last executing test programs: 14m17.282592026s ago: executing program 0 (id=194): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r3 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r0) 14m14.322849164s ago: executing program 0 (id=199): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) sendto$inet6(r0, &(0x7f0000000280)="d47e498a2a", 0x5, 0x4010, 0x0, 0x0) 14m14.057745975s ago: executing program 0 (id=201): socket$inet6(0xa, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 14m12.471079674s ago: executing program 0 (id=210): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 14m11.241690133s ago: executing program 0 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c000380080001400000000008000240"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 14m10.561643598s ago: executing program 0 (id=218): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x1) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 14m10.458604256s ago: executing program 32 (id=218): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x1) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 13m41.836282642s ago: executing program 5 (id=299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 13m40.767841888s ago: executing program 5 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13m38.357087162s ago: executing program 5 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) 13m38.13954061s ago: executing program 5 (id=306): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x11, 0x2c6, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000480)=""/4096, 0x1000) 13m36.953085045s ago: executing program 5 (id=308): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xffc0, 0x4, 0x0, 0x6}, 'syz0\x00', 0x1a}) close(0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m36.952080195s ago: executing program 2 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x400, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r0, &(0x7f0000000480)=""/240, 0xffb3) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getdents64(r0, 0x0, 0x0) 13m35.712765855s ago: executing program 2 (id=313): write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, 'bridge\x00', 0x3a, ',{', 0x3a, './file0'}, 0x30) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42102, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x9020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x44}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x2, 0x15, 0x9, 0x9, 0x5, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_address={0x3, 0x7, 0x3c, 0x80, 0x0, @in={0x2, 0x4e24, @loopback}}]}, 0x28}}, 0x4000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, 0x0) 13m35.593687125s ago: executing program 5 (id=314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x31, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x63d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 13m35.283465429s ago: executing program 33 (id=314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x31, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x63d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 13m34.576237477s ago: executing program 2 (id=319): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) openat$nvram(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m33.251771464s ago: executing program 2 (id=323): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 13m29.376827806s ago: executing program 2 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x64a, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x0, 0x26, 0x0, 0x1}, 0x28) 13m26.976124329s ago: executing program 2 (id=335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r2, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 13m25.982868029s ago: executing program 34 (id=335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r2, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 12m35.482327378s ago: executing program 7 (id=467): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, 0xffffffffffffffff, 0x16}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x14, 0x5, 0x0) 12m33.919934734s ago: executing program 7 (id=470): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) inotify_init1(0x800) openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a"], 0x54}}, 0x0) 12m32.22892135s ago: executing program 7 (id=475): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x24000094) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x25, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x45ce, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440), 0x10, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0xc0d0) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/201, 0xc9}], 0x1}, 0x20) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 12m32.077461613s ago: executing program 7 (id=477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x82, &(0x7f0000000080)={0x0, 0x5}, 0x8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4a1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) socket(0x2b, 0x2, 0x9) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000640)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 12m30.912424746s ago: executing program 7 (id=480): socket$kcm(0x21, 0x2, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000240)) socket$packet(0x11, 0x3, 0x300) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x3, 0x1, 0x2, 0x7d7, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x200001, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x16, 0x200, 0x40, 0x19b2, 0x8000, 0x7, 0xc1, 0x4000000, 0x7, 0x103, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x4, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x7, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x7, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0xf, 0x7, 0x800, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0xc, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x4, 0x8, 0x40, 0xc14, 0x80000001, 0x3, 0x3, 0x7, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x4, 0x0, 0xfff, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0x2f404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x2, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x10000, 0x7f, 0x2, 0xd, 0x400, 0x0, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0xfffffffc, 0x2, 0x5d9fff6, 0x3ff, 0x10ff, 0x4, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0x9, 0x0, 0xffff, 0x7, 0x6, 0x0, 0x6, 0x9, 0x2000002, 0x3, 0x80, 0x8, 0x0, 0x6, 0x10], [0xffefff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x6, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x7, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0x0, 0x3c65, 0xa, 0x6, 0x80, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x73ea7d12, 0xe, 0x7, 0x13e, 0x7, 0x8, 0xb757, 0x2, 0x117, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x5, 0xf, 0x100, 0x10000400, 0x49, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0x2000000, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 12m30.721839991s ago: executing program 7 (id=482): set_mempolicy(0x6005, 0x0, 0x4) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 12m15.261310777s ago: executing program 35 (id=482): set_mempolicy(0x6005, 0x0, 0x4) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 1m52.529094431s ago: executing program 3 (id=2112): mkdir(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xf00) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2000008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000240)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e561eb1bcb4a046d00825a02a373c4cd08785e4e69234ffbff79f36d5949767ec9ab9342262268333a390a88da195cb8fd851585cd", 0xa1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 1m50.866161256s ago: executing program 3 (id=2116): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80c0) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 1m49.125174076s ago: executing program 3 (id=2121): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x200000) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x13, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x10000000]}) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) 1m44.087422892s ago: executing program 3 (id=2128): mkdir(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xf00) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2000008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000240)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e561eb1bcb4a046d00825a02a373c4cd08785e4e69234ffbff79f36d5949767ec9ab9342262268333a390a88da195cb8fd851585cd", 0xa1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 1m42.077665644s ago: executing program 3 (id=2130): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_open_procfs(0x0, &(0x7f0000000c40)='fd/3\x00') sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x2f, 0x0, 0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) 1m40.921006587s ago: executing program 3 (id=2135): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x40, 0x0, 0x1000f4) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000300)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@mode={'mode', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x1}}, {@adinicb}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@noadinicb}, {@uid}]}, 0x1, 0xc67, &(0x7f0000003a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x40000, 0x40) 1m24.435632645s ago: executing program 36 (id=2135): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x40, 0x0, 0x1000f4) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000300)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@mode={'mode', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x1}}, {@adinicb}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@noadinicb}, {@uid}]}, 0x1, 0xc67, &(0x7f0000003a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x40000, 0x40) 1m7.885648557s ago: executing program 1 (id=2206): mkdir(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xf00) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2000008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000240)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e561eb1bcb4a046d00825a02a373c4cd08785e4e69234ffbff79f36d5949767ec9ab9342262268333a390a88da195cb8fd851585cd", 0xa1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 1m7.669017635s ago: executing program 1 (id=2207): mkdir(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xf00) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000240)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e561eb1bcb4a046d00825a02a373c4cd08785e4e69234ffbff79f36d5949767ec9ab9342262268333a390a88da195cb8fd851585cd", 0xa1, 0xfffffffffffffffe) 1m6.539657676s ago: executing program 1 (id=2220): mkdir(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xf00) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() fallocate(0xffffffffffffffff, 0x20, 0x0, 0x2000008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000240)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e561eb1bcb4a046d00825a02a373c4cd08785e4e69234ffbff79f36d5949767ec9ab9342262268333a390a88da195cb8fd851585cd", 0xa1, 0xfffffffffffffffe) 57.694822788s ago: executing program 1 (id=2231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x8, 0x80000) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x9, 0x0, 'syz1\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x48850) 55.514658593s ago: executing program 1 (id=2234): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x200000) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x13, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x10000000]}) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 51.638848985s ago: executing program 1 (id=2243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000300)={0x0}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 35.04351444s ago: executing program 37 (id=2243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000300)={0x0}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 19.803400787s ago: executing program 6 (id=2300): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fanotify_init(0xf00, 0x40000) readv(r3, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8000) fanotify_mark(r3, 0x105, 0x4000997d, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) r5 = syz_io_uring_setup(0x3126, 0x0, 0x0, &(0x7f00000001c0)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, 0x0, 0x8) io_uring_enter(r5, 0x154c, 0xef91, 0x48, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f00004c4000/0x1000)=nil) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) 17.333467485s ago: executing program 6 (id=2305): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@appraise}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = userfaultfd(0x1) close(r0) socket$inet(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x75}]}]}, 0x28}}, 0xc000) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x2000) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000001040)={0x3fffffff, 0x6, "23a3bc5a72a1f1b8e4c1229f3675141f65d13377b74ef34d1102b6d87bfa71fd", 0xeff, 0x8, 0x4f9, 0x2, 0x17}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000600)={0x23eb, 0x4, 0x1, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) 12.772823613s ago: executing program 6 (id=2306): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x200000) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x13, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x10000000]}) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 11.007924825s ago: executing program 8 (id=2310): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x105201, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRES64], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000200)=ANY=[]) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000300000020150000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x8, 0x40080) openat$null(0xffffff9c, &(0x7f00000003c0), 0x200000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) 10.586887439s ago: executing program 4 (id=2311): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x2) 9.733721117s ago: executing program 4 (id=2312): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe9) fallocate(r5, 0x0, 0x4000, 0x1001f0) read(0xffffffffffffffff, &(0x7f0000000380)=""/189, 0x8) socket$inet(0x2, 0x800, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@dev}, &(0x7f00000001c0)=0x14) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000040)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}], [{@pcr={'pcr', 0x3d, 0x3f}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") 9.732654767s ago: executing program 6 (id=2321): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x60401) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, &(0x7f0000000180)) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) 9.442773461s ago: executing program 8 (id=2313): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x4, 0x57c, &(0x7f00000006c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_audit(0x10, 0x3, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000002480)={0x8, {"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", 0x1000}}, 0x1006) 8.347199419s ago: executing program 9 (id=2314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$igmp(0x2, 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r7}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x86c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x840, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x3dd, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x0, 0x4, 0x8, 0xffffffff, 0x2, 0xa, 0x5, 0x80, 0xffff8000, 0xffff, 0x3, 0x5, 0x7, 0x80, 0x5, 0xbecf, 0x80000001, 0x38004, 0x8, 0x0, 0xc, 0x7, 0x8, 0x3, 0x1, 0x9, 0x5, 0x7, 0x57, 0xb00e, 0x3, 0x10, 0x0, 0x9, 0x10001, 0x15fa, 0x7cc, 0xd5, 0x7, 0x6, 0x9, 0x5, 0x200, 0xf1, 0x3, 0xb7b1, 0x5, 0x30, 0x8, 0x7f, 0x3, 0x10001, 0x7, 0x10001, 0x7fffffff, 0x6, 0x4, 0x9, 0x7, 0xe17, 0x18000, 0x0, 0x4, 0xa36a, 0x56, 0xfffffb79, 0x52, 0x4, 0xa, 0x5, 0x0, 0x1045, 0x5, 0x4, 0x4, 0x7, 0x6, 0xa9ac, 0x5, 0x6, 0x8, 0x6, 0x0, 0x9, 0x2, 0x0, 0x2d1, 0x2, 0xd637, 0x1, 0x0, 0x5, 0x382, 0x347f, 0x9e, 0x0, 0xb, 0x2, 0x2, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7, 0x8, 0xaa, 0x101, 0x6, 0x1, 0xff, 0x1, 0xb, 0x91, 0x6, 0x6d6, 0x0, 0x6c, 0xfffffffb, 0x24e018b5, 0x80, 0x81, 0x3, 0xf6, 0x80, 0x80000001, 0x9, 0x9, 0x1, 0xe, 0x6, 0xfd9, 0x4, 0xff, 0x328, 0x10001, 0x1, 0x8b, 0x0, 0x3, 0x7, 0xfff, 0x3a, 0x3, 0x6, 0x16fc, 0xfffffffe, 0x39, 0xc, 0x4, 0x3, 0x2b, 0x5, 0x9, 0x3, 0x3, 0xff, 0xde81, 0x9, 0x40000003, 0x1, 0x10, 0x9, 0x8, 0x10000, 0x40, 0x1, 0x2, 0x800, 0x200, 0x1, 0x4a18, 0x3, 0x9, 0x8000, 0x9, 0x800, 0x2, 0xe5b1, 0x1, 0x8, 0x2, 0x5, 0x5, 0x8, 0x5, 0x5, 0x9, 0x7, 0x7, 0x9, 0x3, 0x3, 0x9, 0x7ff, 0x5, 0x6, 0x10000, 0x0, 0x5, 0x81, 0xc, 0x1, 0xa, 0x9, 0x5, 0x10, 0xf9, 0x3, 0x3, 0xff, 0x3969, 0x0, 0x8, 0x5, 0x10, 0x3, 0x0, 0x5, 0x7f, 0x80000001, 0x200, 0x400, 0x3, 0xffffffff, 0x401, 0x0, 0x9c, 0x7, 0xd6, 0x2, 0xfff, 0x1069, 0x0, 0x6, 0xfffffffe, 0x4, 0x3, 0x4efe, 0x9c16, 0x8, 0x5, 0x9, 0x1, 0x4, 0xff7, 0x7, 0xe63, 0x3, 0x2, 0x7ff, 0x9, 0x8000, 0x6, 0xffff8001]}, @TCA_TBF_RATE64={0xc, 0x4, 