted+0xd1/0x1f0 [ 1085.266713][T12729] smc_close_active+0xb00/0xea0 [ 1085.272117][T12729] __smc_release+0x8d/0x7d0 [ 1085.277172][T12729] smc_release+0x2ca/0x530 [ 1085.282218][T12729] sock_close+0xd5/0x240 [ 1085.287085][T12729] __fput+0x22c/0x920 [ 1085.291738][T12729] task_work_run+0x1d0/0x260 [ 1085.296962][T12729] exit_to_user_mode_loop+0xe6/0x110 [ 1085.303012][T12729] exit_to_user_mode_prepare+0xee/0x180 [ 1085.309199][T12729] syscall_exit_to_user_mode+0x16/0x40 [ 1085.315229][T12729] do_syscall_64+0x58/0xa0 [ 1085.320223][T12729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.326804][T12729] [ 1085.326804][T12729] other info that might help us debug this: [ 1085.326804][T12729] [ 1085.337086][T12729] Possible unsafe locking scenario: [ 1085.337086][T12729] [ 1085.344551][T12729] CPU0 CPU1 [ 1085.349926][T12729] ---- ---- [ 1085.355308][T12729] lock(sk_lock-AF_SMC/1); [ 1085.359839][T12729] lock((work_completion)(&new_smc->smc_listen_work)); [ 1085.369401][T12729] lock(sk_lock-AF_SMC/1); [ 1085.376462][T12729] lock((work_completion)(&new_smc->smc_listen_work)); [ 1085.383554][T12729] [ 1085.383554][T12729] *** DEADLOCK *** [ 1085.383554][T12729] [ 1085.391799][T12729] 2 locks held by syz.9.1832/12729: [ 1085.397004][T12729] #0: ffff888073c51410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1085.407219][T12729] #1: ffff8880645d0130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 1085.416661][T12729] [ 1085.416661][T12729] stack backtrace: [ 1085.422579][T12729] CPU: 0 PID: 12729 Comm: syz.9.1832 Not tainted syzkaller #0 [ 1085.430357][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1085.440722][T12729] Call Trace: [ 1085.444023][T12729] [ 1085.447054][T12729] dump_stack_lvl+0x188/0x24e [ 1085.451756][T12729] ? load_image+0x400/0x400 [ 1085.456388][T12729] ? show_regs_print_info+0x12/0x12 [ 1085.461608][T12729] ? print_circular_bug+0x12b/0x1a0 [ 1085.466831][T12729] check_noncircular+0x296/0x330 [ 1085.471806][T12729] ? look_up_lock_class+0x75/0x140 [ 1085.477111][T12729] ? add_chain_block+0x940/0x940 [ 1085.482064][T12729] ? lockdep_lock+0xf1/0x1f0 [ 1085.486706][T12729] ? _find_first_zero_bit+0xcf/0x100 [ 1085.492066][T12729] __lock_acquire+0x2d07/0x7d10 [ 1085.496976][T12729] ? __bfs+0x2a3/0x5c0 [ 1085.501060][T12729] ? verify_lock_unused+0x140/0x140 [ 1085.506275][T12729] ? mark_lock+0x94/0x320 [ 1085.510631][T12729] ? __lock_acquire+0x13cf/0x7d10 [ 1085.515686][T12729] ? add_chain_block+0x940/0x940 [ 1085.520731][T12729] ? lockdep_unlock+0x142/0x2e0 [ 1085.525599][T12729] lock_acquire+0x1bb/0x4a0 [ 1085.530117][T12729] ? __flush_work+0x10d/0xae0 [ 1085.534808][T12729] ? __lock_acquire+0x13cf/0x7d10 [ 1085.540030][T12729] ? read_lock_is_recursive+0x10/0x10 [ 1085.545431][T12729] ? __flush_work+0x10d/0xae0 [ 1085.550117][T12729] __flush_work+0x126/0xae0 [ 1085.554630][T12729] ? __flush_work+0x10d/0xae0 [ 1085.559339][T12729] ? verify_lock_unused+0x140/0x140 [ 1085.564582][T12729] ? flush_work+0x20/0x20 [ 1085.569005][T12729] ? try_to_grab_pending+0xfa/0x860 [ 1085.574212][T12729] ? lockdep_hardirqs_off+0x70/0x100 [ 1085.579642][T12729] ? mark_lock+0x94/0x320 [ 1085.584004][T12729] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1085.590015][T12729] ? lock_chain_count+0x20/0x20 [ 1085.594914][T12729] ? __cancel_work_timer+0x36a/0x560 [ 1085.600283][T12729] __cancel_work_timer+0x3f4/0x560 [ 1085.605621][T12729] ? cancel_work_sync+0x20/0x20 [ 1085.610529][T12729] ? __smc_release+0x659/0x7d0 [ 1085.615356][T12729] ? __local_bh_enable_ip+0x136/0x1c0 [ 1085.620812][T12729] ? lockdep_hardirqs_on+0x94/0x140 [ 1085.626030][T12729] ? __local_bh_enable_ip+0x136/0x1c0 [ 1085.631536][T12729] ? _local_bh_enable+0xa0/0xa0 [ 1085.636593][T12729] smc_clcsock_release+0x5c/0xe0 [ 1085.641641][T12729] __smc_release+0x661/0x7d0 [ 1085.646273][T12729] ? do_raw_spin_unlock+0x11d/0x230 [ 1085.651488][T12729] smc_close_non_accepted+0xd1/0x1f0 [ 1085.656795][T12729] smc_close_active+0xb00/0xea0 [ 1085.661694][T12729] ? sock_no_sendpage_locked+0x1c0/0x1c0 [ 1085.667380][T12729] __smc_release+0x8d/0x7d0 [ 1085.671939][T12729] ? do_raw_spin_unlock+0x11d/0x230 [ 1085.677252][T12729] smc_release+0x2ca/0x530 [ 1085.681696][T12729] sock_close+0xd5/0x240 [ 1085.685993][T12729] ? sock_mmap+0x90/0x90 [ 1085.690276][T12729] __fput+0x22c/0x920 [ 1085.694322][T12729] task_work_run+0x1d0/0x260 [ 1085.698947][T12729] ? task_work_cancel+0x220/0x220 [ 1085.704088][T12729] ? exit_to_user_mode_loop+0x3b/0x110 [ 1085.709591][T12729] exit_to_user_mode_loop+0xe6/0x110 [ 1085.714937][T12729] exit_to_user_mode_prepare+0xee/0x180 [ 1085.720526][T12729] syscall_exit_to_user_mode+0x16/0x40 [ 1085.726006][T12729] do_syscall_64+0x58/0xa0 [ 1085.730871][T12729] ? clear_bhb_loop+0x60/0xb0 [ 1085.735608][T12729] ? clear_bhb_loop+0x60/0xb0 [ 1085.740326][T12729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.746259][T12729] RIP: 0033:0x7f3754b9aeb9 [ 1085.750693][T12729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.770421][T12729] RSP: 002b:00007ffd023e7618 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1085.778954][T12729] RAX: 0000000000000000 RBX: 00007f3754e17da0 RCX: 00007f3754b9aeb9 [ 1085.787463][T12729] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1085.795446][T12729] RBP: 00007f3754e17da0 R08: 00007f3754e16038 R09: 0000000000000000 [ 1085.803431][T12729] R10: 00000000003ffd38 R11: 0000000000000246 R12: 00000000001090e1 [ 1085.811427][T12729] R13: 00007f3754e15fac R14: 0000000000108e13 R15: 00007ffd023e7720 [ 1085.819420][T12729] [ 1085.853984][ T4347] usb 3-1: no configurations [ 1085.859066][ T4347] usb 3-1: can't read configurations, error -22 [ 1085.874856][ T4347] usb usb3-port1: attempt power cycle [ 1086.290451][ T4347] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1086.322695][ T4347] usb 3-1: Using ep0 maxpacket: 32 [ 1086.328470][ T4347] usb 3-1: no configurations [ 1086.333642][ T4347] usb 3-1: can't read configurations, error -22 [ 1086.490453][ T4347] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1086.541053][ T4347] usb 3-1: Using ep0 maxpacket: 32 [ 1086.546880][ T4347] usb 3-1: no configurations [ 1086.554793][ T4347] usb 3-1: can't read configurations, error -22 [ 1086.562433][ T4347] usb usb3-port1: unable to enumerate USB device