last executing test programs: 10m40.253322199s ago: executing program 32 (id=304): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x44d01, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x4004010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) 9m42.766766551s ago: executing program 33 (id=429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1600008, &(0x7f00000000c0)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x2}}, {@force}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp869'}}, {@gid}, {@barrier}]}, 0x3, 0x632, &(0x7f0000000800)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 6m26.407538582s ago: executing program 34 (id=896): socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) connect$unix(r3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000386dd6000000000103afffe8000000000000000000000000000aaff02000000000000000000000000000186009078000000000000000009000000"], 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='LINE1 \'Master Capture Switch\' 00000000000000008000\n'], 0x33) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x1, 0x3, 0x8}}, 0x120) r7 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) write$UHID_DESTROY(r6, &(0x7f0000000200), 0x4) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r2, 0x0, 0x0, 0x1c) 6m13.415872739s ago: executing program 35 (id=919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m10.492842354s ago: executing program 36 (id=926): openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg$unix(r2, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 5m22.248286564s ago: executing program 37 (id=972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setrlimit(0xb, &(0x7f0000000240)={0x3, 0x7}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xe23, @local}, 0x4b) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000030f0400000000005f0068b274352b257a4437d2b50c3766b43db6ac84f4fd4d6c8013fe66320ec5c4113a8789b0ea81f3e4828ab2c996a373eb04d8c244327ab02cecda1bf7eb8dca32f73d793a200fc9c861246a8135eeeb2f9d06f31e4fe51088bfd70044ed46a876bbd83fa86debd2150ce76799b01ccebf12"], 0x0, 0x28, 0x0, 0x0, 0x3}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 5m3.484275793s ago: executing program 0 (id=1034): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0xfffffffb) open_by_handle_at(0xffffffffffffffff, 0x0, 0x100000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 4m59.640807644s ago: executing program 0 (id=1037): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x4a) flock(r0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xd3, 0x8000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000c400)="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", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x20, 0x0, 0x9, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r0, 0x1) 4m57.691730514s ago: executing program 0 (id=1040): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp6=r0}, 0x20) sendmmsg$unix(r0, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(0xffffffffffffffff, 0xffffffffffffa525, 0x7, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m40.767458649s ago: executing program 38 (id=1040): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp6=r0}, 0x20) sendmmsg$unix(r0, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(0xffffffffffffffff, 0xffffffffffffa525, 0x7, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m21.369869342s ago: executing program 9 (id=1087): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 4m19.609196105s ago: executing program 9 (id=1090): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 4m16.067479258s ago: executing program 9 (id=1096): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = syz_pidfd_open(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r3, &(0x7f0000001b00)=[{0x0}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r3, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xff08, 0x0) gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r4, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) 4m2.582435498s ago: executing program 9 (id=1106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4m1.677948275s ago: executing program 9 (id=1108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0xffff, 0x4e24, 0x3ff, 0x2, 0xa0, 0x0, 0x2, r1, 0xffffffffffffffff}, {0x9, 0xffff, 0xd, 0x400, 0x5, 0x2, 0x81}, {0x2, 0x0, 0x69f4, 0x8}, 0x5, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x3, 0x5, 0x4, 0xc, 0x6}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000df00", @ANYRES16], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000000)="a1b2c4d4206e82e0afc7a503d8419bc2", &(0x7f0000000200)=""/95, &(0x7f0000000080), 0x0, 0xe, r0}, 0x38) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) 4m0.796351433s ago: executing program 9 (id=1110): mount$tmpfs(0x0, 0x0, &(0x7f0000000700), 0x8c03, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x112) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r1, 0x80047456, 0xffffffffffffffff) 3m45.47135363s ago: executing program 39 (id=1110): mount$tmpfs(0x0, 0x0, &(0x7f0000000700), 0x8c03, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x112) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r1, 0x80047456, 0xffffffffffffffff) 2m48.419880655s ago: executing program 4 (id=1195): r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") write$sysctl(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_io_uring_setup(0xbda, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x80000, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x149000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x880, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x28002, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2m43.794515834s ago: executing program 4 (id=1199): mkdir(&(0x7f0000000040)='./file0\x00', 0x1d2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x1, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r2, r3, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m39.259943585s ago: executing program 4 (id=1203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m37.142046449s ago: executing program 4 (id=1206): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="b5", 0x1}], 0x1}}], 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000080)) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r6, 0x5433, 0x0) pread64(r4, &(0x7f0000000000)=""/29, 0x1d, 0x2) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r3], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m31.066677537s ago: executing program 4 (id=1209): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x20, 0x0) read$midi(r1, &(0x7f0000000180)=""/153, 0x99) 2m30.279405486s ago: executing program 1 (id=1210): r0 = socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3e4}], 0x2}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000000, 0x0) setresuid(0x0, 0x0, 0x0) 2m29.652167956s ago: executing program 4 (id=1213): openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 2m26.977922241s ago: executing program 7 (id=1214): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e83297", 0x93, 0x4008044, 0x0, 0x0) 2m26.688282412s ago: executing program 1 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m26.059238428s ago: executing program 7 (id=1216): syz_mount_image$vfat(&(0x7f00000020c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f00000000c0)=ANY=[@ANYBLOB="736d61636b6673666c6f6f723d5e252a2829252c66736e616d2932f830137a357a9b93f4bfc215653d5d2c6f626a5f726f6c653d2d5e7d2e3a5b292d2c736d61636b66737472616e736d7574653d9f5c282c646f6e745f68"], 0x25, 0x369, &(0x7f0000000140)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f38826e376464f30f11745a2f660fc73166ba420066edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m25.734757297s ago: executing program 1 (id=1218): read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r0, 0x0, r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="050000"], 0x10) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000002c0)={0x0, 0x1ff, 0x4}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syncfs(r7) 2m24.908037908s ago: executing program 7 (id=1219): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x75ba, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) r1 = syz_open_dev$vcsn(0x0, 0x1, 0x20041) write$FUSE_INIT(r1, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffff7ffe, 0x20c441, 0x0, 0x7, 0x3, 0x20000f, 0x0, 0x0, 0x2}}, 0x50) 2m23.562998422s ago: executing program 7 (id=1221): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'macvtap0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2m22.896201703s ago: executing program 1 (id=1222): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x20, 0x0) read$midi(r1, &(0x7f0000000180)=""/153, 0x99) 2m21.761175081s ago: executing program 1 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0xe, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x4, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2m19.557900691s ago: executing program 1 (id=1226): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x855, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xb0}}, 0x0) bind$tipc(r4, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.747936763s ago: executing program 7 (id=1228): syz_mount_image$vfat(&(0x7f00000020c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f00000000c0)=ANY=[@ANYBLOB="736d61636b6673666c6f6f723d5e252a2829252c66736e616d2932f830137a357a9b93f4bfc215653d5d2c6f626a5f726f6c653d2d5e7d2e3a5b292d2c736d61636b66737472616e736d7574653d9f5c282c646f6e745f68"], 0x25, 0x369, &(0x7f0000000140)="$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") r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f38826e376464f30f11745a2f660fc73166ba420066edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m17.567657727s ago: executing program 7 (id=1229): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x1000, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) 2m17.177864902s ago: executing program 8 (id=1230): r0 = socket$nl_route(0x10, 0x3, 0x0) link(0x0, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 2m15.76759429s ago: executing program 8 (id=1231): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f]}}, 0x0, 0x53}, 0x28) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m13.161471324s ago: executing program 40 (id=1213): openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 2m13.141968651s ago: executing program 8 (id=1233): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpgrp(0x0) 2m12.536299779s ago: executing program 8 (id=1234): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ef, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create(0x207ffd) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xfffc, 0x4e23, 0x5, 0x0, 0x20, 0x80}, {0x9, 0x3, 0x8, 0x1, 0x9, 0xc8, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x99, 0x4}}, 0xe8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x70002012}) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 2m9.44403078s ago: executing program 8 (id=1235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0xe, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x4, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2m7.976837752s ago: executing program 8 (id=1236): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x80002, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000000)={&(0x7f00000006c0)={{@local, 0xf}, {@local, 0xff}, 0x400, "a0bef8f809fdbd794a5876812ecdc0f431e2e967134102e29601a109e8d6a5ea253fda100493f73e13d658b12a3dd0ee2619b2e158b8c1b070c4557ee3d7af4aa2bee609c235eee770aaee45497f554467c6e9d3f26475cfcac907d6b9d7846c4a66e178b7e711e1aa3c48463161dc313e13c58b5b22e077b23a647b4dbba9d052b703693008e1f49a92569615441c37e65f33c121efe1792557ebe6005581e24f47c1ea78ff928b49608b7e9b9e13903f343c17be0054fe54f0d8d7ec55847f847cc5bc5f54ffb48cdd6c4e992054759f155c47cf89fc8a0f48cfcea4ffe70b9fe7385805918d66fec51601c1ecbbd2d4968fa2ee1cb00bb49ae093b25d39cd0010349f9c63e8fe096e6f8afd79a91d6d0d16e0437fb9e342342795b94ceefe593cbf02d29e96b1f24b13cd77a1846e1bb48e2598c86b2c792fdda2200ebc4e4dd451afd893f7d56431141b1a3a783274db59e9b6e0433ef25a2bddb33a27bce4efdca9d10025d6dd659e7f2a57d3388cf7586814d510bb27139a7354ae00d731bfd4ef92d07469a83000d1850e84c47be45cfa6ddc6a85d6f733a6a2c952966ab3ed2a577de6dba67623b3f0e95ec21f0f7f8f8ffa4214f82dc15951b8186335578ce37d126681210eab215969b3d288e68dccb9772dfc9ae4c64b5ee5e120e90ba3685b2c7f83dedfcea4a974cc5720ed4eafa2b32bf03ae60cc716fff174a71a2ff4398e7d311303752c6b60572a9d4c50bea69e11f8ad4313677866073ae7780e58284e50e2a96e3d1b7c5ed63c9ca828961448d6d0240a7fbb458fd4ae04f42af11fb5a724be40a5ab6cc51eebd1d06cc1bb000e875db0030cc7c28a19f06dd362e774598e9669db5aaa732e589ecd57efebd3e3bbd87e6e8755cf41f97867085cfc0c13249180c5c4b0259c26f0e3a02da75480e52efeaee4a83458268362ee1e305cc3da30c43c7d25f80eba5d5386e08ecc4cb0a5ae4ddc8a7555a92800873676a1dcec504174f2bb2dea5776fbe3e8055d8918bb8589f9dd023a058a8b4fbed59a6cc78ef07bdb8f7b1dc77f1dcdc5583ca5a5dac9c5cff92a561b9ee1d8c7af343e7550c565a766299030a8e431edf48d8cd122ecda6182efe0dba76208af12a5539ed51991ad88cddca65043c0dde225d8602a783de11b636a7624d5002e27a2aed5963b0c40a80162a9449396190dd0c15bbf9fd35808a6921efb066f0924a4fe18f5cc3b008671dff827064e16e1a0589cc2bdff95a7987287955ecf2a8e8184d506ec4be628d93d5dad068ca02567388c536e23e5d36c74e9fa429279c09e29e5164219c81e2167cd01dc4ca5ff739ab6355ba1f0b84db5f2a939fd58e0b3a32a15432d77335eaee2a081699c0c865c03ffebb4c9a1bb041b164bea76b87ac63248bb570f0761c7b6eae686bd9a3f1f42bfc2961da5e11288"}, 0x418, 0x6}) writev(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x9) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = accept$netrom(r4, &(0x7f0000000b00)={{0x3, @null}, [@default, @remote, @netrom, @rose, @rose, @netrom, @null, @null]}, &(0x7f0000000080)=0x48) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000001c0)=0x1) 2m3.520082428s ago: executing program 41 (id=1226): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x855, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xb0}}, 0x0) bind$tipc(r4, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) close_range(r0, 0xffffffffffffffff, 0x0) 2m1.971692831s ago: executing program 42 (id=1229): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x1000, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) 1m52.301061848s ago: executing program 43 (id=1236): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x80002, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000000)={&(0x7f00000006c0)={{@local, 0xf}, {@local, 0xff}, 0x400, "a0bef8f809fdbd794a5876812ecdc0f431e2e967134102e29601a109e8d6a5ea253fda100493f73e13d658b12a3dd0ee2619b2e158b8c1b070c4557ee3d7af4aa2bee609c235eee770aaee45497f554467c6e9d3f26475cfcac907d6b9d7846c4a66e178b7e711e1aa3c48463161dc313e13c58b5b22e077b23a647b4dbba9d052b703693008e1f49a92569615441c37e65f33c121efe1792557ebe6005581e24f47c1ea78ff928b49608b7e9b9e13903f343c17be0054fe54f0d8d7ec55847f847cc5bc5f54ffb48cdd6c4e992054759f155c47cf89fc8a0f48cfcea4ffe70b9fe7385805918d66fec51601c1ecbbd2d4968fa2ee1cb00bb49ae093b25d39cd0010349f9c63e8fe096e6f8afd79a91d6d0d16e0437fb9e342342795b94ceefe593cbf02d29e96b1f24b13cd77a1846e1bb48e2598c86b2c792fdda2200ebc4e4dd451afd893f7d56431141b1a3a783274db59e9b6e0433ef25a2bddb33a27bce4efdca9d10025d6dd659e7f2a57d3388cf7586814d510bb27139a7354ae00d731bfd4ef92d07469a83000d1850e84c47be45cfa6ddc6a85d6f733a6a2c952966ab3ed2a577de6dba67623b3f0e95ec21f0f7f8f8ffa4214f82dc15951b8186335578ce37d126681210eab215969b3d288e68dccb9772dfc9ae4c64b5ee5e120e90ba3685b2c7f83dedfcea4a974cc5720ed4eafa2b32bf03ae60cc716fff174a71a2ff4398e7d311303752c6b60572a9d4c50bea69e11f8ad4313677866073ae7780e58284e50e2a96e3d1b7c5ed63c9ca828961448d6d0240a7fbb458fd4ae04f42af11fb5a724be40a5ab6cc51eebd1d06cc1bb000e875db0030cc7c28a19f06dd362e774598e9669db5aaa732e589ecd57efebd3e3bbd87e6e8755cf41f97867085cfc0c13249180c5c4b0259c26f0e3a02da75480e52efeaee4a83458268362ee1e305cc3da30c43c7d25f80eba5d5386e08ecc4cb0a5ae4ddc8a7555a92800873676a1dcec504174f2bb2dea5776fbe3e8055d8918bb8589f9dd023a058a8b4fbed59a6cc78ef07bdb8f7b1dc77f1dcdc5583ca5a5dac9c5cff92a561b9ee1d8c7af343e7550c565a766299030a8e431edf48d8cd122ecda6182efe0dba76208af12a5539ed51991ad88cddca65043c0dde225d8602a783de11b636a7624d5002e27a2aed5963b0c40a80162a9449396190dd0c15bbf9fd35808a6921efb066f0924a4fe18f5cc3b008671dff827064e16e1a0589cc2bdff95a7987287955ecf2a8e8184d506ec4be628d93d5dad068ca02567388c536e23e5d36c74e9fa429279c09e29e5164219c81e2167cd01dc4ca5ff739ab6355ba1f0b84db5f2a939fd58e0b3a32a15432d77335eaee2a081699c0c865c03ffebb4c9a1bb041b164bea76b87ac63248bb570f0761c7b6eae686bd9a3f1f42bfc2961da5e11288"}, 0x418, 