0x7b66349e05b59aa}]}}]}, 0x86c}}, 0x0) 8.322967441s ago: executing program 4 (id=2315): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000001880)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) r5 = socket(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2}, 0x10) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40081) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r6, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.542635413s ago: executing program 9 (id=2316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000300)) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={0x0, 0x0, 0x10}, 0x18) signalfd4(r3, &(0x7f0000000500)={[0x6]}, 0x8, 0x0) 7.065616022s ago: executing program 8 (id=2317): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x4010) listen(r1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [r4, r1]}}], 0x18, 0x8801}}], 0x1, 0x4088814) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"d2fdf58a9c46e05fb5d92ca3f5c327d18b38c95ff7a1eb33cac84081fcb793ff", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"66c11c80148bfc985b66f4ba282fbc6091b92b3e2991ce241759c7bac0eefc11", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000200)={"364896f31b0b53f44d62591f20901025f2f1be5d8fa2984efe8053f493340820", r8}) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r9 = dup2(r6, r6) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r9, &(0x7f0000004d80)={0x2020}, 0x2020) r10 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0) write$vhost_msg_v2(r9, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 6.290588604s ago: executing program 6 (id=2318): r0 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYRES64=r3, @ANYRES64=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$netlink(r1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f025, 0xfb}) sendmmsg(r5, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) 6.276175606s ago: executing program 9 (id=2319): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x2e, &(0x7f0000000240)=0x802) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000780)}, 0x20) open(&(0x7f0000000000)='./bus\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.98465381s ago: executing program 6 (id=2320): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b4, &(0x7f0000000600)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0xba01}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') 4.283948396s ago: executing program 9 (id=2322): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x13b481, 0x16) r1 = userfaultfd(0x80801) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x5, 0x1000, 0x7fffffffffffffff, 0x2, 0x5, 0x8000000000000001, 0x2, 0x3}, &(0x7f0000000180)={0xed, 0x5, 0x3, 0xb2ef, 0x4, 0x9, 0x4, 0x7}, 0x0, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x5]}, 0x8}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc03064ca, &(0x7f0000000ac0)={0x0, 0x0, 0x5, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_settime(0x3, 0x0) 4.186826034s ago: executing program 4 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x105201, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRES64], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000200)=ANY=[]) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000300000020150000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x8, 0x40080) openat$null(0xffffff9c, &(0x7f00000003c0), 0x200000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) 3.970870751s ago: executing program 8 (id=2324): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c0002"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x40801) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xde635000) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, 0x0) 2.565726784s ago: executing program 9 (id=2325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@deltfilter={0x4c, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x8}, {0x7, 0xd}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xb, 0xd}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) 2.266601228s ago: executing program 8 (id=2326): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() getrlimit(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.257646969s ago: executing program 4 (id=2335): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0xa, 0x3, "2e85f85a3b9156e89e82960ad936188f4429f4bf777d1b56926c75b050d4c3f0", 0x39555659}) read$snddsp(0xffffffffffffffff, &(0x7f0000001040)=""/141, 0x8d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r3) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='}#$-:\x00', r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x7, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @remote}, 0x14) 1.008124399s ago: executing program 8 (id=2327): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe9) fallocate(r5, 0x0, 0x4000, 0x1001f0) read(0xffffffffffffffff, &(0x7f0000000380)=""/189, 0x8) socket$inet(0x2, 0x800, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@dev}, &(0x7f00000001c0)=0x14) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000040)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}], [{@pcr={'pcr', 0x3d, 0x3f}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") 508.403579ms ago: executing program 9 (id=2328): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000004800000003"], 0xcc}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) connect$pppoe(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x0, {0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xbc}, 'hsr0\x00'}}, 0x1e) r5 = getpid() r6 = syz_open_dev$sndctrl(0x0, 0x1, 0x20001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r5, 0x0, 0x7fff, 'syz1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x102) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 0s ago: executing program 4 (id=2329): listen(0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000280)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_get$pid(0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) syz_clone(0x10008000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095fa24da47250fc444299cb0cfef81004ff8f88789233f787ebe322e921cbe6d9d6d0953d4eb9c92"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x2) readv(r5, &(0x7f00000008c0)=[{0x0}], 0x1) kernel console output (not intermixed with test programs): dv_slave_1 [ 229.453916][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.498194][ T9] device bridge_slave_1 left promiscuous mode [ 229.511250][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.530320][ T9] device bridge_slave_0 left promiscuous mode [ 229.537103][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.657187][ T4272] usb 7-1: device descriptor read/64, error -71 [ 229.810881][ T4272] usb usb7-port1: attempt power cycle [ 229.911540][ T9] device veth1_macvtap left promiscuous mode [ 229.984108][ T9] device veth0_macvtap left promiscuous mode [ 230.095558][ T9] device veth1_vlan left promiscuous mode [ 230.122342][ T9] device veth0_vlan left promiscuous mode [ 230.471321][ T4272] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 231.056937][ T4272] usb 7-1: device descriptor read/8, error -71 [ 231.094254][ T6301] loop4: detected capacity change from 0 to 512 [ 231.128143][ T6301] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 231.146259][ T6301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c11c, mo2=0102] [ 231.173281][ T6301] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.446: corrupted in-inode xattr [ 231.211190][ T6301] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.446: couldn't read orphan inode 15 (err -117) [ 231.242660][ T6301] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,abort,debug,noload,grpid,noblock_validity,noquota,lazytime,usrjquota=,,errors=continue. Quota mode: none. [ 233.481029][ T9] team0 (unregistering): Port device team_slave_1 removed [ 233.578376][ T9] team0 (unregistering): Port device team_slave_0 removed [ 233.606290][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.650469][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.696170][ T6319] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.002213][ T9] bond0 (unregistering): Released all slaves [ 235.040625][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.452'. [ 235.105100][ T6337] overlayfs: overlapping lowerdir path [ 235.142493][ T6334] device hsr_slave_1 left promiscuous mode [ 235.191489][ T6286] ÿÿÿÿÿÿ: renamed from vlan1 [ 239.292416][ T6369] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 239.501250][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 239.516963][ T6372] device bridge_slave_1 left promiscuous mode [ 239.542756][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.562921][ T6372] device bridge_slave_0 left promiscuous mode [ 239.577700][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.628712][ T6372] bond0: (slave bridge0): Releasing backup interface [ 240.066794][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 240.066812][ T26] audit: type=1326 audit(1756526131.593:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.6.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 240.371445][ T26] audit: type=1326 audit(1756526131.593:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.6.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 240.394434][ T26] audit: type=1326 audit(1756526131.593:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.6.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 240.444675][ T26] audit: type=1326 audit(1756526131.593:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.6.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 240.974351][ T26] audit: type=1326 audit(1756526131.593:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.6.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 240.997092][ T26] audit: type=1326 audit(1756526131.603:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.6.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 241.019711][ T26] audit: type=1326 audit(1756526131.603:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.6.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 241.050446][ T26] audit: type=1326 audit(1756526131.603:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.6.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 241.105736][ T26] audit: type=1326 audit(1756526131.603:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.6.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 241.635547][ T26] audit: type=1326 audit(1756526131.603:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.6.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 241.695662][ T6398] netlink: 28 bytes leftover after parsing attributes in process `syz.6.469'. [ 242.126639][ T6408] xt_time: unknown flags 0xc [ 242.155230][ T6408] loop4: detected capacity change from 0 to 2048 [ 243.044229][ T4683] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 243.098259][ T6404] tipc: Started in network mode [ 243.110375][ T6404] tipc: Node identity ac14140f, cluster identity 4711 [ 243.117699][ T3561] GPT:first_usable_lbas don't match. [ 243.128326][ T3561] GPT:34 != 290 [ 243.133783][ T3561] GPT: Use GNU Parted to correct GPT errors. [ 243.145315][ T3561] loop4: p1 p2 p3 [ 243.150247][ T6404] tipc: New replicast peer: 255.255.255.255 [ 243.167105][ T6404] tipc: Enabled bearer , priority 10 [ 243.337601][ T6408] GPT:first_usable_lbas don't match. [ 243.342987][ T6408] GPT:34 != 290 [ 243.346601][ T6408] GPT: Use GNU Parted to correct GPT errors. [ 243.352771][ T6408] loop4: p1 p2 p3 [ 244.286671][ T4485] tipc: Node number set to 2886997007 [ 244.999684][ T6449] lo speed is unknown, defaulting to 1000 [ 245.085170][ T6454] loop3: detected capacity change from 0 to 256 [ 245.813884][ T6449] lo speed is unknown, defaulting to 1000 [ 246.017804][ T6457] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 247.309894][ T5122] udevd[5122]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 247.338350][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 247.352527][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 247.369272][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 247.549939][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 247.570581][ T5122] udevd[5122]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 247.573010][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 248.433883][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.441375][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.911876][ T6472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.951377][ T6472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.074041][ T6472] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.090774][ T6472] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.101087][ T6472] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.115189][ T6472] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.030861][ T6528] tipc: Failed to remove unknown binding: 66,1,1/0:134379650/134379652 [ 252.118333][ T6528] tipc: Failed to remove unknown binding: 66,1,1/0:134379650/134379652 [ 252.142385][ T6528] tipc: Failed to remove unknown binding: 66,1,1/0:134379650/134379652 [ 252.285043][ T6536] 9pnet: Insufficient options for proto=fd [ 252.371018][ T6540] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 253.751394][ T6561] net_ratelimit: 67 callbacks suppressed [ 253.751419][ T6561] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 254.041843][ T6578] device batadv1 entered promiscuous mode [ 254.200196][ T6584] netlink: 'syz.1.510': attribute type 10 has an invalid length. [ 255.401381][ T6583] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.511906][ T6599] loop6: detected capacity change from 0 to 512 [ 255.731351][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.737870][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.646829][ T4272] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 256.700765][ T4272] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.812215][ T6634] netlink: 'syz.4.519': attribute type 10 has an invalid length. [ 258.812285][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.519'. [ 260.532167][ T6651] loop1: detected capacity change from 0 to 4096 [ 261.288589][ T6656] loop6: detected capacity change from 0 to 2048 [ 261.309496][ T6651] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 261.445908][ T6656] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.475559][ T6651] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 261.610613][ T4183] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 261.626956][ T4183] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 261.778382][ T6670] fuse: Bad value for 'fd' [ 261.895708][ T6665] lo speed is unknown, defaulting to 1000 [ 261.955620][ T6665] lo speed is unknown, defaulting to 1000 [ 263.835526][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 265.015945][ T6665] chnl_net:caif_netlink_parms(): no params data found [ 265.274733][ T6710] loop1: detected capacity change from 0 to 512 [ 265.465155][ T6710] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 265.965333][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 266.186165][ T6710] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 266.239620][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.283679][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.311923][ T6710] EXT4-fs (loop1): 1 truncate cleaned up [ 266.333408][ T6665] device bridge_slave_0 entered promiscuous mode [ 266.350491][ T6710] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc,debug_want_extra_isize=0x0000000000000068,errors=continue,lazytime,quota,,errors=continue. Quota mode: writeback. [ 266.416333][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.427698][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.457279][ T6665] device bridge_slave_1 entered promiscuous mode [ 267.245429][ T4490] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 267.422906][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.495433][ T4490] usb 4-1: Using ep0 maxpacket: 16 [ 267.531262][ T6740] siw: device registration error -23 [ 267.615660][ T4490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 269.956095][ T6765] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 269.989446][ T6765] Error parsing options; rc = [-22] [ 270.002924][ T6766] loop3: detected capacity change from 0 to 2048 [ 270.022844][ T4485] Bluetooth: hci5: command 0x040f tx timeout [ 270.045549][ T4490] usb 4-1: string descriptor 0 read error: -71 [ 270.051901][ T4490] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.067857][ T4490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.102515][ T4490] usb 4-1: config 0 descriptor?? [ 270.125678][ T4490] usb 4-1: can't set config #0, error -71 [ 270.135549][ T4490] usb 4-1: USB disconnect, device number 3 [ 270.178814][ T6766] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 270.226764][ T6766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.238918][ T6766] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 270.318871][ T6766] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 270.909764][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.945924][ T6766] lo speed is unknown, defaulting to 1000 [ 270.952367][ T6766] lo speed is unknown, defaulting to 1000 [ 271.000597][ T4398] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.260359][ T6665] team0: Port device team_slave_0 added [ 272.248200][ T4249] Bluetooth: hci5: command 0x0419 tx timeout [ 272.499285][ T4398] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.676884][ T6805] netlink: 'syz.1.558': attribute type 3 has an invalid length. [ 273.713483][ T4398] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.780760][ T6665] team0: Port device team_slave_1 added [ 273.814478][ T6794] bond0: (slave vxlan1): Opening slave failed [ 274.587346][ T4398] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.825764][ T297] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 275.366217][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.549005][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.671013][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.698812][ T6833] usb usb1: usbfs: process 6833 (syz.1.566) did not claim interface 6 before use [ 275.727409][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.743126][ T6833] loop1: detected capacity change from 0 to 256 [ 275.743857][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.835142][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.180689][ T6665] device hsr_slave_0 entered promiscuous mode [ 276.931811][ T6665] device hsr_slave_1 entered promiscuous mode [ 276.944264][ T6665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.952211][ T6665] Cannot create hsr debugfs directory [ 276.967467][ T6850] netlink: 'syz.1.569': attribute type 12 has an invalid length. [ 277.049683][ T6856] lo speed is unknown, defaulting to 1000 [ 277.125002][ T4398] tipc: Disabling bearer [ 277.144303][ T6856] lo speed is unknown, defaulting to 1000 [ 277.156997][ T4398] tipc: Left network mode [ 277.395926][ T6870] netlink: 'syz.1.573': attribute type 3 has an invalid length. [ 278.503726][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 279.410878][ T6665] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 279.420075][ T6665] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 279.429591][ T6665] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 279.438940][ T6665] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 279.765571][ T6894] loop1: detected capacity change from 0 to 1024 [ 279.922126][ T6894] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 279.966627][ T6894] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 280.015917][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 280.015934][ T26] audit: type=1326 audit(1756526172.577:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 280.039010][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.058869][ T6894] JBD2: no valid journal superblock found [ 280.064628][ T6894] EXT4-fs (loop1): error loading journal [ 280.084308][ T6914] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 280.111417][ T6914] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 280.132560][ T26] audit: type=1326 audit(1756526172.587:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 280.159461][ T6917] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 280.217204][ T6914] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 280.229247][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.236638][ T26] audit: type=1326 audit(1756526172.627:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 280.261016][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.274352][ T26] audit: type=1326 audit(1756526172.627:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 280.278032][ T6665] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.305821][ T26] audit: type=1326 audit(1756526172.627:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 280.343521][ T26] audit: type=1326 audit(1756526172.627:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 280.374845][ T26] audit: type=1326 audit(1756526172.627:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 280.411967][ T6914] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 280.427780][ T26] audit: type=1326 audit(1756526172.627:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 280.462353][ T6914] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 280.492287][ T6914] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 280.516824][ T26] audit: type=1326 audit(1756526172.637:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 280.539443][ T26] audit: type=1326 audit(1756526172.637:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 280.585619][ T6914] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 280.609171][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.663422][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.951878][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.959057][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.317169][ T6928] netlink: 32 bytes leftover after parsing attributes in process `syz.6.583'. [ 281.593312][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.608482][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.490182][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.500445][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.507596][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.712063][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.721308][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.794709][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.316371][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.326742][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.336799][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.346655][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.362215][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.383245][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.470688][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.488235][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.508388][ T6665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.562361][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.616961][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.641103][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.667546][ T6955] device bridge_slave_0 left promiscuous mode [ 283.686163][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.725019][ T6955] device bridge_slave_1 left promiscuous mode [ 283.742678][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.784633][ T6955] bond0: (slave bond_slave_0): Releasing backup interface [ 283.831837][ T6955] bond0: (slave bond_slave_1): Releasing backup interface [ 283.953269][ T6955] team0: Port device team_slave_0 removed [ 284.725932][ T6955] team0: Port device team_slave_1 removed [ 284.847554][ T6957] team0: Mode changed to "loadbalance" [ 284.981160][ T6988] bridge0: port 3(vlan2) entered blocking state [ 285.026369][ T6988] bridge0: port 3(vlan2) entered disabled state [ 285.034463][ T6988] device vlan2 entered promiscuous mode [ 285.040870][ T6988] device bond0 entered promiscuous mode [ 285.047879][ T6988] device bond_slave_0 entered promiscuous mode [ 285.055652][ T6988] device bond_slave_1 entered promiscuous mode [ 285.085745][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 285.085761][ T26] audit: type=1804 audit(1756526177.637:179): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.601" name="file1" dev="ramfs" ino=42867 res=1 errno=0 [ 285.241762][ T6981] device team0 entered promiscuous mode [ 285.379922][ T6981] device team_slave_0 entered promiscuous mode [ 285.392100][ T6981] device team_slave_1 entered promiscuous mode [ 285.404698][ T6981] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 285.718802][ T6981] device macvlan2 entered promiscuous mode [ 285.763637][ T6981] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 285.841920][ T4398] device hsr_slave_0 left promiscuous mode [ 285.848809][ T4398] device hsr_slave_1 left promiscuous mode [ 285.868679][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.898139][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.912608][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.949104][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.023337][ T4398] device bridge_slave_1 left promiscuous mode [ 286.029721][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.025109][ T4398] device bridge_slave_0 left promiscuous mode [ 287.044690][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.052779][ T7004] SET target dimension over the limit! [ 287.266530][ T4398] device veth1_macvtap left promiscuous mode [ 287.273425][ T4398] device veth0_macvtap left promiscuous mode [ 287.286374][ T4398] device veth1_vlan left promiscuous mode [ 287.292230][ T4398] device veth0_vlan left promiscuous mode [ 287.335084][ T7008] netlink: 'syz.4.604': attribute type 10 has an invalid length. [ 287.342993][ T7008] netlink: 40 bytes leftover after parsing attributes in process `syz.4.604'. [ 287.474246][ T4398] team0 (unregistering): Port device team_slave_1 removed [ 287.496589][ T4398] team0 (unregistering): Port device team_slave_0 removed [ 287.509795][ T4398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.523944][ T4398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.589382][ T4398] bond0 (unregistering): Released all slaves [ 287.667797][ T7006] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 287.677154][ T7006] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 287.686710][ T7006] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 287.735538][ T26] audit: type=1800 audit(1756526180.237:180): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.602" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 287.790455][ T7006] syz.3.602 (7006) used greatest stack depth: 19648 bytes left [ 287.800179][ T7008] netlink: 'syz.4.604': attribute type 10 has an invalid length. [ 287.834063][ T7008] netlink: 40 bytes leftover after parsing attributes in process `syz.4.604'. [ 287.906718][ T7012] netlink: 'syz.6.607': attribute type 4 has an invalid length. [ 289.093492][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.119525][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.163834][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.201168][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.615'. [ 290.486237][ T7060] overlayfs: failed to get inode (-116) [ 290.517605][ T7060] overlayfs: failed to get inode (-116) [ 290.531020][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.621'. [ 290.553552][ T7067] syz.4.620[7067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.553697][ T7067] syz.4.620[7067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.711523][ T26] audit: type=1326 audit(1756526183.277:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 290.803325][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.819782][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.887929][ T26] audit: type=1326 audit(1756526183.347:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 290.911915][ T26] audit: type=1326 audit(1756526183.347:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 291.563267][ T26] audit: type=1326 audit(1756526183.347:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 291.585730][ T26] audit: type=1326 audit(1756526183.347:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 291.608021][ T26] audit: type=1326 audit(1756526183.347:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 291.634343][ T26] audit: type=1326 audit(1756526183.347:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 291.658942][ T26] audit: type=1326 audit(1756526183.347:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 291.882256][ T26] audit: type=1326 audit(1756526183.347:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f520695ba7c code=0x7ffc0000 [ 291.909750][ T26] audit: type=1326 audit(1756526183.367:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f520695b9b4 code=0x7ffc0000 [ 291.968368][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.991059][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.084999][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.149309][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.230955][ T6665] device veth0_vlan entered promiscuous mode [ 294.344235][ T6665] device veth1_vlan entered promiscuous mode [ 295.961419][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.970493][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.010276][ T6665] device veth0_macvtap entered promiscuous mode [ 296.060325][ T6665] device veth1_macvtap entered promiscuous mode [ 296.247245][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.281506][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.342479][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.475518][ T7132] lo speed is unknown, defaulting to 1000 [ 296.501399][ T7132] lo speed is unknown, defaulting to 1000 [ 296.501715][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.686295][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.731529][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.765287][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.797447][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.823629][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.856483][ T6665] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.939950][ T6665] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.988159][ T6665] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.025404][ T6665] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.647191][ T7158] MTD: Couldn't look up './file0': -15 [ 298.867384][ T7158] loop6: detected capacity change from 0 to 256 [ 299.482239][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.913322][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.025603][ T7163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.643'. [ 300.251301][ T4446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.317689][ T4446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.070683][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.097837][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 301.137478][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.194208][ T7180] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 301.206178][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 301.289499][ T7187] netlink: 'syz.3.648': attribute type 16 has an invalid length. [ 301.348521][ T7187] netlink: 'syz.3.648': attribute type 3 has an invalid length. [ 301.426212][ T7187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.648'. [ 301.455640][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 301.709716][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 301.812590][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.8.650'. [ 301.825508][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.842459][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.874323][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 301.884764][ T7205] netlink: 'syz.8.650': attribute type 1 has an invalid length. [ 301.910280][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 301.918981][ T7205] netlink: 'syz.8.650': attribute type 2 has an invalid length. [ 301.949112][ T13] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 301.995423][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.076535][ T13] hub 2-1:1.0: bad descriptor, ignoring hub [ 302.082503][ T13] hub: probe of 2-1:1.0 failed with error -5 [ 302.134632][ T13] cdc_wdm 2-1:1.0: skipping garbage [ 302.175765][ T13] cdc_wdm 2-1:1.0: skipping garbage [ 302.270696][ T13] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 302.361733][ T13] cdc_wdm 2-1:1.0: Unknown control protocol [ 302.434289][ T7220] netlink: 200 bytes leftover after parsing attributes in process `syz.8.652'. [ 302.600772][ T13] usb 2-1: USB disconnect, device number 3 [ 304.129570][ T4485] Bluetooth: hci2: command 0x0406 tx timeout [ 304.272399][ T7240] bridge0: port 3(batadv1) entered blocking state [ 304.279059][ T7240] bridge0: port 3(batadv1) entered disabled state [ 304.306524][ T7240] device batadv1 entered promiscuous mode [ 305.474995][ T297] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 305.484958][ T297] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 305.709552][ T6519] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 305.756136][ T6519] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 305.880029][ T297] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 306.004342][ T7268] loop6: detected capacity change from 0 to 256 [ 307.258857][ T7273] loop3: detected capacity change from 0 to 2048 [ 307.491179][ T7277] kvm: emulating exchange as write [ 308.377890][ T7297] loop8: detected capacity change from 0 to 512 [ 308.390740][ T7273] loop3: p1 < > p3 [ 308.396030][ T7273] loop3: p3 size 134217728 extends beyond EOD, truncated [ 308.423708][ T7297] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 308.431214][ T7297] EXT4-fs (loop8): inline encryption not supported [ 308.465057][ T7297] EXT4-fs (loop8): Test dummy encryption mode enabled [ 308.476898][ T7297] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 308.484825][ T7297] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 308.518740][ T7297] EXT4-fs (loop8): 1 truncate cleaned up [ 308.524533][ T7297] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 308.606515][ T3561] loop3: p1 < > p3 [ 308.616555][ T3561] loop3: p3 size 134217728 extends beyond EOD, truncated [ 308.994986][ T5122] udevd[5122]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 308.995088][ T5121] udevd[5121]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 309.212100][ T7297] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 310.284667][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 310.284686][ T26] audit: type=1326 audit(1756526202.847:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.8.