0x6}) writev(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x9) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = accept$netrom(r4, &(0x7f0000000b00)={{0x3, @null}, [@default, @remote, @netrom, @rose, @rose, @netrom, @null, @null]}, &(0x7f0000000080)=0x48) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000001c0)=0x1) 1m13.311008599s ago: executing program 5 (id=1243): syz_open_dev$loop(&(0x7f00000001c0), 0x2, 0x8aa00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) userfaultfd(0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f00000001c0), 0x0, 0x33, 0x0) 1m12.403614714s ago: executing program 5 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0xe, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x4, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1m11.106864968s ago: executing program 5 (id=1245): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x300c044) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000400)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='btrfs_handle_em_exist\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) 1m8.129307916s ago: executing program 5 (id=1246): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setrlimit(0x1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1m6.785899021s ago: executing program 5 (id=1248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="9b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f0", 0x1}], 0x1}}], 0x2, 0x20000010) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xffff, 0x2, [0x6, 0x4]}, 0xc) 1m5.668779272s ago: executing program 5 (id=1250): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x78d, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1m5.376919839s ago: executing program 0 (id=1239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m4.36985918s ago: executing program 0 (id=1254): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8, @ANYRES16], 0x1, 0x122e, &(0x7f0000002580)="$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") write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000000, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x6f) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) 57.163208497s ago: executing program 0 (id=1258): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xc81) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x4000, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) 47.943471253s ago: executing program 44 (id=1250): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x78d, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 40.106609068s ago: executing program 45 (id=1258): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xc81) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x4000, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) 9.505494426s ago: executing program 2 (id=1331): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x121a02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r2 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000000000020900010073797a30000000002c000000030a01020000000000000000000000070900010073797a30000000000900030073797a300000000048000000060a010400000000000000000100000108000b4000000000200004801c0001800a0001006c696d69740000000c00028008000440000000000900010073797a300000000014001e001100010000000000000000000300000a"], 0x120}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000300)=""/204, 0xcc}], 0x1, 0x1, 0xfffffff0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2400000}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000040)) 9.231673834s ago: executing program 6 (id=1332): r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ////8+wKHhUtID7hAOjFcXV2f8+nMsBIBLl3r/n+/A3mcLMBIKfY1AhAYZf/3/f9zpelDJQQAAAzcdGtKCqXs673pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea9YXWlsm514zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPf3AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvD+AYDAAAA6Na5Tm/N/znsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89eHulM/Xx8qlBxf3LFyJiNi/+eEy25pNRjIjrf09i/MR2SUSMDSD+4b2I+Ghe/KSZ1lHIvPiDeBPOiR+z2buQF//GAOLDVXa/efx5La//FeLZ1jy//41H/E/9g+p9/Iuj499Yj/5/s88YT73zs3LP+PcinhrPP/504ic94j/XZ/yvf+3goNe69EcRc53Pn9YR72SE41K5sbVTru8f3N7YWl6vrFe2FxcXXl56Zemlpfny2ka1kv2bG+M7T//8/bPafz338y/Jsund/udz9pf3mfSfd+4++HCncng6/q3ncuL/6sfZK07HL2RxPpWVm+vnOuXDdvmkZ376m2fOav/qcfuLD/P/f6vXTrud6ihP9/unAwBcgPr+weZytVrZHdlC8yr9EUhD4REsfGugO0zTNG32qZxV9yOin/0kMeCWFvLzOS70PAIM+8gEAAAM2vFJ/7AzAQAAAAAAAAAAAAAAAAAAgKvrMp6y1h3z+BHIySAeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/DQAA///dpdP7") write$sysctl(0xffffffffffffffff, &(0x7f0000000240)='4\x00', 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_io_uring_setup(0xbda, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x80000, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x149000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x880, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x28002, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 7.256584194s ago: executing program 6 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250100000008000200010000ef08000100", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 6.561808358s ago: executing program 3 (id=1336): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc26080b) 5.83014565s ago: executing program 6 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.46856384s ago: executing program 3 (id=1338): r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") write$sysctl(0xffffffffffffffff, &(0x7f0000000240)='4\x00', 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_io_uring_setup(0xbda, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x80000, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x149000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x880, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x28002, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 5.288331507s ago: executing program 2 (id=1339): syz_mount_image$vfat(&(0x7f00000020c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f00000000c0)=ANY=[@ANYBLOB="736d61636b6673666c6f6f723d5e252a2829252c66736e616d2932f830137a357a9b93f4bfc215653d5d2c6f626a5f726f6c653d2d5e7d2e3a5b292d2c736d61636b66737472616e736d7574653d9f5c282c646f6e745f68"], 0x25, 0x369, &(0x7f0000000140)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.081787281s ago: executing program 6 (id=1340): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x81) 4.337209625s ago: executing program 6 (id=1341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80f00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0x4) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) 4.234300001s ago: executing program 3 (id=1342): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setrlimit(0x1, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x10000000005) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 4.071987525s ago: executing program 2 (id=1343): r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") write$sysctl(0xffffffffffffffff, &(0x7f0000000240)='4\x00', 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_io_uring_setup(0xbda, 0x0, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x80000, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x149000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x880, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x28002, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3.087242123s ago: executing program 3 (id=1344): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0xc17a) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x76) 2.622049321s ago: executing program 2 (id=1345): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250100000008000200010000ef08000100", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 2.004169717s ago: executing program 3 (id=1346): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc26080b) 1.443918616s ago: executing program 6 (id=1347): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x140}}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00006e6000/0x2000)=nil) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x2f00, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0xbff, 0x9, 0x200, 0xe2df, 0xaa11, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) 1.35852136s ago: executing program 2 (id=1348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000400)=ANY=[@ANYBLOB="05000000000000004444"]) 1.036746865s ago: executing program 3 (id=1349): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x81) 0s ago: executing program 2 (id=1350): r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") write$sysctl(0xffffffffffffffff, &(0x7f0000000240)='4\x00', 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_io_uring_setup(0xbda, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x80000, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x149000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x880, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x28002, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1 [ 602.033589][ T3677] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.088495][ T3677] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.120918][ T3677] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.178224][ T3677] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.674647][ T9680] veth0_vlan: entered promiscuous mode [ 603.940290][ T9680] veth1_vlan: entered promiscuous mode [ 604.412413][ T9680] veth0_macvtap: entered promiscuous mode [ 604.557845][ T9680] veth1_macvtap: entered promiscuous mode [ 604.853491][ T9680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.053878][ T9680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.272579][ T4329] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.358205][ T4329] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.492798][ T4329] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.599708][ T4329] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.031748][ T4211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.040112][ T4211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.101171][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.109194][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.002029][T10411] binder: BINDER_SET_CONTEXT_MGR already set [ 608.008278][T10411] binder: 10408:10411 ioctl 4018620d 200000000040 returned -16 [ 608.033724][T10410] loop7: detected capacity change from 0 to 512 [ 608.233025][T10410] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 608.244217][T10410] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 608.254686][T10410] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.968: Failed to acquire dquot type 1 [ 608.337290][T10410] EXT4-fs (loop7): 1 truncate cleaned up [ 608.346623][T10410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.360596][T10410] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.966772][ T9171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.924065][T10445] netlink: 14 bytes leftover after parsing attributes in process `syz.6.972'. [ 610.322909][T10445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.520800][T10445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.634387][T10445] bond0 (unregistering): Released all slaves [ 611.081001][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.091779][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.159813][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.168084][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.872927][ T30] audit: type=1326 audit(1755968292.810:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.8.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1238ebe9 code=0x7ffc0000 [ 612.001110][ T30] audit: type=1326 audit(1755968292.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.8.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1238ebe9 code=0x7ffc0000 [ 612.025626][ T30] audit: type=1326 audit(1755968292.880:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.8.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f1c1238ebe9 code=0x7ffc0000 [ 612.049310][ T30] audit: type=1326 audit(1755968292.880:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.8.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1238ebe9 code=0x7ffc0000 [ 612.071962][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.078299][ T30] audit: type=1326 audit(1755968292.880:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.8.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1238ebe9 code=0x7ffc0000 [ 612.100722][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.261933][T10506] loop7: detected capacity change from 0 to 64 [ 612.626232][T10511] binder: BINDER_SET_CONTEXT_MGR already set [ 612.632591][T10511] binder: 10510:10511 ioctl 4018620d 200000000040 returned -16 [ 613.515422][T10520] No control pipe specified [ 613.573221][T10523] input: syz0 as /devices/virtual/input/input10 [ 613.825808][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.833958][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.035940][ T4009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.045043][ T4009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.542583][T10558] loop7: detected capacity change from 0 to 512 [ 618.616740][T10558] EXT4-fs (loop7): Test dummy encryption mode enabled [ 618.624009][T10558] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 618.761721][T10558] EXT4-fs (loop7): 1 truncate cleaned up [ 618.783745][T10558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.085969][T10572] comedi comedi4: bad chanlist[0]=0x0000ffff chan=65535 range length=2 [ 619.472408][ T9171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.804728][T10578] binder: BINDER_SET_CONTEXT_MGR already set [ 619.811182][T10578] binder: 10577:10578 ioctl 4018620d 200000000040 returned -16 [ 619.971906][T10581] tipc: Started in network mode [ 619.976950][T10581] tipc: Node identity 4, cluster identity 4711 [ 619.983491][T10581] tipc: Node number set to 4 [ 621.405067][T10582] No control pipe specified [ 621.606543][T10590] input: syz0 as /devices/virtual/input/input11 [ 623.248312][T10601] netlink: 'syz.7.994': attribute type 6 has an invalid length. [ 626.525037][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 627.792740][T10621] loop7: detected capacity change from 0 to 512 [ 628.454801][T10621] EXT4-fs (loop7): Test dummy encryption mode enabled [ 628.462053][T10621] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 628.730439][T10621] EXT4-fs (loop7): 1 truncate cleaned up [ 628.738107][T10621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.541090][T10637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 629.560740][T10637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 629.575310][T10637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 629.588188][T10637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 629.602885][T10637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 629.765296][ T9171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.631128][T10678] binder: 10672:10678 ioctl c0306201 0 returned -14 [ 630.726442][T10674] No control pipe specified [ 631.497175][T10756] input: syz0 as /devices/virtual/input/input12 [ 631.750094][T10637] Bluetooth: hci3: command tx timeout [ 632.030646][T10636] chnl_net:caif_netlink_parms(): no params data found [ 633.837985][T10637] Bluetooth: hci3: command tx timeout [ 634.366650][T10802] loop7: detected capacity change from 0 to 512 [ 634.710134][T10802] EXT4-fs (loop7): Test dummy encryption mode enabled [ 634.717278][T10802] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 634.973173][T10802] EXT4-fs (loop7): 1 truncate cleaned up [ 634.981460][T10802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.544263][T10811] ptrace attach of "./syz-executor exec"[9680] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x07 8  G\x0b \x09   € /dev/kvm"[10811] [ 635.876196][ T9171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.000267][T10637] Bluetooth: hci3: command tx timeout [ 636.798147][T10822] No control pipe specified [ 637.351117][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.358692][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.366633][T10636] bridge_slave_0: entered allmulticast mode [ 637.375204][T10636] bridge_slave_0: entered promiscuous mode [ 638.382761][T10637] Bluetooth: hci3: command tx timeout [ 638.896955][T10851] binder: 10848:10851 ioctl c0306201 0 returned -14 [ 638.920010][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.928097][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.936221][T10636] bridge_slave_1: entered allmulticast mode [ 638.949890][T10636] bridge_slave_1: entered promiscuous mode [ 639.293536][T10869] input: syz0 as /devices/virtual/input/input13 [ 