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 310.413478][ T26] audit: type=1326 audit(1756526202.897:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.8.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 310.486649][ T26] audit: type=1326 audit(1756526202.897:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.8.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 310.622408][ T26] audit: type=1326 audit(1756526202.897:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.8.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 310.846644][ T7342] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 310.856120][ T7342] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 310.972620][ T7356] netlink: 27 bytes leftover after parsing attributes in process `syz.8.675'. [ 311.368899][ T7355] nftables ruleset with unbound chain [ 311.590242][ T26] audit: type=1326 audit(1756526202.917:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.8.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b4dd83550 code=0x7ffc0000 [ 311.619524][ T26] audit: type=1326 audit(1756526202.917:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.8.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 311.657004][ T26] audit: type=1326 audit(1756526202.917:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.8.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 311.679807][ T26] audit: type=1326 audit(1756526202.917:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.8.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 311.703387][ T26] audit: type=1326 audit(1756526202.917:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.8.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 311.757389][ T26] audit: type=1326 audit(1756526202.917:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.8.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 312.193943][ T7360] fuse: Bad value for 'group_id' [ 316.978252][ T7410] netlink: 'syz.4.691': attribute type 1 has an invalid length. [ 317.041342][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.051286][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.783173][ T7410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.864390][ T7417] bond1: (slave geneve2): making interface the new active one [ 317.961005][ T7417] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 317.992867][ T7417] syz.4.691 (7417) used greatest stack depth: 18432 bytes left [ 318.416349][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 321.100391][ T7474] vivid-003: disconnect [ 321.416789][ T7456] vivid-003: reconnect [ 321.464423][ T7473] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 321.773516][ T7485] loop1: detected capacity change from 0 to 1024 [ 321.870606][ T7478] lo speed is unknown, defaulting to 1000 [ 322.605201][ T7478] lo speed is unknown, defaulting to 1000 [ 323.346331][ T7504] IPVS: Error connecting to the multicast addr [ 323.824476][ T7515] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.945454][ T4235] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 325.019530][ T7541] loop1: detected capacity change from 0 to 512 [ 325.081077][ T7541] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 325.120787][ T7541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c11c, mo2=0102] [ 325.161235][ T7541] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.722: corrupted in-inode xattr [ 325.252276][ T7541] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.722: couldn't read orphan inode 15 (err -117) [ 325.275970][ T4235] usb 9-1: not running at top speed; connect to a high speed hub [ 325.302066][ T7541] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,abort,debug,noload,grpid,noblock_validity,noquota,lazytime,usrjquota=,,errors=continue. Quota mode: none. [ 325.376420][ T4235] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.410876][ T4235] usb 9-1: config 1 has no interface number 1 [ 325.795866][ T4235] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.227052][ T4235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.633744][ T4235] usb 9-1: Product: syz [ 326.639195][ T4235] usb 9-1: Manufacturer: syz [ 326.643824][ T4235] usb 9-1: SerialNumber: syz [ 327.385738][ T4235] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 327.391691][ T7564] netlink: 'syz.8.737': attribute type 4 has an invalid length. [ 327.580155][ T4235] usb 9-1: USB disconnect, device number 2 [ 327.772282][ T7568] lo speed is unknown, defaulting to 1000 [ 327.898228][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.922173][ T7568] lo speed is unknown, defaulting to 1000 [ 329.405102][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 329.405118][ T26] audit: type=1326 audit(1756526221.967:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 330.070879][ T7622] capability: warning: `syz.3.734' uses deprecated v2 capabilities in a way that may be insecure [ 330.084177][ T7608] tipc: Started in network mode [ 330.099682][ T7608] tipc: Node identity ac14140f, cluster identity 4711 [ 330.109814][ T26] audit: type=1326 audit(1756526221.967:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 330.153552][ T7608] tipc: New replicast peer: 255.255.255.255 [ 330.174237][ T7608] tipc: Enabled bearer , priority 10 [ 330.183307][ T26] audit: type=1326 audit(1756526222.537:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 331.522357][ T4249] tipc: Node number set to 2886997007 [ 332.574143][ T26] audit: type=1326 audit(1756526222.537:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 332.812288][ T7654] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 332.861919][ T7655] overlayfs: failed to clone lowerpath [ 332.885392][ T26] audit: type=1326 audit(1756526222.537:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 336.834902][ T26] audit: type=1326 audit(1756526222.537:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 336.878771][ T26] audit: type=1326 audit(1756526222.537:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 337.240530][ T26] audit: type=1326 audit(1756526222.537:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 337.897781][ T26] audit: type=1326 audit(1756526222.537:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 338.141251][ T7689] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 338.353499][ T26] audit: type=1326 audit(1756526222.537:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 338.516752][ T4675] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 338.875412][ T26] audit: type=1326 audit(1756526222.537:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 338.911626][ T26] audit: type=1326 audit(1756526222.547:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 338.940833][ T26] audit: type=1326 audit(1756526222.547:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 339.028918][ T7710] device batadv0 entered promiscuous mode [ 339.099366][ T26] audit: type=1326 audit(1756526222.547:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 339.156719][ T26] audit: type=1326 audit(1756526222.547:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 339.367104][ T7718] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 346.623352][ T7782] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.516884][ T7789] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.542041][ T7789] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.570325][ T7789] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.597758][ T7789] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.618143][ T7789] device geneve2 entered promiscuous mode [ 348.168137][ T7799] xt_TPROXY: Can be used only with -p tcp or -p udp [ 351.265155][ T7843] loop8: detected capacity change from 0 to 65 [ 351.406621][ T7843] BFS-fs: bfs_fill_super(): NOTE: filesystem loop8 was created with 512 inodes, the real maximum is 511, mounting anyway [ 352.387715][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 353.955568][ T7862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.974870][ T7877] loop6: detected capacity change from 0 to 128 [ 354.046731][ T7878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.073890][ T7862] bond0: (slave rose0): Enslaving as an active interface with an up link [ 354.141053][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 354.176011][ T7877] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.399820][ T7877] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 356.336540][ T7907] tipc: Started in network mode [ 356.341538][ T7907] tipc: Node identity aae1e446fb16, cluster identity 4711 [ 356.350223][ T7907] tipc: Enabled bearer , priority 0 [ 356.387596][ T7907] device syzkaller0 entered promiscuous mode [ 356.479105][ T7907] tipc: Resetting bearer [ 356.573665][ T7906] tipc: Resetting bearer [ 357.027200][ T7906] tipc: Disabling bearer [ 357.445552][ T4249] tipc: Node number set to 1375200326 [ 359.414231][ T7934] loop6: detected capacity change from 0 to 128 [ 364.444815][ T7957] loop1: detected capacity change from 0 to 2048 [ 364.517382][ T7967] loop6: detected capacity change from 0 to 1024 [ 364.682436][ T7957] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 366.843179][ T7971] netlink: 'syz.4.824': attribute type 10 has an invalid length. [ 366.894600][ T7972] siw: device registration error -23 [ 366.988202][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.033361][ T7971] bond0: (slave team0): Enslaving as an active interface with an up link [ 368.639968][ T7994] loop8: detected capacity change from 0 to 512 [ 369.329522][ T7994] EXT4-fs (loop8): Project quota feature not enabled. Cannot enable project quota enforcement. [ 370.631643][ T7994] loop8: detected capacity change from 0 to 256 [ 370.879803][ T8021] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 372.027351][ T8035] loop1: detected capacity change from 0 to 512 [ 372.034733][ T8021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.044446][ T8035] EXT4-fs (loop1): Ignoring removed orlov option [ 372.094658][ T8035] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 372.109199][ T8035] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.226651][ T8026] device vlan2 entered promiscuous mode [ 372.232304][ T8026] device bond2 entered promiscuous mode [ 373.817959][ T4671] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 374.017473][ T8053] netlink: 'syz.3.845': attribute type 10 has an invalid length. [ 374.101978][ T8058] siw: device registration error -23 [ 374.106162][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.116533][ T8053] bond0: (slave team0): Enslaving as an active interface with an up link [ 375.016018][ T6519] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 375.415613][ T6519] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.452094][ T6519] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 375.471953][ T6519] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.602054][ T6519] usb 9-1: config 0 descriptor?? [ 375.647759][ T6519] pwc: Askey VC010 type 2 USB webcam detected. [ 376.981910][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 377.015833][ T6519] pwc: send_video_command error -71 [ 377.023853][ T6519] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 377.158702][ T6519] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 377.329294][ T6519] usb 9-1: USB disconnect, device number 3 [ 377.647257][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 378.065618][ T6519] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 378.582949][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.589686][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.926813][ T8106] device team0 left promiscuous mode [ 379.932323][ T8106] device team_slave_0 left promiscuous mode [ 379.939237][ T8106] device team_slave_1 left promiscuous mode [ 379.958664][ T8106] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.976565][ T8106] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.030797][ T8106] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.044259][ T8106] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.077863][ T8106] device geneve2 left promiscuous mode [ 380.753665][ T4485] lo speed is unknown, defaulting to 1000 [ 380.788295][ T8128] lo speed is unknown, defaulting to 1000 [ 380.794623][ T8128] lo speed is unknown, defaulting to 1000 [ 380.801058][ T8136] netlink: 'syz.3.861': attribute type 4 has an invalid length. [ 380.837831][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 380.837847][ T26] audit: type=1800 audit(1756526273.407:253): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.858" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 380.838003][ T8140] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 380.874032][ T8140] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 380.883682][ T8140] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 383.027725][ T8157] tipc: Enabling of bearer rejected, failed to enable media [ 384.429802][ T8181] device vlan1 entered promiscuous mode [ 385.802848][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 385.855022][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 385.868924][ T8211] netlink: 'syz.8.875': attribute type 10 has an invalid length. [ 385.883790][ T8211] netlink: 40 bytes leftover after parsing attributes in process `syz.8.875'. [ 385.976946][ T8217] befs: (nbd1): No write support. Marking filesystem read-only [ 385.989288][ T150] block nbd1: Attempted send on invalid socket [ 385.996452][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.016669][ T8217] befs: (nbd1): unable to read superblock [ 387.331093][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.338725][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.820854][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.871551][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.291759][ T8207] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.301491][ T8207] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.310874][ T8207] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.320565][ T8207] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.450522][ T8207] device team0 left promiscuous mode [ 388.456284][ T8207] device team_slave_0 left promiscuous mode [ 388.462371][ T8207] device team_slave_1 left promiscuous mode [ 388.483235][ T8211] netlink: 'syz.8.875': attribute type 10 has an invalid length. [ 388.495176][ T8211] netlink: 40 bytes leftover after parsing attributes in process `syz.8.875'. [ 390.641972][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.887'. [ 390.738988][ T8264] loop6: detected capacity change from 0 to 2048 [ 390.754906][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 390.837357][ T8264] UDF-fs: bad mount option "ÿÿ" or missing value [ 393.597687][ T8297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.895'. [ 393.820391][ T26] audit: type=1326 audit(1756526286.387:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 393.870984][ T26] audit: type=1326 audit(1756526286.417:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f17dc414be9 code=0x7ffc0000 [ 398.135945][ T8278] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.144871][ T8278] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.153866][ T8278] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.163182][ T8278] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.311814][ T8278] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.321069][ T8278] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.330042][ T8278] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.339007][ T8278] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.369617][ T8278] device vlan2 left promiscuous mode [ 399.374971][ T8278] device bond2 left promiscuous mode [ 399.441679][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.8.898'. [ 399.672654][ T8322] tipc: Enabled bearer , priority 0 [ 401.312754][ T8322] tipc: Disabling bearer [ 402.272950][ T8368] syz.6.911 (8368) used greatest stack depth: 18176 bytes left [ 402.667589][ T8378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.913'. [ 403.435722][ T8387] tipc: Enabled bearer , priority 0 [ 403.592365][ T8387] device syzkaller0 entered promiscuous mode [ 404.599375][ T8387] tipc: Resetting bearer [ 404.681594][ T8386] tipc: Resetting bearer [ 404.945824][ T8386] tipc: Disabling bearer [ 410.375546][ T4490] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 410.390565][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.932'. [ 410.756242][ T4490] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.839338][ T4490] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 411.006690][ T4490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.090800][ T8457] tipc: Enabling of bearer rejected, failed to enable media [ 411.325412][ T4490] usb 2-1: config 0 descriptor?? [ 413.052292][ T4490] pwc: Askey VC010 type 2 USB webcam detected. [ 413.075649][ T4490] pwc: send_video_command error -71 [ 413.117833][ T4490] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 413.210402][ T4490] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 413.299271][ T4490] usb 2-1: USB disconnect, device number 4 [ 415.628236][ T8497] tipc: Enabled bearer , priority 10 [ 415.650891][ T8498] netlink: 'syz.4.941': attribute type 10 has an invalid length. [ 416.264461][ T8498] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 419.494077][ T8506] delete_channel: no stack [ 421.881911][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.952'. [ 423.876221][ T8534] netlink: 'syz.4.950': attribute type 10 has an invalid length. [ 428.254981][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 431.020821][ T8595] tipc: Enabled bearer , priority 0 [ 431.293754][ T8598] device syzkaller0 entered promiscuous mode [ 432.065986][ T8595] tipc: Resetting bearer [ 432.144680][ T8593] tipc: Resetting bearer [ 435.928630][ T26] audit: type=1326 audit(1756526327.497:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.4.968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x0 [ 436.084089][ T8593] tipc: Disabling bearer [ 436.759937][ T8632] 9pnet: p9_fd_create_unix (8632): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 439.269511][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 439.430603][ T8663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.355190][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.379471][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.533333][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'. [ 441.016549][ T8681] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 442.832672][ T8688] tipc: Enabling of bearer rejected, failed to enable media [ 445.851701][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 445.863640][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 446.982000][ T8724] tipc: Enabling of bearer rejected, failed to enable media [ 447.858750][ T8732] device batadv_slave_0 entered promiscuous mode [ 447.922132][ T8721] netlink: 'syz.8.994': attribute type 10 has an invalid length. [ 447.981880][ T8721] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 448.021523][ T8740] tipc: Enabling of bearer rejected, failed to enable media [ 448.296639][ T8755] overlayfs: failed to resolve './file0': -2 [ 449.424412][ T8743] tipc: Enabled bearer , priority 0 [ 449.462125][ T8751] device syzkaller0 entered promiscuous mode [ 449.690376][ T8743] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 451.275622][ T8742] tipc: Resetting bearer [ 451.417824][ T8783] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 451.456220][ T8783] xt_TPROXY: Can be used only with -p tcp or -p udp [ 451.820326][ T8742] tipc: Disabling bearer [ 452.365088][ T8789] tipc: Enabling of bearer rejected, failed to enable media [ 452.991856][ T8806] o2cb: This node has not been configured. [ 452.998494][ T8806] o2cb: Cluster check failed. Fix errors before retrying. [ 453.005866][ T8806] (syz.6.1010,8806,1):user_dlm_register:675 ERROR: status = -22 [ 453.013679][ T8806] (syz.6.1010,8806,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 453.551320][ T8809] loop1: detected capacity change from 0 to 1024 [ 454.196142][ T8812] tipc: Enabling of bearer rejected, failed to enable media [ 455.324676][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1016'. [ 455.800785][ T8838] Cannot find set identified by id 0 to match [ 456.184317][ T8847] fuse: Bad value for 'fd' [ 457.390947][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.560351][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.607571][ T8857] tipc: Enabling of bearer rejected, failed to enable media [ 459.627550][ T8883] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1029'. [ 459.663648][ T8883] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.672558][ T8883] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.681319][ T8883] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.690058][ T8883] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.641067][ T8891] loop8: detected capacity change from 0 to 128 [ 462.299343][ T8925] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1040'. [ 462.349396][ T8922] xt_recent: Unsupported userspace flags (000000de) [ 462.368630][ T8889] kvm [8888]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 465.325703][ T8949] smb3: Bad value for 'uid' [ 465.494626][ T8949] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1047'. [ 467.519669][ T8993] tipc: Enabled bearer , priority 0 [ 469.139243][ T8993] device syzkaller0 entered promiscuous mode [ 469.510762][ T9024] loop8: detected capacity change from 0 to 16 [ 469.556756][ T9024] erofs: (device loop8): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 471.126621][ T9049] tipc: Enabling of bearer rejected, already enabled [ 471.261748][ T9049] tipc: Resetting bearer [ 471.359760][ T9060] binder: 9048:9060 unknown command 1074291477 [ 471.366084][ T9060] binder: 9048:9060 ioctl c0306201 2000000003c0 returned -22 [ 472.083273][ T9069] tipc: Enabled bearer , priority 0 [ 472.092631][ T9069] device syzkaller0 entered promiscuous mode [ 472.122858][ T9069] tipc: Resetting bearer [ 472.157860][ T9068] tipc: Resetting bearer [ 472.310459][ T9068] tipc: Disabling bearer [ 473.667748][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1077'. [ 473.681882][ T9071] loop8: detected capacity change from 0 to 4096 [ 474.584531][ T9083] bridge2: port 1(vlan4) entered blocking state [ 474.608651][ T9083] bridge2: port 1(vlan4) entered disabled state [ 474.625109][ T9083] device vlan4 entered promiscuous mode [ 474.645506][ T9083] device bridge0 entered promiscuous mode [ 474.674484][ T9104] tipc: Enabling of bearer rejected, already enabled [ 474.736685][ T9088] device gretap1 entered promiscuous mode [ 474.798748][ T9088] bridge2: port 2(gretap1) entered blocking state [ 474.907277][ T9088] bridge2: port 2(gretap1) entered disabled state [ 475.042623][ T9105] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1078'. [ 475.258464][ T9123] tipc: Enabling of bearer rejected, failed to enable media [ 476.141862][ T9140] netlink: 'syz.8.1084': attribute type 12 has an invalid length. [ 478.216629][ T9161] tipc: Enabling of bearer rejected, already enabled [ 478.396464][ T9171] tipc: Enabling of bearer rejected, failed to enable media [ 482.663247][ T9229] tipc: Enabling of bearer rejected, already enabled [ 482.784015][ T9233] tipc: Enabling of bearer rejected, already enabled [ 486.041334][ T9269] overlayfs: failed to clone upperpath [ 486.861138][ T9280] tipc: Enabled bearer , priority 0 [ 486.925778][ T9285] device syzkaller0 entered promiscuous mode [ 488.130900][ T9279] tipc: Resetting bearer [ 488.316615][ T9279] tipc: Disabling bearer [ 488.567214][ T9301] loop8: detected capacity change from 0 to 1024 [ 488.627152][ T9306] overlayfs: missing 'lowerdir' [ 490.288700][ T9327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 491.661405][ T9343] openvswitch: netlink: Actions may not be safe on all matching packets [ 492.275129][ T9352] tipc: Enabling of bearer rejected, already enabled [ 495.227346][ T9375] tipc: Started in network mode [ 495.235754][ T9375] tipc: Node identity ac14141b, cluster identity 4711 [ 495.242667][ T9375] tipc: New replicast peer: 255.255.255.255 [ 495.333993][ T9375] tipc: Enabled bearer , priority 10 [ 496.450927][ T1111] tipc: Node number set to 2886997019 [ 496.616791][ T9397] tipc: Enabling of bearer rejected, failed to enable media [ 497.736075][ T9407] binder_alloc: 9403: binder_alloc_buf, no vma [ 497.781446][ T9392] netlink: 'syz.6.1148': attribute type 29 has an invalid length. [ 497.795832][ T9392] netlink: 'syz.6.1148': attribute type 29 has an invalid length. [ 497.822991][ T9392] netlink: 'syz.6.1148': attribute type 29 has an invalid length. [ 497.843341][ T9413] delete_channel: no stack [ 500.168940][ T9431] gfs2: gfs2 mount does not exist [ 500.497498][ T9442] xt_socket: unknown flags 0x8 [ 501.906568][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.912957][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.932932][ T9455] netlink: 'syz.8.1166': attribute type 10 has an invalid length. [ 502.090240][ T9455] team0: Failed to send options change via netlink (err -105) [ 502.261710][ T9455] team0: Port device dummy0 added [ 504.340849][ T9465] tipc: Enabled bearer , priority 0 [ 505.150359][ T9465] tipc: Disabling bearer [ 506.981886][ T9507] loop1: detected capacity change from 0 to 256 [ 510.668095][ T9538] tipc: Enabling of bearer rejected, failed to enable media [ 510.912464][ T9548] tipc: Enabling of bearer rejected, failed to enable media [ 511.317300][ T9559] loop1: detected capacity change from 0 to 32768 [ 511.425931][ T9559] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1190 (9559) [ 511.517262][ T9559] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 511.526866][ T9559] BTRFS info (device loop1): enabling disk space caching [ 511.533940][ T9559] BTRFS info (device loop1): setting nodatasum [ 511.540623][ T9559] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 511.550666][ T9559] BTRFS info (device loop1): force lzo compression, level 0 [ 511.558114][ T9559] BTRFS info (device loop1): unrecognized rescue option 'ignoremetacsums' [ 511.566987][ T9559] BTRFS error (device loop1): unrecognized rescue value ignoremetacsums [ 511.575504][ T9559] BTRFS error (device loop1): cannot disable free space tree [ 512.257653][ T9559] BTRFS error (device loop1): open_ctree failed: -22 [ 512.276129][ T8676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (8676) [ 514.971231][ T9597] tipc: Enabling of bearer rejected, already enabled [ 516.136921][ T9611] tipc: Enabling of bearer rejected, failed to enable media [ 517.334652][ T9629] loop8: detected capacity change from 0 to 1024 [ 517.656439][ T9629] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 517.862336][ T9629] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.801406][ T9654] EXT4-fs error (device loop8): ext4_map_blocks:739: inode #15: block 3: comm syz.8.1207: lblock 3 mapped to illegal pblock 3 (length 3) [ 520.202274][ T9654] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 520.214979][ T9654] EXT4-fs (loop8): This should not happen!! Data will be lost [ 520.214979][ T9654] [ 521.887487][ T4299] EXT4-fs error (device loop8): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 523.034758][ T4299] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 523.084251][ T9683] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 523.090241][ T4299] EXT4-fs (loop8): This should not happen!! Data will be lost [ 523.090241][ T4299] [ 527.633856][ T9749] hugetlbfs: syz.6.1231 (9749): Using mlock ulimits for SHM_HUGETLB is deprecated [ 528.635006][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 529.899316][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1242'. [ 529.917777][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1242'. [ 532.332696][ T9812] loop8: detected capacity change from 0 to 4096 [ 532.346170][ T9811] loop1: detected capacity change from 0 to 1024 [ 532.629655][ T9812] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 533.125043][ T9812] ntfs: (device loop8): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 533.136135][ T9812] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 533.158281][ T9812] ntfs: (device loop8): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 533.182663][ T9812] ntfs: volume version 3.1. [ 533.259829][ C1] hrtimer: interrupt took 57929 ns [ 533.496291][ T6665] ntfs: (device loop8): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 533.679250][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1253'. [ 533.747457][ T9811] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 533.801388][ T9811] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.864145][ T9842] tipc: Enabling of bearer rejected, already enabled [ 536.769192][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 537.040232][ T9879] loop8: detected capacity change from 0 to 1024 [ 537.895131][ T9879] hfsplus: unable to parse mount options [ 540.889943][ T9925] netlink: 'syz.4.1273': attribute type 10 has an invalid length. [ 540.915878][ T9925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1273'. [ 541.113702][ T9927] overlayfs: failed to resolve './file0': -2 [ 541.857488][ T9925] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 542.701218][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1278'. [ 545.487837][ T9952] orangefs_mount: mount request failed with -4 [ 545.586713][ T9961] tipc: Enabling of bearer rejected, failed to enable media [ 547.736944][ T9976] loop8: detected capacity change from 0 to 1024 [ 548.392015][ T9976] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 549.981273][ T9976] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.674125][T10027] tipc: Enabled bearer , priority 0 [ 553.094055][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 553.114065][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 554.101353][T10042] tipc: Enabling of bearer rejected, already enabled [ 555.205998][T10042] netem: change failed [ 555.248388][T10048] loop1: detected capacity change from 0 to 1024 [ 555.503730][T10048] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 555.534880][T10048] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.032945][T10065] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 557.449101][ T26] audit: type=1800 audit(1756526449.777:257): pid=10076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1303" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 559.468144][T10087] tipc: Enabling of bearer rejected, failed to enable media [ 563.181216][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.187611][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.181991][T10146] sp0: Synchronizing with TNC [ 567.243048][T10154] tipc: Enabling of bearer rejected, failed to enable media [ 567.404824][T10159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1327'. [ 567.418420][T10159] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.427221][T10159] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.436061][T10159] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.444828][T10159] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.475915][T10174] tipc: Enabling of bearer rejected, failed to enable media [ 571.468010][T10212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1337'. [ 571.482965][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'. [ 571.531787][T10234] loop8: detected capacity change from 0 to 1024 [ 572.046771][T10234] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 572.092362][T10234] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.255192][T10308] tipc: Enabling of bearer rejected, failed to enable media [ 580.288646][T10346] tipc: Resetting bearer [ 583.930994][T10375] loop8: detected capacity change from 0 to 1024 [ 585.971667][T10373] device syzkaller0 entered promiscuous mode [ 585.987329][T10375] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 586.000104][T10375] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.038963][T10381] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 586.214384][T10387] tipc: Enabled bearer , priority 0 [ 586.789709][T10387] tipc: Resetting bearer [ 586.971831][T10387] tipc: Disabling bearer [ 587.145485][T10423] tipc: Enabling of bearer rejected, already enabled [ 588.869960][T10446] loop8: detected capacity change from 0 to 1024 [ 590.402595][T10446] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 590.609585][T10446] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.128595][ T26] audit: type=1800 audit(1756526481.745:258): pid=10475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1387" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 595.985287][T10522] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1398'. [ 596.889866][T10533] lo speed is unknown, defaulting to 1000 [ 597.789363][T10533] lo speed is unknown, defaulting to 1000 [ 600.092062][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'. [ 600.214194][T10571] tipc: Started in network mode [ 600.219623][T10571] tipc: Node identity 4, cluster identity 4711 [ 600.225913][T10571] tipc: Node number set to 4 [ 601.225848][T10543] xt_bpf: check failed: parse error [ 601.585900][T10588] overlayfs: failed to clone upperpath [ 601.922290][T10589] ..: renamed from ipvlan0 [ 604.941888][T10613] tipc: Enabled bearer , priority 0 [ 604.982313][T10613] device syzkaller0 entered promiscuous mode [ 606.218980][T10613] tipc: Resetting bearer [ 606.306146][T10612] tipc: Resetting bearer [ 606.535306][T10612] tipc: Disabling bearer [ 608.795662][T10671] loop8: detected