639.611913][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.720919][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.713951][T10636] team0: Port device team_slave_0 added [ 640.763208][T10636] team0: Port device team_slave_1 added [ 640.896512][T10922] loop7: detected capacity change from 0 to 512 [ 641.069357][T10922] EXT4-fs (loop7): Test dummy encryption mode enabled [ 641.077143][T10922] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 641.168015][T10922] EXT4-fs (loop7): 1 truncate cleaned up [ 641.175843][T10922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.224778][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.232828][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.259168][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.587079][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.598542][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.627826][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.704089][ T9171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.559123][T10636] hsr_slave_0: entered promiscuous mode [ 642.569225][T10636] hsr_slave_1: entered promiscuous mode [ 642.578123][T10636] debugfs: 'hsr0' already exists in 'hsr' [ 642.584113][T10636] Cannot create hsr debugfs directory [ 643.834868][T11041] No control pipe specified [ 645.463348][T11077] binder: 11076:11077 ioctl c0306201 0 returned -14 [ 645.755488][T11085] input: syz0 as /devices/virtual/input/input14 [ 646.459656][T10636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 646.663504][T11121] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 646.670743][T11121] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 646.677670][T11121] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 646.684940][T11121] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 646.692662][T11121] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 646.699666][T11121] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 646.706800][T11121] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 646.715169][T11121] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 646.722278][T11121] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 646.749853][T11121] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 646.756826][T11121] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 646.764134][T11121] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 646.771323][T11121] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 646.779774][T11121] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 649.569222][T10636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 649.864199][T10636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 650.094678][T10636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 650.111523][T11125] loop8: detected capacity change from 0 to 512 [ 650.194315][T11125] EXT4-fs (loop8): Test dummy encryption mode enabled [ 650.201810][T11125] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 651.010433][T11125] EXT4-fs (loop8): 1 truncate cleaned up [ 651.018308][T11125] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.027282][T10636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.183868][T11132] loop7: detected capacity change from 0 to 8192 [ 652.478792][T10636] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.045880][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.053276][ T3704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.174022][ T9497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.286298][T11154] No control pipe specified [ 654.444866][T11175] input: syz0 as /devices/virtual/input/input15 [ 654.573313][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.580259][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.091219][T11186] binder: 11184:11186 ioctl c018620c 0 returned -14 [ 661.436127][T11212] loop9: detected capacity change from 0 to 512 [ 661.498732][T11212] EXT4-fs (loop9): Test dummy encryption mode enabled [ 661.506232][T11212] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 661.693725][T11212] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.1052: bad orphan inode 131083 [ 661.721781][T11212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.418258][T11212] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 662.986814][T11221] No control pipe specified [ 663.375017][ T9680] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.101760][T11231] loop7: detected capacity change from 0 to 256 [ 664.295715][T11231] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 664.490732][T11231] exFAT-fs (loop7): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967287) [ 664.490732][T11231] [ 664.503212][T11231] exFAT-fs (loop7): Filesystem has been set read-only [ 664.510659][T11231] exFAT-fs (loop7): error, failed to bmap (inode : ffff8880143e0db0 iblock : 0, err : -5) [ 664.724807][T11236] input: syz0 as /devices/virtual/input/input16 [ 666.025017][T11253] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1058'. [ 666.035725][T11253] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1058'. [ 670.388234][T10637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 670.402217][T10637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 670.431714][T10637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 670.450577][T10637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 670.463647][T10637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 672.438011][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.445476][ T3704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.506470][T11253] sit1: entered allmulticast mode [ 672.639925][T10637] Bluetooth: hci4: command tx timeout [ 673.206775][T10636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.393204][ T3704] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 674.314057][T11323] binder: BINDER_SET_CONTEXT_MGR already set [ 674.320432][T11323] binder: 11317:11323 ioctl 4018620d 200000000040 returned -16 [ 674.567064][T11325] loop7: detected capacity change from 0 to 512 [ 674.709853][T10637] Bluetooth: hci4: command tx timeout [ 675.213588][T11325] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 675.225713][T11325] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 675.236032][T11325] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1066: Failed to acquire dquot type 1 [ 675.319155][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.358388][T11325] EXT4-fs (loop7): 1 truncate cleaned up [ 675.367032][T11325] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.370850][T11403] input: syz0 as /devices/virtual/input/input17 [ 675.380397][T11325] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.439892][T11404] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 676.130727][T11264] chnl_net:caif_netlink_parms(): no params data found [ 676.609149][ T9171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.789896][T10637] Bluetooth: hci4: command tx timeout [ 678.465421][T10636] veth0_vlan: entered promiscuous mode [ 678.954598][T10637] Bluetooth: hci4: command tx timeout [ 679.025637][T11264] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.033331][T11264] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.041477][T11264] bridge_slave_0: entered allmulticast mode [ 679.051149][T11264] bridge_slave_0: entered promiscuous mode [ 679.128801][T10636] veth1_vlan: entered promiscuous mode [ 679.265686][T11264] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.275081][T11264] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.283034][T11264] bridge_slave_1: entered allmulticast mode [ 679.296085][T11264] bridge_slave_1: entered promiscuous mode [ 679.866123][T10636] veth0_macvtap: entered promiscuous mode [ 679.934740][T11264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.059232][T10636] veth1_macvtap: entered promiscuous mode [ 680.195770][T11264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.085346][T11264] team0: Port device team_slave_0 added [ 681.272021][T11264] team0: Port device team_slave_1 added [ 681.365032][T10636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.088676][T10636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.179279][T11264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.186484][T11264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.213787][T11264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.288322][ T3626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.407029][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.448929][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.514671][T11264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.522006][T11264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.548715][T11264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.598617][ T4009] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.624307][T11601] input: syz0 as /devices/virtual/input/input18 [ 682.825765][T11607] loop7: detected capacity change from 0 to 512 [ 683.223503][T11264] hsr_slave_0: entered promiscuous mode [ 683.233741][T11264] hsr_slave_1: entered promiscuous mode [ 683.242393][T11264] debugfs: 'hsr0' already exists in 'hsr' [ 683.248290][T11264] Cannot create hsr debugfs directory [ 683.425663][T11607] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 683.436571][T11607] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 683.447053][T11607] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1077: Failed to acquire dquot type 1 [ 683.550323][T11607] EXT4-fs (loop7): 1 truncate cleaned up [ 683.558573][T11607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.572207][T11607] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.087415][ T9171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.162440][T11264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 686.637055][T11776] input: syz0 as /devices/virtual/input/input19 [ 686.805166][T11264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 687.084705][T11264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 687.354298][T10637] Bluetooth: hci0: command 0x0406 tx timeout [ 687.362844][T11264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 689.067763][T11800] loop8: detected capacity change from 0 to 512 [ 689.581174][T11800] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 689.592207][T11800] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 689.602571][T11800] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.1088: Failed to acquire dquot type 1 [ 689.723865][T11800] EXT4-fs (loop8): 1 truncate cleaned up [ 689.734973][T11800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.748601][T11800] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.819349][T11264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.894016][T11264] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.012458][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.020005][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.031760][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 690.052274][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.059941][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.080586][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 690.117786][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 690.150659][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 690.186554][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 690.205798][T11264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 690.217582][T11264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.870110][ T9698] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 691.086133][ T9497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.096165][ T9698] usb 10-1: Using ep0 maxpacket: 8 [ 691.138012][ T9698] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 691.146779][ T9698] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.157427][ T9698] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 691.173611][ T9698] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 691.186104][ T9698] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.199734][ T9698] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 691.209067][ T9698] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.945410][ T9698] usb 10-1: GET_CAPABILITIES returned 2f [ 691.951577][ T9698] usbtmc 10-1:16.0: can't read capabilities [ 692.182900][ T24] usb 10-1: USB disconnect, device number 2 [ 692.392457][ T5813] Bluetooth: hci2: command tx timeout [ 692.770641][T11813] chnl_net:caif_netlink_parms(): no params data found [ 693.243665][T11264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.334651][T11995] input: syz0 as /devices/virtual/input/input20 [ 694.286117][T11264] veth0_vlan: entered promiscuous mode [ 694.394923][ T4063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.481582][ T5813] Bluetooth: hci2: command tx timeout [ 694.663655][ T9698] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 694.693167][ T4063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.827978][T11264] veth1_vlan: entered promiscuous mode [ 694.914008][ T9698] usb 10-1: Using ep0 maxpacket: 32 [ 694.935011][ T4063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.047106][ T9698] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 695.062172][ T9698] usb 10-1: config 0 has no interface number 0 [ 695.068545][ T9698] usb 10-1: config 0 interface 184 has no altsetting 0 [ 695.145214][ T9698] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 695.154821][ T9698] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.169077][ T9698] usb 10-1: Product: syz [ 695.175843][ T9698] usb 10-1: Manufacturer: syz [ 695.180926][ T9698] usb 10-1: SerialNumber: syz [ 695.252588][ T9698] usb 10-1: config 0 descriptor?? [ 695.279209][ T4063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.342626][ T9698] smsc75xx v1.0.0 [ 695.346437][ T9698] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 695.358107][ T9698] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -22 [ 695.853836][T11813] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.861864][T11813] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.869788][T11813] bridge_slave_0: entered allmulticast mode [ 695.885139][T11813] bridge_slave_0: entered promiscuous mode [ 696.055139][T11813] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.062970][T11813] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.072440][T11813] bridge_slave_1: entered allmulticast mode [ 696.091711][T11813] bridge_slave_1: entered promiscuous mode [ 696.338192][ T4063] bridge_slave_1: left allmulticast mode [ 696.344318][ T4063] bridge_slave_1: left promiscuous mode [ 696.353135][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.415091][ T4063] bridge_slave_0: left allmulticast mode [ 696.421416][ T4063] bridge_slave_0: left promiscuous mode [ 696.427927][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.581088][ T5813] Bluetooth: hci2: command tx timeout [ 697.258450][ T4063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.370942][ T4063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.445523][ T4063] bond0 (unregistering): Released all slaves [ 697.533768][T11813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.611318][T11813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.706595][T11264] veth0_macvtap: entered promiscuous mode [ 697.861856][ T4063] hsr_slave_0: left promiscuous mode [ 697.894627][ T4063] hsr_slave_1: left promiscuous mode [ 697.904591][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.912253][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.972787][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.982539][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.095788][ T4063] veth1_macvtap: left promiscuous mode [ 698.102019][ T4063] veth0_macvtap: left promiscuous mode [ 698.107872][ T4063] veth1_vlan: left promiscuous mode [ 698.113843][ T4063] veth0_vlan: left promiscuous mode [ 698.630542][ T5813] Bluetooth: hci2: command tx timeout [ 699.221999][ T4063] team0 (unregistering): Port device team_slave_1 removed [ 699.292715][ T4063] team0 (unregistering): Port device team_slave_0 removed [ 699.858969][T11813] team0: Port device team_slave_0 added [ 699.912425][T11264] veth1_macvtap: entered promiscuous mode [ 700.092674][T11813] team0: Port device team_slave_1 added [ 700.664521][T11264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.723750][T11813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.731035][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.757952][T11813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.842070][T11264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.937395][ T4063] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.034591][ T4063] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.045132][ T4063] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.058393][ T3626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.113500][T11813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.121742][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.148159][T11813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.392886][T12179] fuse: Bad value for 'fd' [ 702.035556][T11813] hsr_slave_0: entered promiscuous mode [ 702.044654][T11813] hsr_slave_1: entered promiscuous mode [ 702.052988][T11813] debugfs: 'hsr0' already exists in 'hsr' [ 702.058815][T11813] Cannot create hsr debugfs directory [ 702.720786][T10637] Bluetooth: hci1: command 0x0406 tx timeout [ 705.484132][T12261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.807003][T11813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 705.850554][T11813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 705.953280][T11813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 706.091813][T11813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 706.858586][ T2212] usb 10-1: USB disconnect, device number 3 [ 707.047631][T12332] input: syz0 as /devices/virtual/input/input21 [ 707.831243][T10637] Bluetooth: hci6: command 0x0406 tx timeout [ 708.057544][T11813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.398177][T11813] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.498703][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.506293][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.632185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.639811][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.309299][T12383] fuse: Bad value for 'fd' [ 711.610809][ T3626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.618922][ T3626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.735577][T11813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.880625][ T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.888638][ T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.214205][T12406] loop8: detected capacity change from 0 to 164 [ 712.398940][T12406] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 713.685658][T12425] loop8: detected capacity change from 0 to 128 [ 714.065466][T12417] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 715.575132][T11813] veth0_vlan: entered promiscuous mode [ 715.704788][T11813] veth1_vlan: entered promiscuous mode [ 716.024954][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.031823][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.115256][T11813] veth0_macvtap: entered promiscuous mode [ 716.238090][T11813] veth1_macvtap: entered promiscuous mode [ 716.589217][T11813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.718422][T11813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.910171][ T4009] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.006268][ T4009] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.093495][ T754] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.146547][ T754] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.820887][T12496] loop7: detected capacity change from 0 to 256 [ 721.860219][T12496] vfat: Unknown parameter 'smackfsfloor' [ 723.753500][T12513] loop7: detected capacity change from 0 to 32768 [ 723.784394][T12513] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1125 (12513) [ 723.867221][T12513] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 723.877832][T12513] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 723.887619][T12513] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 724.334035][T12513] BTRFS info (device loop7): rebuilding free space tree [ 724.491011][T12513] BTRFS info (device loop7): disabling free space tree [ 724.498196][T12513] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 724.508230][T12513] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 724.541453][T12513] BTRFS info (device loop7): enabling ssd optimizations [ 724.552470][T12513] BTRFS info (device loop7): enabling disk space caching [ 724.560588][T12513] BTRFS info (device loop7): force clearing of disk cache [ 724.567888][T12513] BTRFS info (device loop7): use zlib compression, level 3 [ 724.676846][ T9171] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 725.794590][T10637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 725.822285][T10637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 725.860224][T10637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 725.911362][T10637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 725.924198][T10637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 727.728132][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.736416][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.991058][T10637] Bluetooth: hci3: command tx timeout [ 728.072069][ T4211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.080361][ T4211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.199878][ T2212] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 728.504837][ T2212] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 728.515528][ T2212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.524918][ T2212] usb 2-1: Product: syz [ 728.529253][ T2212] usb 2-1: Manufacturer: syz [ 728.534629][ T2212] usb 2-1: SerialNumber: syz [ 728.761387][ T2212] usb 2-1: config 0 descriptor?? [ 728.786561][T12549] chnl_net:caif_netlink_parms(): no params data found [ 729.961081][ T2212] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 729.969376][ T2212] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 730.123159][T10637] Bluetooth: hci3: command tx timeout [ 732.151511][T10637] Bluetooth: hci3: command tx timeout [ 732.464991][ T2212] usb 2-1: USB disconnect, device number 2 [ 732.505525][T12739] loop4: detected capacity change from 0 to 256 [ 732.632471][T12739] vfat: Unknown parameter 'smackfsfloor' [ 732.940393][T12752] loop8: detected capacity change from 0 to 1024 [ 733.575780][T12752] hfsplus: invalid btree flag [ 733.639729][T12752] hfsplus: failed to load extents file [ 734.308296][T10637] Bluetooth: hci3: command tx timeout [ 734.375069][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1136'. [ 734.389963][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1136'. [ 734.399056][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1136'. [ 735.757796][T12549] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.765411][T12549] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.773458][T12549] bridge_slave_0: entered allmulticast mode [ 735.783128][T12549] bridge_slave_0: entered promiscuous mode [ 735.837947][T12804] loop7: detected capacity change from 0 to 512 [ 735.923377][T12549] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.931840][T12549] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.940397][T12549] bridge_slave_1: entered allmulticast mode [ 735.950061][T12549] bridge_slave_1: entered promiscuous mode [ 736.161778][T12804] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 736.172864][T12804] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 736.183915][T12804] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1140: Failed to acquire dquot type 1 [ 736.567416][T12804] EXT4-fs (loop7): 1 truncate cleaned up [ 736.575454][T12804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.588961][T12804] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.388837][T12549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.982905][T12845] loop8: detected capacity change from 0 to 40427 [ 738.052118][T12845] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 738.060221][T12845] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 738.086927][T12845] F2FS-fs (loop8): invalid crc value [ 738.349289][T12845] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 738.362758][T12816] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 738.415571][T12549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.670630][T12845] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 738.677821][T12845] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 739.234227][T12549] team0: Port device team_slave_0 added [ 739.286561][T12549] team0: Port device team_slave_1 added [ 740.877742][ T9171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.103891][T12549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.111337][T12549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.146979][T12549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.315734][T12549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.322938][T12549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.355225][T12549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.866654][T12920] loop4: detected capacity change from 0 to 764 [ 742.026504][T12920] ISOFS: unable to read i-node block [ 742.032367][T12920] isofs_fill_super: get root inode failed [ 742.405319][T12948] loop1: detected capacity change from 0 to 128 [ 742.556041][T12549] hsr_slave_0: entered promiscuous mode [ 742.567317][T12549] hsr_slave_1: entered promiscuous mode [ 742.582239][T12549] debugfs: 'hsr0' already exists in 'hsr' [ 742.588146][T12549] Cannot create hsr debugfs directory [ 742.783976][ T30] audit: type=1326 audit(1755968423.700:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.7.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84378ebe9 code=0x7fc00000 [ 743.512410][T12992] loop7: detected capacity change from 0 to 256 [ 743.628720][T12992] vfat: Unknown parameter 'smackfsfloor' [ 744.351145][T12976] loop4: detected capacity change from 0 to 4096 [ 744.506975][T12976] ntfs3(loop4): ino=3, Correct links count -> 2. [ 744.895008][T12549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.179884][T12549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.463213][T12549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.510340][T12976] ntfs3(loop4): ino=1a, mi_enum_attr [ 745.515855][T12976] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 745.819266][T12549] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.197706][T13060] loop1: detected capacity change from 0 to 512 [ 746.985022][T12549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 747.031615][T13060] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 747.044130][T13060] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 747.055273][T13060] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1153: Failed to acquire dquot type 1 [ 747.158843][T13060] EXT4-fs (loop1): 1 truncate cleaned up [ 747.166349][T13060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.185988][T13060] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.331209][T12549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 747.681112][T12549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 747.901159][T12549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 748.028331][T13084] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 748.121555][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 748.912691][T11264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.415005][ T3677] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.073086][T13130] loop1: detected capacity change from 0 to 32768 [ 752.082404][T13130] xfs: Unknown parameter 'uid' [ 752.852216][ T3677] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.478268][ T3677] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.921607][ T3677] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.355486][T13150] loop7: detected capacity change from 0 to 256 [ 755.455841][T13150] vfat: Unknown parameter 'smackfsfloor' [ 755.832141][ T3677] bridge_slave_1: left allmulticast mode [ 755.838031][ T3677] bridge_slave_1: left promiscuous mode [ 755.844945][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.162463][ T3677] bridge_slave_0: left allmulticast mode [ 756.168615][ T3677] bridge_slave_0: left promiscuous mode [ 756.176494][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.358403][T13175] loop1: detected capacity change from 0 to 512 [ 760.618747][ T3677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.781864][ T3677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.856291][ T3677] bond0 (unregistering): Released all slaves [ 760.968706][T13190] loop8: detected capacity change from 0 to 512 [ 761.015608][T12549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.237533][T13190] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 761.250875][T13190] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 761.261155][T13190] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.1166: Failed to acquire dquot type 1 [ 761.447829][T13190] EXT4-fs (loop8): 1 truncate cleaned up [ 761.541667][T13190] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.555019][T13190] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.671088][T12549] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.016026][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.023615][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.260010][ T3677] hsr_slave_0: left promiscuous mode [ 762.294691][ T3677] hsr_slave_1: left promiscuous mode [ 762.303340][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.311189][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.408350][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.416195][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.459288][ T9497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.692433][ T3677] veth1_macvtap: left promiscuous mode [ 762.698273][ T3677] veth0_macvtap: left promiscuous mode [ 762.704396][ T3677] veth1_vlan: left promiscuous mode [ 762.710121][ T3677] veth0_vlan: left promiscuous mode [ 763.448441][T13233] loop8: detected capacity change from 0 to 512 [ 763.788990][T13233] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 763.800415][T13233] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 763.810866][T13233] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.1172: Failed to acquire dquot type 1 [ 763.979249][T13233] EXT4-fs (loop8): 1 truncate cleaned up [ 763.987286][T13233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.001486][T13233] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.460145][ T3677] team0 (unregistering): Port device team_slave_1 removed [ 764.660413][ T3677] team0 (unregistering): Port device team_slave_0 removed [ 765.032321][ T9497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.521048][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.528544][ T3626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.949968][T13264] loop8: detected capacity change from 0 to 256 [ 768.041979][T13264] vfat: Unknown parameter 'smackfsfloor' [ 768.858929][T13267] loop4: detected capacity change from 0 to 40427 [ 768.872238][T13267] F2FS-fs (loop4): build fault injection rate: 771 [ 768.943673][T13267] F2FS-fs (loop4): invalid crc value [ 769.268907][T13267] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 769.304273][T13267] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 773.219276][T12549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.336321][T13306] delete_channel: no stack [ 773.339659][T13309] loop8: detected capacity change from 0 to 512 [ 773.684130][T13309] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 773.698418][T13309] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 773.713809][T13309] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.1181: Failed to acquire dquot type 1 [ 773.850636][T12549] veth0_vlan: entered promiscuous mode [ 773.862358][T13309] EXT4-fs (loop8): 1 truncate cleaned up [ 773.870636][T13309] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.883741][T13309] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.993467][T12549] veth1_vlan: entered promiscuous mode [ 774.411497][T12549] veth0_macvtap: entered promiscuous mode [ 774.532841][T12549] veth1_macvtap: entered promiscuous mode [ 774.663499][ T9497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.770718][T12549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.855482][T12549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.895484][T13326] loop7: detected capacity change from 0 to 512 [ 775.008625][ T4716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.138763][ T4716] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.218279][T13326] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 775.229643][T13326] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 775.244031][T13326] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1185: Failed to acquire dquot type 1 [ 775.306624][ T754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.380450][ T754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.390579][T13326] EXT4-fs (loop7): 1 truncate cleaned up [ 775.398200][T13326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.411702][T13326] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.357748][T13346] input: syz1 as /devices/virtual/input/input23 [ 776.641889][ T9171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.813491][T13345] loop4: detected capacity change from 0 to 1024 [ 777.500966][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.507680][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.680034][T10479] hfsplus: b-tree write err: -5, ino 4 [ 780.108688][T13382] loop4: detected capacity change from 0 to 256 [ 780.171065][T13381] bpq0: entered allmulticast mode [ 780.222649][T13382] vfat: Unknown parameter 'smackfsfloor' [ 781.934910][T13395] loop4: detected capacity change from 0 to 512 [ 782.137214][T13399] loop8: detected capacity change from 0 to 512 [ 782.211922][T13395] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 782.223064][T13395] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 782.234145][T13395] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1195: Failed to acquire dquot type 1 [ 782.315970][T13406] loop1: detected capacity change from 0 to 64 [ 782.401639][T13399] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 782.417401][T13399] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 782.428641][T13399] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.1196: Failed to acquire dquot type 1 [ 782.530247][T13399] EXT4-fs (loop8): 1 truncate cleaned up [ 782.538363][T13399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.553039][T13399] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.541586][T13395] EXT4-fs (loop4): 1 truncate cleaned up [ 783.549377][T13395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.562819][T13395] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.460176][T13413] loop7: detected capacity change from 0 to 32768 [ 784.847114][T13413] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 784.847374][T13413] (syz.7.1194,13413,1):ocfs2_initialize_super:2229 ERROR: status = -12 [ 784.871222][T13413] (syz.7.1194,13413,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 785.620682][T11813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.731365][ T9497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.456632][T13449] input: syz1 as /devices/virtual/input/input24 [ 791.592076][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 791.613162][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 791.647164][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 791.680488][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 791.720865][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 792.283026][T13491] loop8: detected capacity change from 0 to 256 [ 792.362659][T13491] vfat: Unknown parameter 'smackfsfloor' [ 792.618603][T13499] loop1: detected capacity change from 0 to 512 [ 792.807479][T13499] EXT4-fs (loop1): Test dummy encryption mode enabled [ 792.814937][T13499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 793.255129][T13499] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1205: bad orphan inode 131083 [ 793.467231][T13499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.845046][ T5813] Bluetooth: hci5: command tx timeout [ 794.917131][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 794.923841][ T9698] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 795.098135][T11264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.688837][ T9698] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.699708][ T9698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 795.910628][T10637] Bluetooth: hci5: command tx timeout [ 795.954208][ T9698] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 795.964167][ T9698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.972674][ T9698] usb 5-1: Product: syz [ 795.977059][ T9698] usb 5-1: Manufacturer: syz [ 795.982455][ T9698] usb 5-1: SerialNumber: syz [ 797.990929][T10637] Bluetooth: hci5: command tx timeout [ 798.306401][ T9698] usb 5-1: can't set config #1, error -71 [ 798.464409][ T9698] usb 5-1: USB disconnect, device number 2 [ 798.928373][T13471] chnl_net:caif_netlink_parms(): no params data found [ 799.553365][T10479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.926231][T10479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.995507][T13662] loop8: detected capacity change from 0 to 512 [ 800.127626][T10637] Bluetooth: hci5: command tx timeout [ 800.307596][T13675] input: syz1 as /devices/virtual/input/input25 [ 800.637268][T13662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.689979][T10479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.002894][T10479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.588995][ T9497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.845976][T13713] loop7: detected capacity change from 0 to 256 [ 803.947942][T13713] vfat: Unknown parameter 'smackfsfloor' [ 803.971614][T10479] bridge_slave_1: left allmulticast mode [ 803.977619][T10479] bridge_slave_1: left promiscuous mode [ 803.984618][T10479] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.121156][T10479] bridge_slave_0: left allmulticast mode [ 804.127137][T10479] bridge_slave_0: left promiscuous mode [ 804.133938][T10479] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.731435][T13730] program syz.1.1218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 805.589201][T10479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.811596][T10479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.905575][T10479] bond0 (unregistering): Released all slaves [ 807.107675][T13471] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.115489][T13471] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.123543][T13471] bridge_slave_0: entered allmulticast mode [ 807.133031][T13471] bridge_slave_0: entered promiscuous mode [ 807.447173][T13471] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.455258][T13471] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.463521][T13471] bridge_slave_1: entered allmulticast mode [ 807.473140][T13471] bridge_slave_1: entered promiscuous mode [ 808.819778][T10479] hsr_slave_0: left promiscuous mode [ 808.852110][T10479] hsr_slave_1: left promiscuous mode [ 808.861969][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.869842][T10479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.881842][T13782] input: syz1 as /devices/virtual/input/input26 [ 808.895603][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.903430][T10479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.000424][T10479] veth1_macvtap: left promiscuous mode [ 809.006236][T10479] veth0_macvtap: left promiscuous mode [ 809.012403][T10479] veth1_vlan: left promiscuous mode [ 809.017911][T10479] veth0_vlan: left promiscuous mode [ 810.411196][T10479] team0 (unregistering): Port device team_slave_1 removed [ 810.521956][T10479] team0 (unregistering): Port device team_slave_0 removed [ 811.042981][ T2212] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 811.223418][T13811] loop7: detected capacity change from 0 to 256 [ 811.273102][T13811] vfat: Unknown parameter 'smackfsfloor' [ 811.540506][ T2212] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 811.550820][ T2212] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 811.564419][ T2212] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 811.573812][ T2212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.786239][T13471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.934528][T13471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.090535][ T2212] usb 2-1: usb_control_msg returned -32 [ 812.096401][ T2212] usbtmc 2-1:16.0: can't read capabilities [ 812.543388][T13471] team0: Port device team_slave_0 added [ 812.690875][T13471] team0: Port device team_slave_1 added [ 812.840281][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1230'. [ 812.949832][T13886] bridge0: entered promiscuous mode [ 812.963058][T13886] bridge0: left promiscuous mode [ 813.466133][T13471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.474656][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.501334][T13471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.711640][T13471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.718862][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.750639][T13471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.349756][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 815.630295][ T5870] usb 2-1: USB disconnect, device number 3 [ 816.217245][T13471] hsr_slave_0: entered promiscuous mode [ 816.227453][T13471] hsr_slave_1: entered promiscuous mode [ 816.236204][T13471] debugfs: 'hsr0' already exists in 'hsr' [ 816.242335][T13471] Cannot create hsr debugfs directory [ 817.338587][T14005] loop8: detected capacity change from 0 to 16 [ 817.475355][T14005] erofs (device loop8): mounted with root inode @ nid 36. [ 817.651833][T14005] erofs (device loop8): read error -117 @ 8200 of nid 36 [ 820.344566][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 820.357889][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 820.370368][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 820.387161][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 820.403183][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 821.054844][T14052] input: syz1 as /devices/virtual/input/input27 [ 822.313037][T13471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 822.336473][T13471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 822.470677][ T5813] Bluetooth: hci3: command tx timeout [ 822.513951][T13471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 822.626136][T13471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 823.695360][T14038] chnl_net:caif_netlink_parms(): no params data found [ 824.560526][ T5813] Bluetooth: hci3: command tx timeout [ 824.879847][T13471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.195030][T13471] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.337123][T12908] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.344502][T12908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.550920][T12908] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.558407][T12908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.012113][T14038] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.021084][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.035775][T14038] bridge_slave_0: entered allmulticast mode [ 826.044179][T14038] bridge_slave_0: entered promiscuous mode [ 826.206559][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.214094][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.221853][T14038] bridge_slave_1: entered allmulticast mode [ 826.237004][T14038] bridge_slave_1: entered promiscuous mode [ 826.645670][ T5813] Bluetooth: hci3: command tx timeout [ 827.102498][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.312796][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.954963][T14038] team0: Port device team_slave_0 added [ 828.097454][T14038] team0: Port device team_slave_1 added [ 828.142140][T10637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 828.173120][T10637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 828.211455][T10637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 828.241572][T10637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 828.258462][T10637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 828.712041][ T5813] Bluetooth: hci3: command tx timeout [ 828.888112][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.901883][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.930759][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.468885][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.476077][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.502592][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.655100][ T754] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.998105][T10637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 830.008480][T10637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 830.018512][T10637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 830.054060][T10637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 830.066263][T10637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 830.287562][ T754] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.482973][ T754] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.499272][ T5813] Bluetooth: hci6: command tx timeout [ 830.974332][ T754] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.096750][T14038] hsr_slave_0: entered promiscuous mode [ 831.108591][T14038] hsr_slave_1: entered promiscuous mode [ 831.116518][T14038] debugfs: 'hsr0' already exists in 'hsr' [ 831.122655][T14038] Cannot create hsr debugfs directory [ 832.158328][ T5813] Bluetooth: hci2: command tx timeout [ 832.368178][ T754] bridge_slave_1: left allmulticast mode [ 832.377855][ T754] bridge_slave_1: left promiscuous mode [ 832.385046][ T754] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.539953][ T754] bridge_slave_0: left allmulticast mode [ 832.545787][ T754] bridge_slave_0: left promiscuous mode [ 832.554712][ T754] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.564157][ T5813] Bluetooth: hci6: command tx timeout [ 833.643078][ T754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.682253][ T754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.713951][ T754] bond0 (unregistering): Released all slaves [ 833.802516][T13471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.252782][ T5813] Bluetooth: hci2: command tx timeout [ 834.475237][T14291] chnl_net:caif_netlink_parms(): no params data found [ 834.630837][ T5813] Bluetooth: hci6: command tx timeout [ 835.536600][ T754] hsr_slave_0: left promiscuous mode [ 835.564347][ T754] hsr_slave_1: left promiscuous mode [ 835.572298][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.580605][ T754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.611487][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.619026][ T754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.648852][ T754] veth1_macvtap: left promiscuous mode [ 835.657663][ T754] veth0_macvtap: left promiscuous mode [ 835.663788][ T754] veth1_vlan: left promiscuous mode [ 835.669275][ T754] veth0_vlan: left promiscuous mode [ 836.300471][ T754] team0 (unregistering): Port device team_slave_1 removed [ 836.310932][ T5813] Bluetooth: hci2: command tx timeout [ 836.382921][ T754] team0 (unregistering): Port device team_slave_0 removed [ 836.533348][T14357] chnl_net:caif_netlink_parms(): no params data found [ 836.721174][ T5813] Bluetooth: hci6: command tx timeout [ 836.723334][T13471] veth0_vlan: entered promiscuous mode [ 836.835692][T14038] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.973313][T13471] veth1_vlan: entered promiscuous mode [ 837.251958][T14038] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.629997][T14038] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.886026][T14038] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.387909][ T754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.411287][ T5813] Bluetooth: hci2: command tx timeout [ 838.490294][T14291] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.497778][T14291] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.505887][T14291] bridge_slave_0: entered allmulticast mode [ 838.515271][T14291] bridge_slave_0: entered promiscuous mode [ 838.536870][T14291] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.544992][T14291] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.553048][T14291] bridge_slave_1: entered allmulticast mode [ 838.562775][T14291] bridge_slave_1: entered promiscuous mode [ 838.603847][ T754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.631247][T10637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 838.657200][T10637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 838.684268][T10637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 838.747379][T10637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 838.769244][T10637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 838.943616][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.950390][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.127147][ T754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.319060][T13471] veth0_macvtap: entered promiscuous mode [ 839.336484][T14357] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.357679][T14357] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.366621][T14357] bridge_slave_0: entered allmulticast mode [ 839.377124][T14357] bridge_slave_0: entered promiscuous mode [ 839.517999][ T754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.576177][T14291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.594499][T14357] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.602267][T14357] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.610313][T14357] bridge_slave_1: entered allmulticast mode [ 839.619887][T14357] bridge_slave_1: entered promiscuous mode [ 839.671472][T14038] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 839.705993][T13471] veth1_macvtap: entered promiscuous mode [ 839.741555][T14291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.005302][T14357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.021194][T14038] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 840.204231][T14038] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 840.243240][T14357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.432806][T14038] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 840.665964][T14291] team0: Port device team_slave_0 added [ 840.869668][T10637] Bluetooth: hci0: command tx timeout [ 841.002726][T14291] team0: Port device team_slave_1 added [ 841.034745][T14357] team0: Port device team_slave_0 added [ 841.059386][T13471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.069335][ T754] bridge_slave_1: left allmulticast mode [ 841.075398][ T754] bridge_slave_1: left promiscuous mode [ 841.087320][ T754] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.117018][ T754] bridge_slave_0: left allmulticast mode [ 841.124596][ T754] bridge_slave_0: left promiscuous mode [ 841.130953][ T754] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.645145][ T754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.690804][ T754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.720673][ T754] bond0 (unregistering): Released all slaves [ 841.916047][T14357] team0: Port device team_slave_1 added [ 842.093485][T13471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.371109][T14291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.378156][T14291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.405235][T14291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.645081][ T4063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.694366][T14291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.701589][T14291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.733613][T14291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.837170][T14357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.844517][T14357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.871838][T14357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.885456][ T3677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.913485][ T3677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.963369][T10637] Bluetooth: hci0: command tx timeout [ 842.996120][ T754] hsr_slave_0: left promiscuous mode [ 843.007325][ T754] hsr_slave_1: left promiscuous mode [ 843.015312][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.027662][ T754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.042693][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.050622][ T754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.086852][ T754] veth1_macvtap: left promiscuous mode [ 843.092744][ T754] veth0_macvtap: left promiscuous mode [ 843.098555][ T754] veth1_vlan: left promiscuous mode [ 843.104210][ T754] veth0_vlan: left promiscuous mode [ 843.780772][ T754] team0 (unregistering): Port device team_slave_1 removed [ 843.806435][ T754] team0 (unregistering): Port device team_slave_0 removed [ 844.122804][ T3677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.170699][T14357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.177807][T14357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.204378][T14357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.703009][T14291] hsr_slave_0: entered promiscuous mode [ 844.713665][T14291] hsr_slave_1: entered promiscuous mode [ 844.722439][T14291] debugfs: 'hsr0' already exists in 'hsr' [ 844.728312][T14291] Cannot create hsr debugfs directory [ 845.052939][T10637] Bluetooth: hci0: command tx timeout [ 845.164968][T14357] hsr_slave_0: entered promiscuous mode [ 845.173684][T14357] hsr_slave_1: entered promiscuous mode [ 845.187224][T14357] debugfs: 'hsr0' already exists in 'hsr' [ 845.193193][T14357] Cannot create hsr debugfs directory [ 845.225759][T14038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.603600][T14038] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.883088][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.890470][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.907951][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.915306][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.977893][T14762] chnl_net:caif_netlink_parms(): no params data found [ 847.112673][T10637] Bluetooth: hci0: command tx timeout [ 848.181015][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 848.196355][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 848.205721][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 848.233322][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 848.293668][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 848.444879][T14357] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.503807][T14291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 848.581514][T14762] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.588998][T14762] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.598219][T14762] bridge_slave_0: entered allmulticast mode [ 848.607720][T14762] bridge_slave_0: entered promiscuous mode [ 848.654933][T14357] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.706107][T14291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 848.752287][T14762] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.762752][T14762] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.770838][T14762] bridge_slave_1: entered allmulticast mode [ 848.780389][T14762] bridge_slave_1: entered promiscuous mode [ 848.826274][T14357] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.881733][T14291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 849.227379][T14357] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.321261][T14291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 849.400171][T14762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.593912][T14762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.892356][T14762] team0: Port device team_slave_0 added [ 849.996833][T14762] team0: Port device team_slave_1 added [ 850.321472][T14038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.431011][T10637] Bluetooth: hci4: command tx timeout [ 850.492271][T14762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.505932][T14762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.534625][T14762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.737415][T14762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.745317][T14762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.772287][T14762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.796830][T14357] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 851.002109][T14357] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 851.224520][T14357] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 851.377462][T14357] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 851.538687][T14762] hsr_slave_0: entered promiscuous mode [ 851.552399][T14762] hsr_slave_1: entered promiscuous mode [ 851.560618][T14762] debugfs: 'hsr0' already exists in 'hsr' [ 851.566476][T14762] Cannot create hsr debugfs directory [ 851.580677][T15326] chnl_net:caif_netlink_parms(): no params data found [ 851.870254][ T4063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.026359][ T4063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.397979][ T4063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.485812][T10637] Bluetooth: hci4: command tx timeout [ 852.568844][ T4063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.793514][T14291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.309978][ T4063] bridge_slave_1: left allmulticast mode [ 853.315805][ T4063] bridge_slave_1: left promiscuous mode [ 853.322424][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.413688][ T4063] bridge_slave_0: left allmulticast mode [ 853.419759][ T4063] bridge_slave_0: left promiscuous mode [ 853.426988][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.951564][ T4063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.988729][ T4063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.014229][ T4063] bond0 (unregistering): Released all slaves [ 854.503084][T14291] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.555198][T10637] Bluetooth: hci4: command tx timeout [ 854.736954][ T4063] hsr_slave_0: left promiscuous mode [ 854.759720][ T4063] hsr_slave_1: left promiscuous mode [ 854.767644][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.776907][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.872152][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.879902][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.994320][ T4063] veth1_macvtap: left promiscuous mode [ 855.000158][ T4063] veth0_macvtap: left promiscuous mode [ 855.011553][ T4063] veth1_vlan: left promiscuous mode [ 855.016947][ T4063] veth0_vlan: left promiscuous mode [ 856.630394][T10637] Bluetooth: hci4: command tx timeout [ 856.736811][ T4063] team0 (unregistering): Port device team_slave_1 removed [ 856.785821][ T4063] team0 (unregistering): Port device team_slave_0 removed [ 857.093551][T15326] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.103836][T15326] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.114274][T15326] bridge_slave_0: entered allmulticast mode [ 857.127606][T15326] bridge_slave_0: entered promiscuous mode [ 857.333550][T15326] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.341132][T15326] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.351328][T15326] bridge_slave_1: entered allmulticast mode [ 857.363591][T15326] bridge_slave_1: entered promiscuous mode [ 857.411333][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.418796][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.434434][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.441814][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.917544][T15326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.965349][T14762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.117021][T15326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.186813][T14762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.308031][T14762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.448077][T14762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.545426][ T4063] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.690792][T15326] team0: Port device team_slave_0 added [ 858.728980][T14038] veth0_vlan: entered promiscuous mode [ 858.769166][ T4063] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.830427][T15326] team0: Port device team_slave_1 added [ 858.922499][ T4063] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.095942][T14357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.247708][ T4063] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.431407][T14038] veth1_vlan: entered promiscuous mode [ 859.462625][T15326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.471251][T15326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.498631][T15326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.714405][T14357] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.754645][T15326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.762084][T15326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.789652][T15326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.875971][T14762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 860.028128][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.035688][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.128883][T14762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 860.247843][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.255408][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.509712][T14762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 860.558587][T14038] veth0_macvtap: entered promiscuous mode [ 860.588477][T15326] hsr_slave_0: entered promiscuous mode [ 860.598703][T15326] hsr_slave_1: entered promiscuous mode [ 860.607526][T15326] debugfs: 'hsr0' already exists in 'hsr' [ 860.613609][T15326] Cannot create hsr debugfs directory [ 860.650632][ T4063] bridge_slave_1: left allmulticast mode [ 860.656477][ T4063] bridge_slave_1: left promiscuous mode [ 860.663174][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.697345][ T4063] bridge_slave_0: left allmulticast mode [ 860.703665][ T4063] bridge_slave_0: left promiscuous mode [ 860.710322][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.174184][ T4063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.216498][ T4063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.246758][ T4063] bond0 (unregistering): Released all slaves [ 861.321244][T14762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 861.500672][T14038] veth1_macvtap: entered promiscuous mode [ 861.634413][ T4063] tipc: Left network mode [ 862.052738][T14291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.119308][T14038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.160284][ T4063] hsr_slave_0: left promiscuous mode [ 862.168548][ T4063] hsr_slave_1: left promiscuous mode [ 862.178929][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.186669][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.198778][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.206526][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.235084][ T4063] veth1_macvtap: left promiscuous mode [ 862.240970][ T4063] veth0_macvtap: left promiscuous mode [ 862.246797][ T4063] veth1_vlan: left promiscuous mode [ 862.252789][ T4063] veth0_vlan: left promiscuous mode [ 862.830850][ T4063] team0 (unregistering): Port device team_slave_1 removed [ 862.916486][ T4063] team0 (unregistering): Port device team_slave_0 removed [ 863.514829][T14038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.752172][ T3651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.798292][ T3651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.870855][ T3651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.933010][ T3651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.112398][T14291] veth0_vlan: entered promiscuous mode [ 864.359788][T14291] veth1_vlan: entered promiscuous mode [ 864.711786][T14762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.762590][T15326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 864.873833][T15326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 865.010753][T14762] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.023105][T15326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 865.077229][T14291] veth0_macvtap: entered promiscuous mode [ 865.123870][T15326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 865.214066][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.221662][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.285605][T14291] veth1_macvtap: entered promiscuous mode [ 865.375550][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.383147][ T3626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.586250][T14357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.687190][T14291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.778561][T14291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.840698][ T3677] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.930770][ T3677] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.002197][ T3677] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.066986][ T3677] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.727456][T15326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.002143][T15326] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.136056][ T4009] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.143760][ T4009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.284396][ T4009] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.291938][ T4009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.060413][T14762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.606264][T14762] veth0_vlan: entered promiscuous mode [ 868.807047][T14762] veth1_vlan: entered promiscuous