capacity change from 0 to 64 [ 609.156763][T10666] loop1: detected capacity change from 0 to 4096 [ 611.427493][T10671] smb3: Bad value for 'uid' [ 611.567288][T10705] 9pnet: Insufficient options for proto=fd [ 611.823556][T10671] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.1435'. [ 612.590242][T10727] tipc: Enabling of bearer rejected, already enabled [ 612.993505][T10740] tipc: Enabling of bearer rejected, already enabled [ 616.926567][T10770] loop1: detected capacity change from 0 to 512 [ 616.982495][T10770] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 617.085571][T10770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 617.093632][T10770] System zones: 1-12 [ 617.105454][T10770] EXT4-fs (loop1): 1 truncate cleaned up [ 617.111279][T10770] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 617.357511][T10782] tipc: Enabling of bearer rejected, failed to enable media [ 618.608969][T10779] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1456'. [ 619.263567][T10802] tipc: Enabling of bearer rejected, already enabled [ 621.473520][T10832] netlink: 'syz.6.1470': attribute type 10 has an invalid length. [ 621.533928][T10832] device wlan1 entered promiscuous mode [ 621.573122][T10832] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 624.151038][T10859] tipc: Enabling of bearer rejected, failed to enable media [ 627.271694][T10888] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 628.626653][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.633085][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.948323][T10916] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 628.956104][T10916] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 628.969982][T10916] Error parsing options; rc = [-22] [ 630.400629][T10923] tipc: Enabling of bearer rejected, already enabled [ 632.680675][T10938] netlink: 'syz.3.1493': attribute type 10 has an invalid length. [ 633.106291][T10938] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 633.555982][T10962] netlink: 'syz.1.1498': attribute type 10 has an invalid length. [ 633.576975][T10962] team0: Failed to send options change via netlink (err -105) [ 633.584737][T10962] team0: Port device dummy0 added [ 636.130404][T10979] tipc: Started in network mode [ 637.346291][T10979] tipc: Node identity 4, cluster identity 4711 [ 638.239858][T10979] tipc: Node number set to 4 [ 638.821267][T11006] loop8: detected capacity change from 0 to 2048 [ 639.108927][T11006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.534898][T11020] overlayfs: './file0' not a directory [ 642.009966][T11042] netlink: 'syz.1.1517': attribute type 10 has an invalid length. [ 642.075408][T11042] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 643.590445][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1530'. [ 643.861901][T11059] bridge1: port 1(vlan3) entered blocking state [ 643.903648][T11059] bridge1: port 1(vlan3) entered disabled state [ 643.944859][T11059] device vlan3 entered promiscuous mode [ 643.986690][T11059] device bridge0 entered promiscuous mode [ 644.091271][T11062] device gretap1 entered promiscuous mode [ 644.268143][T11062] bridge1: port 2(gretap1) entered blocking state [ 644.780134][T11062] bridge1: port 2(gretap1) entered disabled state [ 645.249689][T11083] loop8: detected capacity change from 0 to 32768 [ 650.739931][T11126] loop1: detected capacity change from 0 to 40427 [ 651.509233][T11126] F2FS-fs (loop1): invalid crc value [ 652.119766][T11126] F2FS-fs (loop1): Found nat_bits in checkpoint [ 652.166247][T11126] F2FS-fs (loop1): Start checkpoint disabled! [ 652.345596][T11126] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 655.796463][ T4446] attempt to access beyond end of device [ 655.796463][ T4446] loop1: rw=2049, want=40976, limit=40427 [ 663.500819][T11230] loop1: detected capacity change from 0 to 128 [ 663.632844][T11234] loop8: detected capacity change from 0 to 1024 [ 663.640494][T11230] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 663.690673][T11230] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.755774][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1563'. [ 663.821891][T11234] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 663.936094][T11234] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.237008][T11282] loop8: detected capacity change from 0 to 164 [ 666.447615][T11286] netlink: 'syz.4.1573': attribute type 10 has an invalid length. [ 667.701724][T11301] input: syz0 as /devices/virtual/input/input5 [ 671.985075][T11339] MPTCP: kernel_bind error, err=-98 [ 677.780099][T11388] netlink: 'syz.8.1597': attribute type 10 has an invalid length. [ 678.935375][T11403] loop8: detected capacity change from 0 to 128 [ 679.137135][T11403] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 679.168644][T11403] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.005507][T11450] loop8: detected capacity change from 0 to 128 [ 684.919131][T11454] xt_l2tp: missing protocol rule (udp|l2tpip) [ 685.010173][T11450] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 685.031636][T11450] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.914281][T11540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1639'. [ 693.867097][T11546] loop1: detected capacity change from 0 to 1024 [ 695.269243][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.279131][T11546] hfsplus: unable to parse mount options [ 695.285324][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.891333][T11561] 9pnet: Insufficient options for proto=fd [ 696.902950][T11561] fuse: Bad value for 'fd' [ 697.533044][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 700.015795][ T26] audit: type=1326 audit(1756526583.611:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 700.913132][ T26] audit: type=1326 audit(1756526583.639:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 700.962146][ T26] audit: type=1326 audit(1756526583.639:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 701.150543][ T26] audit: type=1326 audit(1756526583.639:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 701.173864][ T26] audit: type=1326 audit(1756526583.639:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 701.196826][ T26] audit: type=1326 audit(1756526583.639:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 701.638269][ T26] audit: type=1326 audit(1756526583.639:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 702.047429][T11603] loop8: detected capacity change from 0 to 40427 [ 702.117148][ T26] audit: type=1326 audit(1756526583.639:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 702.171226][T11603] F2FS-fs (loop8): invalid crc value [ 702.184235][T11603] F2FS-fs (loop8): Found nat_bits in checkpoint [ 702.217271][T11603] F2FS-fs (loop8): Start checkpoint disabled! [ 702.240589][T11603] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 702.251525][ T26] audit: type=1326 audit(1756526583.639:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 702.296177][ T26] audit: type=1326 audit(1756526583.639:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.4.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5206959be9 code=0x7ffc0000 [ 702.409506][T11611] delete_channel: no stack [ 702.476332][T11611] delete_channel: no stack [ 702.573124][T11621] rdma_rxe: rxe_register_device failed with error -23 [ 702.583141][T11621] rdma_rxe: failed to add wg2 [ 704.230317][ T4675] attempt to access beyond end of device [ 704.230317][ T4675] loop8: rw=2049, want=40976, limit=40427 [ 705.292749][T11628] orangefs_mount: mount request failed with -4 [ 707.179956][T11668] loop8: detected capacity change from 0 to 128 [ 707.416524][T11668] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 707.988237][T11680] 9pnet: Insufficient options for proto=fd [ 707.996146][T11680] fuse: Bad value for 'fd' [ 708.004860][T11668] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.512749][T11688] tipc: Enabled bearer , priority 0 [ 708.639110][T11690] No such timeout policy "syz1" [ 708.835637][T11688] tipc: Resetting bearer [ 709.461939][T11686] tipc: Disabling bearer [ 713.328072][T11745] atomic_op ffff88802b3d0198 conn xmit_atomic 0000000000000000 [ 715.853071][T11765] tipc: Enabling of bearer rejected, already enabled [ 716.093975][T11768] sp0: Synchronizing with TNC [ 716.642402][T11768] loop1: detected capacity change from 0 to 64 [ 716.855224][T11768] hfs: unable to parse mount options [ 717.875800][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1707'. [ 724.686447][T11848] device syzkaller0 entered promiscuous mode [ 724.995367][T11854] device syzkaller0 entered promiscuous mode [ 725.904069][T11860] loop1: detected capacity change from 0 to 256 [ 725.944455][T11860] FAT-fs (loop1): Unrecognized mount option "sho&±V‹ãt‹SÁâØrtname=win95" or missing value [ 728.662579][T11888] device syzkaller0 entered promiscuous mode [ 732.333825][T11915] loop8: detected capacity change from 0 to 1024 [ 732.476077][T11918] netlink: 'syz.4.1740': attribute type 4 has an invalid length. [ 732.743363][T11915] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 732.800650][T11915] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.172394][T11933] loop1: detected capacity change from 0 to 128 [ 738.626539][T11953] device syzkaller0 entered promiscuous mode [ 739.079084][T11965] loop8: detected capacity change from 0 to 128 [ 739.375544][T11965] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 739.512362][T11965] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.899277][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 739.899293][ T26] audit: type=1326 audit(1756526620.919:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a59ebe9 code=0x7ffc0000 [ 739.939425][ T26] audit: type=1326 audit(1756526620.919:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a59ebe9 code=0x7ffc0000 [ 739.962283][ T26] audit: type=1326 audit(1756526620.929:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff41a59ebe9 code=0x7ffc0000 [ 739.965127][T11971] bridge0: port 3(macsec1) entered blocking state [ 739.985230][ T26] audit: type=1326 audit(1756526620.929:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a59ebe9 code=0x7ffc0000 [ 739.985274][ T26] audit: type=1326 audit(1756526620.929:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a59ebe9 code=0x7ffc0000 [ 739.985310][ T26] audit: type=1326 audit(1756526620.929:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff41a59ebe9 code=0x7ffc0000 [ 739.985345][ T26] audit: type=1326 audit(1756526620.929:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a59ebe9 code=0x7ffc0000 [ 739.999880][T11971] bridge0: port 3(macsec1) entered disabled state [ 741.670147][ T26] audit: type=1326 audit(1756526620.929:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a59ebe9 code=0x7ffc0000 [ 742.841183][ T26] audit: type=1326 audit(1756526620.929:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff41a59ebe9 code=0x7ffc0000 [ 742.950586][ T26] audit: type=1326 audit(1756526620.929:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a59ebe9 code=0x7ffc0000 [ 747.462631][T12045] atomic_op ffff888060510198 conn xmit_atomic 0000000000000000 [ 749.178095][T12053] loop8: detected capacity change from 0 to 1024 [ 749.469960][T12053] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 749.923454][T12053] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.141729][T12099] syz.6.1785 sent an empty control message without MSG_MORE. [ 755.196551][T12133] loop8: detected capacity change from 0 to 1024 [ 756.135725][T12132] xt_CONNSECMARK: invalid mode: 0 [ 757.022775][T12142] No such timeout policy "syz1" [ 757.600065][ T4398] hfsplus: b-tree write err: -5, ino 4 [ 757.895426][T12157] loop1: detected capacity change from 0 to 128 [ 760.829629][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.860294][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.952375][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 761.961716][T12192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1809'. [ 762.850248][T12197] overlayfs: failed to clone upperpath [ 767.222858][T12252] rdma_rxe: rxe_register_device failed with error -23 [ 767.230633][T12252] rdma_rxe: failed to add wg2 [ 767.346637][T12250] loop1: detected capacity change from 0 to 8192 [ 767.717296][T12250] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 767.727899][T12250] REISERFS (device loop1): using ordered data mode [ 767.734604][T12250] reiserfs: using flush barriers [ 767.861263][T12250] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 767.878577][T12250] REISERFS (device loop1): checking transaction log (loop1) [ 768.005562][T12250] REISERFS (device loop1): Using r5 hash to sort names [ 768.016912][T12250] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 768.471888][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 768.471909][ T26] audit: type=1800 audit(1756526647.441:359): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1827" name="file2" dev="loop1" ino=2 res=0 errno=0 [ 768.764806][T12266] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 773.780423][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1843'. [ 776.070022][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1849'. [ 778.373353][T12364] loop8: detected capacity change from 0 to 4096 [ 778.876780][T12364] lo speed is unknown, defaulting to 1000 [ 778.885764][T12364] lo speed is unknown, defaulting to 1000 [ 780.425716][T12380] delete_channel: no stack [ 780.543097][T12380] delete_channel: no stack [ 782.100104][T12409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1864'. [ 784.519739][T12453] loop1: detected capacity change from 0 to 4096 [ 784.633901][T12453] lo speed is unknown, defaulting to 1000 [ 784.634550][T12453] lo speed is unknown, defaulting to 1000 [ 786.167846][T12482] loop8: detected capacity change from 0 to 16 [ 786.660399][T12493] tipc: New replicast peer: 255.255.255.255 [ 786.668767][T12493] tipc: Enabled bearer , priority 10 [ 787.054905][T12482] erofs: (device loop8): mounted with root inode @ nid 36. [ 792.267759][T12531] loop8: detected capacity change from 0 to 1024 [ 792.361651][T12531] EXT4-fs (loop8): Ignoring removed nobh option [ 792.405102][T12531] EXT4-fs (loop8): Ignoring removed bh option [ 793.227205][T12531] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 794.413008][T12560] loop1: detected capacity change from 0 to 128 [ 794.571314][T12560] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 795.349464][T12560] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.481299][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 798.489670][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 798.518795][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 798.529558][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 798.540051][T12598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.550421][T12598] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.366630][T12598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 806.190631][T12692] syz.3.1941 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 808.167482][T12710] netlink: 'syz.6.1945': attribute type 8 has an invalid length. [ 808.724413][T12715] loop1: detected capacity change from 0 to 24 [ 809.079379][T12715] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 809.112751][T12715] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 809.183191][T12715] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 809.378726][T12723] tipc: Enabling of bearer rejected, failed to enable media [ 814.643700][T12760] loop1: detected capacity change from 0 to 1024 [ 815.933005][T12760] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 816.092978][T12760] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.843748][T12798] netlink: 'syz.3.1957': attribute type 10 has an invalid length. [ 820.972237][T12817] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 823.902032][T12827] loop1: detected capacity change from 0 to 64 [ 825.795458][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 825.801934][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 829.304734][T12879] loop1: detected capacity change from 0 to 128 [ 829.351001][T12879] EXT4-fs (loop1): Test dummy encryption mode enabled [ 829.602562][T12879] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 829.669994][T12879] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 832.418762][T12879] fscrypt (loop1): Error allocating 'cts(cbc(aes))' transform: -4 [ 832.598594][T12935] device bridge_slave_1 left promiscuous mode [ 832.665880][T12935] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.487508][T12970] delete_channel: no stack [ 835.488683][T12970] delete_channel: no stack [ 838.819438][T13015] loop1: detected capacity change from 0 to 1024 [ 839.227080][T13015] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 839.268530][T13015] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.503857][T13029] overlayfs: missing 'lowerdir' [ 840.400254][ T26] audit: type=1800 audit(1756526715.855:360): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2013" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 840.979806][T13041] device syzkaller0 entered promiscuous mode [ 848.936916][T13091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2031'. [ 849.116652][T13095] delete_channel: no stack [ 849.144411][T13095] delete_channel: no stack [ 850.134376][T13111] loop1: detected capacity change from 0 to 128 [ 850.972832][T13111] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 851.004322][T13111] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.303466][ T26] audit: type=1326 audit(1756526728.015:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13135 comm="syz.3.2043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff41a59ebe9 code=0x0 [ 854.479331][T13162] Invalid ELF header magic: != ELF [ 854.513782][T13162] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 855.734201][ T4484] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 855.915896][T13186] overlayfs: failed to clone upperpath [ 857.654320][ T4484] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 857.690263][ T4484] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.782946][ T4484] usb 9-1: config 0 descriptor?? [ 860.805284][ T4484] usb 9-1: Cannot set autoneg [ 860.811991][ T4484] MOSCHIP usb-ethernet driver: probe of 9-1:0.0 failed with error -71 [ 860.824149][ T4484] usb 9-1: USB disconnect, device number 5 [ 863.759186][T13239] overlayfs: failed to clone upperpath [ 863.909178][T13240] overlayfs: failed to clone upperpath [ 864.778234][T13244] loop8: detected capacity change from 0 to 1024 [ 864.999174][T13244] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 865.041200][T13244] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.291141][T13257] IPVS: set_ctl: invalid protocol: 33 172.30.1.7:0 [ 867.652751][T13272] lo speed is unknown, defaulting to 1000 [ 867.669411][T13272] lo speed is unknown, defaulting to 1000 [ 868.183351][T13277] 9pnet: Insufficient options for proto=fd [ 868.316099][ T26] audit: type=1326 audit(1756526741.934:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 868.487905][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2077'. [ 868.877806][ T26] audit: type=1326 audit(1756526741.934:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 868.905318][ T26] audit: type=1326 audit(1756526741.934:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 869.667480][T13297] loop1: detected capacity change from 0 to 1024 [ 870.082786][ T26] audit: type=1326 audit(1756526741.934:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 870.123352][ T26] audit: type=1326 audit(1756526741.943:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 870.467403][T13297] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 870.468113][T13297] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.590228][ T26] audit: type=1326 audit(1756526741.943:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 870.590276][ T26] audit: type=1326 audit(1756526741.943:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 870.590314][ T26] audit: type=1326 audit(1756526741.943:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 870.590350][ T26] audit: type=1326 audit(1756526741.943:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 870.590387][ T26] audit: type=1326 audit(1756526741.943:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9282d7be9 code=0x7ffc0000 [ 871.366040][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.624163][T13327] loop1: detected capacity change from 0 to 128 [ 872.576300][T13327] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 872.593142][T13327] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.040202][T13347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2092'. [ 876.640766][T13369] 9pnet_virtio: no channels available for device syz [ 880.870666][T13404] lo speed is unknown, defaulting to 1000 [ 880.881890][T13404] lo speed is unknown, defaulting to 1000 [ 881.142931][T13407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2105'. [ 884.228716][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2113'. [ 884.708133][T13444] loop1: detected capacity change from 0 to 1024 [ 885.362711][T13451] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 885.524376][T13444] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 885.535564][T13444] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 887.081546][T13466] lo speed is unknown, defaulting to 1000 [ 887.096816][T13466] lo speed is unknown, defaulting to 1000 [ 891.259261][T13479] loop1: detected capacity change from 0 to 32768 [ 891.347272][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 891.353649][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 893.590380][T13503] loop1: detected capacity change from 0 to 2048 [ 894.277890][T13503] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 902.112210][T13562] device ip6gretap0 entered promiscuous mode [ 905.713377][T13579] loop8: detected capacity change from 0 to 1024 [ 905.933696][T13579] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 905.974395][T13579] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.130008][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 907.130028][ T26] audit: type=1800 audit(1756526779.299:375): pid=13599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2151" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 909.984471][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2158'. [ 910.427046][T13626] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2160'. [ 910.495710][T13633] loop1: detected capacity change from 0 to 1024 [ 912.353220][ T4267] hfsplus: b-tree write err: -5, ino 4 [ 912.520846][T13653] loop8: detected capacity change from 0 to 128 [ 913.211816][T13653] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 913.227192][T13653] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.320483][T13657] lo speed is unknown, defaulting to 1000 [ 913.361656][T13657] lo speed is unknown, defaulting to 1000 [ 914.389038][T13677] 9pnet_virtio: no channels available for device syz [ 915.351114][ T6517] Bluetooth: hci3: command 0x0409 tx timeout [ 915.838403][T13657] chnl_net:caif_netlink_parms(): no params data found [ 917.248880][T13657] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.305387][T13657] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.382001][T13657] device bridge_slave_0 entered promiscuous mode [ 917.396012][T13708] loop1: detected capacity change from 0 to 1024 [ 917.437811][T13657] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.462475][T13657] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.473964][T13657] device bridge_slave_1 entered promiscuous mode [ 917.508949][T13657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.574138][T13657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.583449][ T6517] Bluetooth: hci3: command 0x041b tx timeout [ 918.004264][T13721] loop8: detected capacity change from 0 to 1024 [ 918.670247][ T9] hfsplus: b-tree write err: -5, ino 4 [ 919.054734][T13733] loop1: detected capacity change from 0 to 1024 [ 919.085690][ T4446] hfsplus: b-tree write err: -5, ino 4 [ 919.104532][T13657] team0: Port device team_slave_0 added [ 919.113318][T13657] team0: Port device team_slave_1 added [ 919.690952][T13733] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 919.790211][T13733] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.014020][T13657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.021137][T13657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.532051][ T6519] Bluetooth: hci3: command 0x040f tx timeout [ 920.538680][T13657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.564857][T13657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.572537][T13657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.599148][T13657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.857757][T13657] device hsr_slave_0 entered promiscuous mode [ 921.557829][T13657] device hsr_slave_1 entered promiscuous mode [ 922.064002][T13657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 922.083629][T13657] Cannot create hsr debugfs directory [ 923.063339][ T6519] Bluetooth: hci3: command 0x0419 tx timeout [ 923.885989][T13795] loop8: detected capacity change from 0 to 128 [ 923.954828][T13795] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 923.979655][T13795] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.029146][T13657] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 924.078700][T13657] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 924.102332][T13799] loop1: detected capacity change from 0 to 1024 [ 924.258742][T13657] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 924.285204][T13657] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 924.295231][T13799] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 924.326690][T13799] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 927.403354][T13657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.504774][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 927.521590][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 927.557983][T13657] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.868983][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 927.887245][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 927.916729][ T4675] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.924303][ T4675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.942503][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 927.951950][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 927.967889][ T4675] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.974998][ T4675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.089013][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 928.099872][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 928.535814][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 928.559744][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 928.618260][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 928.659103][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 928.730439][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 928.792234][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 928.906841][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 928.948108][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 929.142765][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 929.381152][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 932.979963][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 932.987707][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 933.053790][T13657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.540605][ T26] audit: type=1326 audit(1756526808.798:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.8.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 937.720999][ T26] audit: type=1326 audit(1756526808.826:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.8.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 937.796698][ T26] audit: type=1326 audit(1756526808.994:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.8.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 938.836931][T12067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 938.861462][T12067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 938.881005][ T26] audit: type=1326 audit(1756526808.994:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.8.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 939.120110][ T26] audit: type=1326 audit(1756526808.994:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.8.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 939.216683][T12600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 939.463903][T12600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 939.482830][T13657] device veth0_vlan entered promiscuous mode [ 939.955401][ T26] audit: type=1326 audit(1756526809.032:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.8.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 939.955448][ T26] audit: type=1326 audit(1756526809.032:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.8.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 939.955486][ T26] audit: type=1326 audit(1756526809.032:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.8.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 939.955521][ T26] audit: type=1326 audit(1756526809.041:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.8.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 939.955567][ T26] audit: type=1326 audit(1756526809.041:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.8.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4dd84be9 code=0x7ffc0000 [ 939.989144][T12600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 939.989919][T12600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 940.818444][T13657] device veth1_vlan entered promiscuous mode [ 940.870600][T13539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 940.871494][T13539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 941.166052][T13657] device veth0_macvtap entered promiscuous mode [ 941.203269][T13657] device veth1_macvtap entered promiscuous mode [ 941.418564][T13657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.418669][T13657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.420098][T13657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.420222][T13539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 941.420948][T13539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 941.427394][T13657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.427415][T13657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.433623][T13657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.433755][T12600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 941.435545][T12600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 941.440644][T13657] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.440683][T13657] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.440714][T13657] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.440743][T13657] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.786007][T12600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.786102][T12600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.797029][T12600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 943.787327][ T4675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.915446][ T4675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.070475][T13539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 944.638727][T14042] delete_channel: no stack [ 944.674038][T14042] delete_channel: no stack [ 955.778655][T14145] loop9: detected capacity change from 0 to 4096 [ 955.963604][T14145] ntfs: volume version 3.1. [ 956.261081][T14158] loop8: detected capacity change from 0 to 256 [ 957.386050][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 957.392588][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 964.946990][T14224] lo speed is unknown, defaulting to 1000 [ 964.953834][T14224] lo speed is unknown, defaulting to 1000 [ 967.674076][ T4484] Bluetooth: hci1: command 0x0409 tx timeout [ 969.035842][T14224] chnl_net:caif_netlink_parms(): no params data found [ 969.946213][T14260] loop9: detected capacity change from 0 to 1764 [ 969.973051][T14265] loop8: detected capacity change from 0 to 1024 [ 970.086700][ T6519] Bluetooth: hci1: command 0x041b tx timeout [ 970.247619][T14265] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 970.288866][T14265] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 971.343672][T14282] nfs: Unexpected value for 'acl' [ 971.731409][T12067] tipc: Disabling bearer [ 971.736847][T12067] tipc: Disabling bearer [ 971.742392][T14224] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.749833][T14224] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.758669][T14224] device bridge_slave_0 entered promiscuous mode [ 971.768249][T14224] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.778570][T14224] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.793475][T12067] tipc: Left network mode [ 972.014576][T14224] device bridge_slave_1 entered promiscuous mode [ 972.319913][ T6519] Bluetooth: hci1: command 0x040f tx timeout [ 974.541633][ T6519] Bluetooth: hci1: command 0x0419 tx timeout [ 974.641666][T14224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.408576][T14224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.745418][T14224] team0: Port device team_slave_0 added [ 976.870051][T14224] team0: Port device team_slave_1 added [ 976.933660][T14345] loop8: detected capacity change from 0 to 1024 [ 976.955580][T14224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.969182][T14224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.995800][T14224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.153926][T14224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.165706][T14224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.173512][T14345] EXT4-fs (loop8): Ignoring removed orlov option [ 977.191896][T14224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.152515][T14345] EXT4-fs (loop8): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 978.172593][T14350] lo speed is unknown, defaulting to 1000 [ 978.186130][T14350] lo speed