mode [ 868.938940][T14357] veth0_vlan: entered promiscuous mode [ 869.066814][T14357] veth1_vlan: entered promiscuous mode [ 869.259067][T14762] veth0_macvtap: entered promiscuous mode [ 869.393434][T14762] veth1_macvtap: entered promiscuous mode [ 869.507785][T14357] veth0_macvtap: entered promiscuous mode [ 869.586123][T14357] veth1_macvtap: entered promiscuous mode [ 869.646052][T14762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.791101][T14762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.895697][T15326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.914786][T14357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.952178][ T3626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.004091][ T3626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.065536][T14357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.106931][ T3626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.167805][ T3626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.235982][ T3626] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.289929][ T3626] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.298927][ T3626] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.406887][ T3626] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.755993][T15326] veth0_vlan: entered promiscuous mode [ 870.917976][T15326] veth1_vlan: entered promiscuous mode [ 871.406871][T15326] veth0_macvtap: entered promiscuous mode [ 871.466047][T15326] veth1_macvtap: entered promiscuous mode [ 871.722626][T15326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.856064][T15326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.976970][ T4716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.067674][ T3651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.162070][ T3651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.232396][ T3651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.891777][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.900816][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.221536][ T3626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.229807][ T3626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.109071][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.117486][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.481205][T13183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.489298][T13183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.236049][ T30] audit: type=1326 audit(1755968556.180:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16099 comm="syz.3.1237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23d078ebe9 code=0x0 [ 877.491192][T16132] loop3: detected capacity change from 0 to 40427 [ 877.582190][T16132] F2FS-fs (loop3): invalid crc value [ 877.940416][T16132] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 877.982173][T16132] F2FS-fs (loop3): Start checkpoint disabled! [ 877.996290][T16132] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 878.016903][T16146] input: syz1 as /devices/virtual/input/input28 [ 878.582413][ T30] audit: type=1800 audit(1755968559.520:17): pid=16157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1242" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 878.732114][T16157] syz.3.1242: attempt to access beyond end of device [ 878.732114][T16157] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 878.749689][T16157] syz.3.1242: attempt to access beyond end of device [ 878.749689][T16157] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 878.775007][T16157] syz.3.1242: attempt to access beyond end of device [ 878.775007][T16157] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 879.345685][T10479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.354317][T10479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.024098][ T4063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.033341][ T4063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.556177][ T3677] kworker/u8:12: attempt to access beyond end of device [ 881.556177][ T3677] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 881.570686][ T3677] CPU: 1 UID: 0 PID: 3677 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(none) [ 881.570823][ T3677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 881.570951][ T3677] Workqueue: writeback wb_workfn (flush-7:3) [ 881.571172][ T3677] Call Trace: [ 881.571220][ T3677] [ 881.571268][ T3677] __dump_stack+0x26/0x30 [ 881.571442][ T3677] dump_stack_lvl+0x1df/0x270 [ 881.571607][ T3677] dump_stack+0x1e/0x25 [ 881.571762][ T3677] f2fs_handle_critical_error+0xa6f/0xc20 [ 881.571988][ T3677] f2fs_stop_checkpoint+0x65/0x80 [ 881.572171][ T3677] f2fs_write_end_io+0x101c/0x1bc0 [ 881.572387][ T3677] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 881.572586][ T3677] bio_endio+0xde2/0xf30 [ 881.572730][ T3677] submit_bio_noacct+0x213/0x2750 [ 881.572924][ T3677] submit_bio+0x57c/0x630 [ 881.573071][ T3677] f2fs_submit_write_bio+0x92/0x250 [ 881.573251][ T3677] __submit_merged_bio+0x16f/0x6a0 [ 881.573431][ T3677] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 881.573596][ T3677] __submit_merged_write_cond+0x458/0x9a0 [ 881.573792][ T3677] f2fs_write_data_pages+0x4bb2/0x5480 [ 881.574060][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.574248][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.574407][ T3677] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 881.574568][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.574724][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.574878][ T3677] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 881.575046][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.575201][ T3677] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 881.575361][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.575515][ T3677] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 881.575676][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.575828][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.575981][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.576135][ T3677] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 881.576294][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.576473][ T3677] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 881.576633][ T3677] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 881.576822][ T3677] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 881.577010][ T3677] do_writepages+0x3ef/0x860 [ 881.577154][ T3677] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 881.577322][ T3677] ? writeback_sb_inodes+0x31/0x1cb0 [ 881.577472][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.577651][ T3677] __writeback_single_inode+0x101/0x1190 [ 881.577808][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.577970][ T3677] writeback_sb_inodes+0xac1/0x1cb0 [ 881.578195][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.578402][ T3677] wb_writeback+0x4ce/0xc00 [ 881.578561][ T3677] ? queue_io+0x4d1/0x790 [ 881.578707][ T3677] wb_workfn+0x397/0x1910 [ 881.578888][ T3677] ? kmsan_get_metadata+0xfb/0x160 [ 881.579067][ T3677] ? __pfx_wb_workfn+0x10/0x10 [ 881.579242][ T3677] process_scheduled_works+0xb8e/0x1d80 [ 881.579489][ T3677] worker_thread+0xedf/0x1590 [ 881.579702][ T3677] kthread+0xd59/0xf00 [ 881.579835][ T3677] ? __pfx_worker_thread+0x10/0x10 [ 881.580038][ T3677] ? __pfx_kthread+0x10/0x10 [ 881.580180][ T3677] ret_from_fork+0x1e3/0x310 [ 881.580317][ T3677] ? __pfx_kthread+0x10/0x10 [ 881.580468][ T3677] ret_from_fork_asm+0x1a/0x30 [ 881.580669][ T3677] [ 881.900841][ T3677] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 882.517125][T16189] loop6: detected capacity change from 0 to 256 [ 882.605911][T16189] vfat: Unknown parameter 'smackfsfloor' [ 882.970470][ T4063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.978482][ T4063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.208542][ T4063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.217841][ T4063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.326433][ T4009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.334559][ T4009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.730131][T16227] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 883.740027][T16227] block device autoloading is deprecated and will be removed. [ 883.811517][ T3677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.820708][ T3677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.113487][T16233] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 885.637972][T16258] input: syz1 as /devices/virtual/input/input29 [ 885.736606][T16261] block nbd6: Attempted send on invalid socket [ 885.743248][T16261] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 885.866123][T16263] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1253'. [ 893.974589][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 894.024781][T16305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1260'. [ 894.613640][ T9505] IPVS: starting estimator thread 0... [ 894.719886][T16317] IPVS: using max 240 ests per chain, 12000 per kthread [ 895.594120][T16327] erofs (device loop2): cannot find valid erofs superblock [ 900.351520][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.357990][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 903.412345][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 903.424263][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 903.444726][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 903.491495][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 903.524574][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 903.904565][T16380] loop2: detected capacity change from 0 to 512 [ 904.222224][T16380] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 904.233469][T16380] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 904.243671][T16380] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1274: Failed to acquire dquot type 1 [ 904.381693][T16380] EXT4-fs (loop2): 1 truncate cleaned up [ 904.390328][T16380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.403487][T16380] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 904.987268][T16414] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 905.321702][T15326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.689851][ T5813] Bluetooth: hci1: command tx timeout [ 906.450009][ T5893] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 907.753209][ T5813] Bluetooth: hci1: command tx timeout [ 908.329822][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 908.341201][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.351350][ T5893] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 908.370326][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.092447][T16368] chnl_net:caif_netlink_parms(): no params data found [ 909.332006][ T5893] usb 7-1: config 0 descriptor?? [ 909.367462][ T5893] usb 7-1: can't set config #0, error -71 [ 909.443045][ T5893] usb 7-1: USB disconnect, device number 4 [ 909.830768][ T5813] Bluetooth: hci1: command tx timeout [ 911.364985][T16569] loop6: detected capacity change from 0 to 512 [ 911.691126][T10637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 911.726080][T10637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 911.757333][T10637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 911.850866][T16569] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 911.865573][T16569] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 911.876326][T16569] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1282: Failed to acquire dquot type 1 [ 911.926618][T10637] Bluetooth: hci1: command tx timeout [ 911.957168][T10637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 911.973053][T10637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 912.001432][T16569] EXT4-fs (loop6): 1 truncate cleaned up [ 912.009270][T16569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.022727][T16569] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.168556][T16368] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.176406][T16368] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.184719][T16368] bridge_slave_0: entered allmulticast mode [ 912.193301][T16368] bridge_slave_0: entered promiscuous mode [ 912.376507][T16368] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.384367][T16368] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.392813][T16368] bridge_slave_1: entered allmulticast mode [ 912.401310][T16368] bridge_slave_1: entered promiscuous mode [ 912.892434][T14357] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.422764][T16368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.602203][T16368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.903420][T16368] team0: Port device team_slave_0 added [ 914.113928][T16707] loop6: detected capacity change from 0 to 512 [ 914.151211][ T5824] Bluetooth: hci5: command tx timeout [ 914.179215][T16368] team0: Port device team_slave_1 added [ 914.467264][T16707] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 914.478092][T16707] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 914.488323][T16707] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1286: Failed to acquire dquot type 1 [ 914.647929][T16707] EXT4-fs (loop6): 1 truncate cleaned up [ 914.656021][T16707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.669199][T16707] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 915.498428][ T4329] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.570894][T14357] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.718587][T16368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.725957][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.755969][T16368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.034049][ T4329] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.099153][T16368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.107376][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.133670][T16368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.279835][ T5824] Bluetooth: hci5: command tx timeout [ 916.692941][T16814] tipc: Started in network mode [ 916.698097][T16814] tipc: Node identity 7f000001, cluster identity 4711 [ 916.705964][T16814] tipc: New replicast peer: 255.255.255.255 [ 916.713705][T16814] tipc: Enabled bearer , priority 10 [ 918.071391][ T5893] tipc: Node number set to 2130706433 [ 918.245088][T16368] hsr_slave_0: entered promiscuous mode [ 918.253811][T16368] hsr_slave_1: entered promiscuous mode [ 918.261980][T16368] debugfs: 'hsr0' already exists in 'hsr' [ 918.267789][T16368] Cannot create hsr debugfs directory [ 918.335820][ T5824] Bluetooth: hci5: command tx timeout [ 918.482454][ T4329] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.100848][ T4329] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.175034][T16577] chnl_net:caif_netlink_parms(): no params data found [ 919.250141][T16896] loop6: detected capacity change from 0 to 512 [ 919.747534][T16896] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 919.760451][T16896] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 919.771010][T16896] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1294: Failed to acquire dquot type 1 [ 920.105182][T16896] EXT4-fs (loop6): 1 truncate cleaned up [ 920.113485][T16896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.126568][T16896] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.418415][ T5824] Bluetooth: hci5: command tx timeout [ 920.467823][ T4329] bridge_slave_1: left allmulticast mode [ 920.474481][ T4329] bridge_slave_1: left promiscuous mode [ 920.481433][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.660038][ T4329] bridge_slave_0: left allmulticast mode [ 920.665905][ T4329] bridge_slave_0: left promiscuous mode [ 920.673766][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.305235][T14357] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.447085][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.577968][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.611556][T16980] loop2: detected capacity change from 0 to 256 [ 921.626337][ T4329] bond0 (unregistering): Released all slaves [ 921.691652][T16980] vfat: Unknown parameter 'smackfsfloor' [ 922.073654][T16993] loop6: detected capacity change from 0 to 512 [ 924.664957][T16993] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 925.792039][ T4329] hsr_slave_0: left promiscuous mode [ 925.803671][ T4329] hsr_slave_1: left promiscuous mode [ 925.811743][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.819835][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.863059][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.874943][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.116106][ T4329] veth1_macvtap: left promiscuous mode [ 926.124922][ T4329] veth0_macvtap: left promiscuous mode [ 926.130944][ T4329] veth1_vlan: left promiscuous mode [ 926.136456][ T4329] veth0_vlan: left promiscuous mode [ 926.606384][T17072] loop3: detected capacity change from 0 to 512 [ 927.010589][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 927.046389][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 927.053952][T17072] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 927.054539][T17072] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 927.054711][T17072] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1306: Failed to acquire dquot type 1 [ 927.075147][T17072] EXT4-fs (loop3): 1 truncate cleaned up [ 927.288954][T17072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.305915][T17072] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 927.698472][T14291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.875706][T16577] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.884820][T16577] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.893031][T16577] bridge_slave_0: entered allmulticast mode [ 927.902714][T16577] bridge_slave_0: entered promiscuous mode [ 928.099835][T16577] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.107315][T16577] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.115468][T16577] bridge_slave_1: entered allmulticast mode [ 928.137759][T16577] bridge_slave_1: entered promiscuous mode [ 928.393345][ T4329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.417995][T17117] loop2: detected capacity change from 0 to 256 [ 928.523411][T17117] vfat: Unknown parameter 'smackfsfloor' [ 928.618880][T17123] sp0: Synchronizing with TNC [ 928.640480][T17125] loop6: detected capacity change from 0 to 512 [ 928.673101][ T4329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.866103][T17125] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 928.878943][T17125] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 928.890855][T17125] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1311: Failed to acquire dquot type 1 [ 928.925324][ T4329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.011921][T17125] EXT4-fs (loop6): 1 truncate cleaned up [ 929.021272][T17125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.036437][T17125] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.083139][T16577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.118481][T16368] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 929.227770][ T4329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.356804][T16577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.370047][T16368] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 929.466963][T16368] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 929.729622][T16368] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 929.882470][T14357] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.935751][T16577] team0: Port device team_slave_0 added [ 930.153789][T16577] team0: Port device team_slave_1 added [ 930.519033][ T4329] bridge_slave_1: left allmulticast mode [ 930.526073][ T4329] bridge_slave_1: left promiscuous mode [ 930.532718][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.642760][ T4329] bridge_slave_0: left allmulticast mode [ 930.648609][ T4329] bridge_slave_0: left promiscuous mode [ 930.656420][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.083703][T17255] loop2: detected capacity change from 0 to 512 [ 931.226916][T17255] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 931.238118][T17255] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 931.248440][T17255] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1316: Failed to acquire dquot type 1 [ 931.316114][T17255] EXT4-fs (loop2): 1 truncate cleaned up [ 931.325677][T17255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 931.338885][T17255] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.637756][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.701853][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.755507][ T4329] bond0 (unregistering): Released all slaves [ 931.884282][T15326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.035118][T16577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.044192][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.070525][T16577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.225033][T16577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.234672][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.263449][T16577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.492469][T17290] loop3: detected capacity change from 0 to 256 [ 932.516652][T17290] vfat: Unknown parameter 'smackfsfloor' [ 932.715731][ T4329] hsr_slave_0: left promiscuous mode [ 932.760540][ T4329] hsr_slave_1: left promiscuous mode [ 932.768588][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.776311][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.850215][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.857790][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.012278][ T4329] veth1_macvtap: left promiscuous mode [ 933.017994][ T4329] veth0_macvtap: left promiscuous mode [ 933.024947][ T4329] veth1_vlan: left promiscuous mode [ 933.030577][ T4329] veth0_vlan: left promiscuous mode [ 933.894157][T17313] loop3: detected capacity change from 0 to 512 [ 934.004447][T17313] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 934.016274][T17313] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 934.026695][T17313] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1322: Failed to acquire dquot type 1 [ 934.311020][T17313] EXT4-fs (loop3): 1 truncate cleaned up [ 934.318848][T17313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.332628][T17313] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.552950][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 934.652771][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 934.905369][T14291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.263222][T17327] loop6: detected capacity change from 0 to 256 [ 935.424572][T17327] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 935.480500][T16577] hsr_slave_0: entered promiscuous mode [ 935.490789][T16577] hsr_slave_1: entered promiscuous mode [ 935.504351][T16577] debugfs: 'hsr0' already exists in 'hsr' [ 935.514947][T16577] Cannot create hsr debugfs directory [ 935.568126][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 935.754211][T17355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1324'. [ 936.406496][T16368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.691087][T17415] loop6: detected capacity change from 0 to 512 [ 936.795335][T16368] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.978945][T12908] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.986513][T12908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.998556][T17415] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 937.011050][T17415] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 937.021466][T17415] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1326: Failed to acquire dquot type 1 [ 937.114092][T17415] EXT4-fs (loop6): 1 truncate cleaned up [ 937.122004][T17415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.139186][T17415] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 937.191020][T12908] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.198508][T12908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.524730][T17444] loop2: detected capacity change from 0 to 256 [ 937.567734][T17444] vfat: Unknown parameter 'smackfsfloor' [ 937.798926][T17430] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 938.599626][T14357] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.200923][T16577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 939.490481][T16577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 939.806536][T16577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 940.065758][T16577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 941.049055][T17495] loop6: detected capacity change from 0 to 512 [ 941.315418][T17495] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 941.326361][T17495] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 941.340688][T17495] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1332: Failed to acquire dquot type 1 [ 941.474053][T17495] EXT4-fs (loop6): 1 truncate cleaned up [ 941.484092][T17495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.497974][T17495] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.805358][T16368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.931378][T16577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.954286][T17507] loop3: detected capacity change from 0 to 256 [ 942.194508][T17507] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 942.293893][T14357] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.596923][T16577] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.654057][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.661951][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.689878][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.697610][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.302482][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1335'. [ 943.314720][T17519] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1335'. [ 943.409740][T17522] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 944.449129][T17542] loop3: detected capacity change from 0 to 512 [ 944.496320][T17544] loop2: detected capacity change from 0 to 256 [ 944.542827][T17542] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 944.555061][T17542] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 944.565513][T17542] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1338: Failed to acquire dquot type 1 [ 944.582305][T17544] vfat: Unknown parameter 'smackfsfloor' [ 944.684172][T17542] EXT4-fs (loop3): 1 truncate cleaned up [ 944.692660][T17542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.706176][T17542] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 945.301741][T14291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.875309][T17576] loop2: detected capacity change from 0 to 512 [ 945.988139][T16368] veth0_vlan: entered promiscuous mode [ 946.118350][T17576] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 946.121821][T16577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.131131][T17576] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 946.150424][T17576] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1343: Failed to acquire dquot type 1 [ 946.174947][T16368] veth1_vlan: entered promiscuous mode [ 946.265030][T17576] EXT4-fs (loop2): 1 truncate cleaned up [ 946.273104][T17576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.286417][T17576] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.561800][T16368] veth0_macvtap: entered promiscuous mode [ 946.688555][T16368] veth1_macvtap: entered promiscuous mode [ 946.833849][T17589] loop3: detected capacity change from 0 to 256 [ 946.941818][T16368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.960918][T15326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.003484][T17589] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 947.043806][T16368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.164240][ T4329] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.329809][ T4329] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.376090][ T4329] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.467254][ T4329] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.621398][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 947.653743][T17599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1345'. [ 949.614785][T17614] ===================================================== [ 949.626709][T17614] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 949.634246][T17614] _copy_to_user+0xcc/0x120 [ 949.638951][T17614] do_insn_ioctl+0x59c/0x6d0 [ 949.643781][T17614] comedi_unlocked_ioctl+0xa5e/0x1f60 [ 949.649366][T17614] __se_sys_ioctl+0x23c/0x400 [ 949.654362][T17614] __x64_sys_ioctl+0x97/0xe0 [ 949.659103][T17614] x64_sys_call+0x1cbc/0x3e20 [ 949.664067][T17614] do_syscall_64+0xd9/0x210 [ 949.668781][T17614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.675023][T17614] [ 949.677448][T17614] Uninit was created at: [ 949.681967][T17614] ___kmalloc_large_node+0x310/0x3b0 [ 949.687550][T17614] __kmalloc_large_node_noprof+0x3f/0x1f0 [ 949.693539][T17614] __kmalloc_noprof+0xbad/0x1310 [ 949.698722][T17614] do_insn_ioctl+0x108/0x6d0 [ 949.703701][T17614] comedi_unlocked_ioctl+0xa5e/0x1f60 [ 949.709265][T17614] __se_sys_ioctl+0x23c/0x400 [ 949.714265][T17614] __x64_sys_ioctl+0x97/0xe0 [ 949.719201][T17614] x64_sys_call+0x1cbc/0x3e20 [ 949.724353][T17614] do_syscall_64+0xd9/0x210 [ 949.734511][T17614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.740723][T17614] [ 949.743191][T17614] Bytes 4-150523 of 150524 are uninitialized [ 949.749523][T17614] Memory access of size 150524 starts at ffff888073740000 [ 949.756834][T17614] [ 949.759248][T17614] CPU: 1 UID: 0 PID: 17614 Comm: syz.6.1347 Not tainted syzkaller #0 PREEMPT(none) [ 949.768826][T17614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 949.779038][T17614] ===================================================== [ 949.786081][T17614] Disabling lock debugging due to kernel taint [ 949.792335][T17614] Kernel panic - not syncing: kmsan.panic set ... [ 949.798805][T17614] CPU: 1 UID: 0 PID: 17614 Comm: syz.6.1347 Tainted: G B syzkaller #0 PREEMPT(none) [ 949.809836][T17614] Tainted: [B]=BAD_PAGE [ 949.814013][T17614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 949.824111][T17614] Call Trace: [ 949.827434][T17614] [ 949.830435][T17614] __dump_stack+0x26/0x30 [ 949.834919][T17614] dump_stack_lvl+0x53/0x270 [ 949.839606][T17614] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 949.845567][T17614] dump_stack+0x1e/0x25 [ 949.849816][T17614] vpanic+0x361/0xc50 [ 949.853891][T17614] panic+0x15d/0x160 [ 949.857891][T17614] kmsan_report+0x31c/0x320 [ 949.862474][T17614] ? kmsan_internal_check_memory+0x1e1/0x230 [ 949.868526][T17614] ? kmsan_copy_to_user+0xf1/0x190 [ 949.873711][T17614] ? _copy_to_user+0xcc/0x120 [ 949.878456][T17614] ? do_insn_ioctl+0x59c/0x6d0 [ 949.883289][T17614] ? comedi_unlocked_ioctl+0xa5e/0x1f60 [ 949.888900][T17614] ? __se_sys_ioctl+0x23c/0x400 [ 949.893826][T17614] ? __x64_sys_ioctl+0x97/0xe0 [ 949.898658][T17614] ? x64_sys_call+0x1cbc/0x3e20 [ 949.903597][T17614] ? do_syscall_64+0xd9/0x210 [ 949.908358][T17614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.914500][T17614] ? kmsan_get_metadata+0xfb/0x160 [ 949.919714][T17614] ? kmsan_get_metadata+0xfb/0x160 [ 949.924925][T17614] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 949.931343][T17614] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 949.937603][T17614] ? irqentry_enter+0x30/0x60 [ 949.942364][T17614] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 949.948271][T17614] ? __pfx_subdev_8255_io+0x10/0x10 [ 949.953571][T17614] ? virt_to_page_or_null+0x102/0x180 [ 949.959028][T17614] kmsan_internal_check_memory+0x1e1/0x230 [ 949.964922][T17614] kmsan_copy_to_user+0xf1/0x190 [ 949.969938][T17614] _copy_to_user+0xcc/0x120 [ 949.974512][T17614] do_insn_ioctl+0x59c/0x6d0 [ 949.979269][T17614] comedi_unlocked_ioctl+0xa5e/0x1f60 [ 949.984745][T17614] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 949.990626][T17614] __se_sys_ioctl+0x23c/0x400 [ 949.995387][T17614] __x64_sys_ioctl+0x97/0xe0 [ 950.000054][T17614] x64_sys_call+0x1cbc/0x3e20 [ 950.004825][T17614] do_syscall_64+0xd9/0x210 [ 950.009430][T17614] ? irqentry_exit+0x16/0x60 [ 950.014143][T17614] ? clear_bhb_loop+0x40/0x90 [ 950.018893][T17614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.024867][T17614] RIP: 0033:0x7fd1edb8ebe9 [ 950.029331][T17614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.049046][T17614] RSP: 002b:00007fd1ee958038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 950.057535][T17614] RAX: ffffffffffffffda RBX: 00007fd1eddb5fa0 RCX: 00007fd1edb8ebe9 [ 950.065567][T17614] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000008 [ 950.073588][T17614] RBP: 00007fd1edc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 950.081612][T17614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.089624][T17614] R13: 00007fd1eddb6038 R14: 00007fd1eddb5fa0 R15: 00007ffc5f581db8 [ 950.097670][T17614] [ 950.101020][T17614] Kernel Offset: disabled [ 950.105384][T17614] Rebooting in 86400 seconds..