is unknown, defaulting to 1000 [ 979.408322][T14363] netlink: 'syz.6.2305': attribute type 1 has an invalid length. [ 982.560960][T14224] device hsr_slave_0 entered promiscuous mode [ 982.617248][T14224] device hsr_slave_1 entered promiscuous mode [ 982.718907][T14224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.727337][T14224] Cannot create hsr debugfs directory [ 984.454143][T12067] IPVS: stopping backup sync thread 10888 ... [ 984.907970][T12067] bond0: (slave wlan1): Releasing backup interface [ 986.951491][T14412] loop8: detected capacity change from 0 to 1024 [ 987.411520][T14412] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 987.453868][T14412] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.719835][T14417] netlink: 1076 bytes leftover after parsing attributes in process `syz.9.2314'. [ 987.729146][T14417] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 991.486012][T12067] device hsr_slave_0 left promiscuous mode [ 992.312716][T12067] device hsr_slave_1 left promiscuous mode [ 992.331229][T12067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.339822][T12067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.754590][T14466] netlink: 'syz.8.2324': attribute type 1 has an invalid length. [ 992.762535][T14466] netlink: 144 bytes leftover after parsing attributes in process `syz.8.2324'. [ 992.788886][T14466] QAT: failed to copy from user cfg_data. [ 992.803575][ T6519] Bluetooth: hci1: command 0x0405 tx timeout [ 993.289218][T14472] loop8: detected capacity change from 0 to 1024 [ 994.454282][T13539] hfsplus: b-tree write err: -5, ino 4 [ 994.505444][T14476] block device autoloading is deprecated and will be removed. [ 994.556640][T12067] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 995.649322][T14146] [ 995.651709][T14146] ====================================================== [ 995.658745][T14146] WARNING: possible circular locking dependency detected [ 995.665798][T14146] syzkaller #0 Not tainted [ 995.670213][T14146] ------------------------------------------------------ [ 995.677234][T14146] udevd/14146 is trying to acquire lock: [ 995.682862][T14146] ffff888023c4e938 ((wq_completion)loop8){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 995.692608][T14146] [ 995.692608][T14146] but task is already holding lock: [ 995.699977][T14146] ffff888147686468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 995.708801][T14146] [ 995.708801][T14146] which lock already depends on the new lock. [ 995.708801][T14146] [ 995.719262][T14146] [ 995.719262][T14146] the existing dependency chain (in reverse order) is: [ 995.728288][T14146] [ 995.728288][T14146] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 995.735782][T14146] __mutex_lock_common+0x1eb/0x2390 [ 995.741520][T14146] mutex_lock_killable_nested+0x17/0x20 [ 995.747601][T14146] lo_open+0x6a/0x100 [ 995.752117][T14146] blkdev_get_whole+0x90/0x390 [ 995.757418][T14146] blkdev_get_by_dev+0x2d0/0xa60 [ 995.762898][T14146] blkdev_open+0x12d/0x2c0 [ 995.767842][T14146] do_dentry_open+0x7ff/0xf80 [ 995.773051][T14146] path_openat+0x2682/0x2f30 [ 995.778178][T14146] do_filp_open+0x1b3/0x3e0 [ 995.783343][T14146] do_sys_openat2+0x142/0x4a0 [ 995.788556][T14146] __x64_sys_openat+0x135/0x160 [ 995.793947][T14146] do_syscall_64+0x4c/0xa0 [ 995.798897][T14146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 995.805333][T14146] [ 995.805333][T14146] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 995.813166][T14146] __mutex_lock_common+0x1eb/0x2390 [ 995.818899][T14146] mutex_lock_nested+0x17/0x20 [ 995.824197][T14146] blkdev_get_by_dev+0x157/0xa60 [ 995.829783][T14146] swsusp_check+0x9b/0x2a0 [ 995.834752][T14146] software_resume+0xc6/0x3b0 [ 995.839965][T14146] resume_store+0xe4/0x130 [ 995.844915][T14146] kernfs_fop_write_iter+0x379/0x4c0 [ 995.850734][T14146] vfs_write+0x712/0xd00 [ 995.855523][T14146] ksys_write+0x14d/0x250 [ 995.860380][T14146] do_syscall_64+0x4c/0xa0 [ 995.865330][T14146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 995.871760][T14146] [ 995.871760][T14146] -> #5 (system_transition_mutex/1){+.+.}-{3:3}: [ 995.880300][T14146] __mutex_lock_common+0x1eb/0x2390 [ 995.886034][T14146] mutex_lock_nested+0x17/0x20 [ 995.891334][T14146] software_resume+0x7c/0x3b0 [ 995.896544][T14146] resume_store+0xe4/0x130 [ 995.901493][T14146] kernfs_fop_write_iter+0x379/0x4c0 [ 995.907317][T14146] vfs_write+0x712/0xd00 [ 995.912099][T14146] ksys_write+0x14d/0x250 [ 995.916959][T14146] do_syscall_64+0x4c/0xa0 [ 995.921907][T14146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 995.928341][T14146] [ 995.928341][T14146] -> #4 (&of->mutex){+.+.}-{3:3}: [ 995.935572][T14146] __mutex_lock_common+0x1eb/0x2390 [ 995.941360][T14146] mutex_lock_nested+0x17/0x20 [ 995.946658][T14146] kernfs_seq_start+0x51/0x3c0 [ 995.951955][T14146] seq_read_iter+0x3c4/0xd50 [ 995.957084][T14146] vfs_read+0x725/0xcf0 [ 995.961948][T14146] ksys_read+0x14d/0x250 [ 995.966723][T14146] do_syscall_64+0x4c/0xa0 [ 995.971735][T14146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 995.978172][T14146] [ 995.978172][T14146] -> #3 (&p->lock){+.+.}-{3:3}: [ 995.985306][T14146] __mutex_lock_common+0x1eb/0x2390 [ 995.991123][T14146] mutex_lock_nested+0x17/0x20 [ 995.996417][T14146] seq_read_iter+0xad/0xd50 [ 996.001490][T14146] generic_file_splice_read+0x3a2/0x590 [ 996.007566][T14146] splice_direct_to_actor+0x413/0xb50 [ 996.013469][T14146] do_splice_direct+0x1b9/0x2c0 [ 996.018842][T14146] do_sendfile+0x5d5/0xec0 [ 996.023779][T14146] __se_sys_sendfile64+0x13b/0x190 [ 996.029412][T14146] do_syscall_64+0x4c/0xa0 [ 996.034348][T14146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 996.040765][T14146] [ 996.040765][T14146] -> #2 (sb_writers#3){.+.+}-{0:0}: [ 996.048154][T14146] lo_write_bvec+0x193/0x770 [ 996.053358][T14146] loop_process_work+0x1d62/0x2480 [ 996.058988][T14146] process_one_work+0x863/0x1000 [ 996.064445][T14146] worker_thread+0xaa8/0x12a0 [ 996.069735][T14146] kthread+0x436/0x520 [ 996.074323][T14146] ret_from_fork+0x1f/0x30 [ 996.079261][T14146] [ 996.079261][T14146] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 996.088918][T14146] process_one_work+0x7bf/0x1000 [ 996.094385][T14146] worker_thread+0xaa8/0x12a0 [ 996.099764][T14146] kthread+0x436/0x520 [ 996.104355][T14146] ret_from_fork+0x1f/0x30 [ 996.109293][T14146] [ 996.109293][T14146] -> #0 ((wq_completion)loop8){+.+.}-{0:0}: [ 996.117375][T14146] __lock_acquire+0x2c33/0x7c60 [ 996.122759][T14146] lock_acquire+0x197/0x3f0 [ 996.127801][T14146] flush_workqueue+0x142/0x1380 [ 996.133189][T14146] drain_workqueue+0xcf/0x380 [ 996.138401][T14146] destroy_workqueue+0x7b/0xb20 [ 996.143775][T14146] __loop_clr_fd+0x234/0xb90 [ 996.148888][T14146] blkdev_put+0x53f/0x7d0 [ 996.153745][T14146] blkdev_close+0x76/0xa0 [ 996.158597][T14146] __fput+0x234/0x930 [ 996.163106][T14146] task_work_run+0x125/0x1a0 [ 996.168222][T14146] exit_to_user_mode_loop+0x10f/0x130 [ 996.174116][T14146] exit_to_user_mode_prepare+0xb1/0x140 [ 996.180185][T14146] syscall_exit_to_user_mode+0x16/0x40 [ 996.186177][T14146] do_syscall_64+0x58/0xa0 [ 996.191132][T14146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 996.197550][T14146] [ 996.197550][T14146] other info that might help us debug this: [ 996.197550][T14146] [ 996.207772][T14146] Chain exists of: [ 996.207772][T14146] (wq_completion)loop8 --> &disk->open_mutex --> &lo->lo_mutex [ 996.207772][T14146] [ 996.221514][T14146] Possible unsafe locking scenario: [ 996.221514][T14146] [ 996.229256][T14146] CPU0 CPU1 [ 996.234742][T14146] ---- ---- [ 996.240103][T14146] lock(&lo->lo_mutex); [ 996.244347][T14146] lock(&disk->open_mutex); [ 996.251457][T14146] lock(&lo->lo_mutex); [ 996.258219][T14146] lock((wq_completion)loop8); [ 996.263078][T14146] [ 996.263078][T14146] *** DEADLOCK *** [ 996.263078][T14146] [ 996.271216][T14146] 2 locks held by udevd/14146: [ 996.275974][T14146] #0: ffff88801feffd18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 996.285297][T14146] #1: ffff888147686468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 996.294550][T14146] [ 996.294550][T14146] stack backtrace: [ 996.300522][T14146] CPU: 1 PID: 14146 Comm: udevd Not tainted syzkaller #0 [ 996.307645][T14146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 996.317892][T14146] Call Trace: [ 996.321178][T14146] [ 996.324119][T14146] dump_stack_lvl+0x168/0x230 [ 996.328814][T14146] ? load_image+0x3b0/0x3b0 [ 996.333323][T14146] ? show_regs_print_info+0x20/0x20 [ 996.338544][T14146] ? print_circular_bug+0x12b/0x1a0 [ 996.344179][T14146] check_noncircular+0x274/0x310 [ 996.349122][T14146] ? add_chain_block+0x940/0x940 [ 996.354167][T14146] ? lockdep_lock+0xdc/0x1e0 [ 996.358766][T14146] ? mark_lock+0x94/0x320 [ 996.363104][T14146] __lock_acquire+0x2c33/0x7c60 [ 996.367970][T14146] ? __lock_acquire+0x13ad/0x7c60 [ 996.373020][T14146] ? verify_lock_unused+0x140/0x140 [ 996.378227][T14146] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 996.384214][T14146] ? verify_lock_unused+0x140/0x140 [ 996.389424][T14146] ? verify_lock_unused+0x140/0x140 [ 996.394627][T14146] ? memset+0x1e/0x40 [ 996.398719][T14146] lock_acquire+0x197/0x3f0 [ 996.403234][T14146] ? flush_workqueue+0x126/0x1380 [ 996.408275][T14146] ? finish_task_switch+0x1e4/0x640 [ 996.413476][T14146] ? __mutex_trylock_common+0x14f/0x250 [ 996.419023][T14146] ? read_lock_is_recursive+0x10/0x10 [ 996.424499][T14146] ? __init_swait_queue_head+0xa5/0x150 [ 996.430049][T14146] flush_workqueue+0x142/0x1380 [ 996.434988][T14146] ? flush_workqueue+0x126/0x1380 [ 996.440018][T14146] ? __lock_acquire+0x7c60/0x7c60 [ 996.445055][T14146] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 996.450463][T14146] ? rcu_work_rcufn+0x110/0x110 [ 996.455313][T14146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 996.460954][T14146] ? finish_wait+0xc0/0x1d0 [ 996.465465][T14146] drain_workqueue+0xcf/0x380 [ 996.470144][T14146] destroy_workqueue+0x7b/0xb20 [ 996.475002][T14146] __loop_clr_fd+0x234/0xb90 [ 996.479597][T14146] ? lo_release+0x172/0x1f0 [ 996.484111][T14146] ? lo_open+0x100/0x100 [ 996.488356][T14146] blkdev_put+0x53f/0x7d0 [ 996.492697][T14146] blkdev_close+0x76/0xa0 [ 996.497033][T14146] ? blkdev_open+0x2c0/0x2c0 [ 996.501628][T14146] __fput+0x234/0x930 [ 996.505623][T14146] task_work_run+0x125/0x1a0 [ 996.510223][T14146] exit_to_user_mode_loop+0x10f/0x130 [ 996.515642][T14146] exit_to_user_mode_prepare+0xb1/0x140 [ 996.521293][T14146] syscall_exit_to_user_mode+0x16/0x40 [ 996.526758][T14146] do_syscall_64+0x58/0xa0 [ 996.531178][T14146] ? clear_bhb_loop+0x30/0x80 [ 996.535856][T14146] ? clear_bhb_loop+0x30/0x80 [ 996.540535][T14146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 996.546431][T14146] RIP: 0033:0x7fad488eb407 [ 996.550847][T14146] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 996.570460][T14146] RSP: 002b:00007ffeb74a7cf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 996.578879][T14146] RAX: 0000000000000000 RBX: 00007fad487fd880 RCX: 00007fad488eb407 [ 996.586860][T14146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 996.594835][T14146] RBP: 00007fad487fd6e8 R08: 0000000000000000 R09: 0000000000000000 [ 996.602804][T14146] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 996.610776][T14146] R13: 0000562091ee5410 R14: 0000000000000008 R15: 0000562091eeabd0 [ 996.618759][T14146] [ 996.625729][T12067] bond1 (unregistering): Released all slaves [ 996.736245][T14482] loop8: detected capacity change from 0 to 1024 [ 996.783911][T14482] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 996.863582][T12067] team0 (unregistering): Port device team_slave_1 removed [ 996.882732][T12067] team0 (unregistering): Port device team_slave_0 removed [ 996.898598][T12067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.915467][T12067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.962570][T12067] team0 (unregistering): Port device dummy0 removed [ 996.991699][T12067] bond0 (unregistering): Released all slaves [ 997.034668][T14458] bridge0: port 2(syz_tun) entered blocking state [ 997.041506][T14458] bridge0: port 2(syz_tun) entered disabled state [ 997.053137][T14458] device syz_tun entered promiscuous mode [ 997.794824][T14224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 997.813269][T14224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 997.831790][T14224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 997.858055][T14224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 997.926573][T14224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.944035][T14224] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.953901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 997.984899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 997.993110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 998.008181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 998.017358][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.024482][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.036414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 998.047176][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 998.060761][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 998.069392][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.076553][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.100907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 998.115261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 998.134763][T14224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 998.146204][T14224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 998.158431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 998.170407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 998.179145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 998.188311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 998.196994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 998.205883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 998.214980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 998.223696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 998.245550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 998.254146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 998.355820][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 998.368133][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 998.391180][T14224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.421867][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 998.434127][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 998.471717][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 998.485754][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 998.499160][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 998.509382][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 998.519256][T14224] device veth0_vlan entered promiscuous mode [ 998.537383][T14224] device veth1_vlan entered promiscuous mode [ 998.584056][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 998.593552][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 998.619601][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 998.640446][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 998.651024][T14224] device veth0_macvtap entered promiscuous mode [ 998.660167][T14224] device veth1_macvtap entered promiscuous mode [ 998.701871][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.725316][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.742601][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.753687][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.767613][T14224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.776315][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 998.787606][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 998.798338][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 998.810123][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 998.826447][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.845265][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.859136][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.872557][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.886684][T14224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.896074][T13539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 998.919396][T13539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 998.942261][T14224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.955122][T14224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.966690][T14224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.976028][T14224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.022692][T14224] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 999.049539][T13539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.055628][T14224] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 999.063447][T13539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.083030][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 999.108774][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.128253][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.149713][T13539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready