last executing test programs: 8m43.054177855s ago: executing program 0 (id=46): close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = getpid() ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000900)={0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 8m42.067066984s ago: executing program 0 (id=52): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@initdev, @remote}, &(0x7f00000003c0)=0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40806685, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) mount_setattr(r1, &(0x7f0000000140)='./file0\x00', 0x800, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8m41.063917505s ago: executing program 0 (id=57): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0x92, 0x4}}}}}]}}]}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 8m36.486311355s ago: executing program 0 (id=71): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000500)={0x5, 0x0, [{0xd, 0x6, 0x7, 0x2b, 0x401, 0x8, 0x7}, {0x40000001, 0xfdda, 0x1, 0x3a7, 0x8000, 0x10000, 0x8}, {0xd, 0x2, 0x3, 0x64, 0x8, 0x738, 0x2}, {0xc0000000, 0x100, 0x1, 0x9, 0xe7f, 0x3, 0x8}, {0x80000001, 0x9, 0x2, 0x4e, 0x8, 0x4, 0x3}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m36.027014552s ago: executing program 0 (id=74): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0xe, 0x7f, 0x0, 0x0, [0x0], [0x0, 0x29, 0x2], [], [0x0, 0x0, 0xfffffffffffffffd]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}}, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x10001, 0x2, @thr={0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) 8m32.975931688s ago: executing program 0 (id=77): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 8m17.082425371s ago: executing program 32 (id=77): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 4m24.172685739s ago: executing program 2 (id=610): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x10}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x1, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 4m18.667809905s ago: executing program 2 (id=617): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x437, 0x709d29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) fallocate(r10, 0x0, 0xfff, 0xff9) 4m17.071120433s ago: executing program 2 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000080)={0x8, 0x0, 0x2019, 0x6, 0x101, 0x10000000, 0x5}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x99) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02"], 0xe9) 4m16.155477218s ago: executing program 2 (id=624): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r0, 0x403, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x230080) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r8, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(0xffffffffffffffff, r6, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 4m14.785780578s ago: executing program 2 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000340), &(0x7f00000000c0), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000380)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x8, 0x6, 0x1000, 0x8, {0x1, 0x2, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x2, 0x7fff, 0x7, 0x4000, 0xd, r3, 0x0, 0x1, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m12.91564681s ago: executing program 2 (id=629): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000003600)={'wg1\x00'}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000009ac0)={@broadcast, @local}, &(0x7f0000009b00)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c23004923f7779ccd9606613089b740e01af8b422a04ea9e9c2e65e081c183f2283700c3bad0f9af818f4c6c2151fa1829480e9212644c17193f4e978c3c43133a3b29546754a2845fd8cc1b", 0x75, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3m57.82844119s ago: executing program 33 (id=629): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000003600)={'wg1\x00'}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000009ac0)={@broadcast, @local}, &(0x7f0000009b00)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c23004923f7779ccd9606613089b740e01af8b422a04ea9e9c2e65e081c183f2283700c3bad0f9af818f4c6c2151fa1829480e9212644c17193f4e978c3c43133a3b29546754a2845fd8cc1b", 0x75, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m43.320797104s ago: executing program 6 (id=912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5c74e69a328968efb1dae200ba19a573617f202ea28f3370fa60bc89a40f4576aa04899088ff77054ad642fdbbaea759cdeba7"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r6, 0x0, 0x0, 0x6bf68237da62a01, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, r5, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 2m42.405752488s ago: executing program 6 (id=916): r0 = syz_open_dev$usbmon(0x0, 0xfc, 0x20000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x80879) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, 0x0, 0x24000008) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r1, &(0x7f0000000280)={r1, r2, 0xffff}) 2m40.684759468s ago: executing program 6 (id=922): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r5}) sendmsg$kcm(r4, 0x0, 0x0) close(r4) timer_settime(0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20044080) mq_open(&(0x7f0000000200)='\xd9\x93\x10\xe3\x8e\x80Dg@]\xa6\xa2\x9ae\xf1\xce\x18h\x00\x95v\x17jk\xf4\x9f{\fw\x10J&qo\xf4\x9c0\x12*xO\x8b\xe3\xb6\xaa\xc5\x99\xbfK\xd3\x8d\x99K\xfa\xbdZX\x8b\x98e\xf1\x9f\xd6v^\x88\x1c', 0x840, 0x100, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2m40.052159379s ago: executing program 6 (id=924): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x437, 0x709d29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) fallocate(r10, 0x0, 0xfff, 0xff9) 2m38.963357437s ago: executing program 6 (id=925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000900)={0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m37.855512756s ago: executing program 6 (id=930): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0xb}, 0x4, 0x6e6baf, 0xc819129d1ef8b85c}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d5, 0x3c}, 0x0, @in6=@mcast2, 0x3502}}, 0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x15, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000000000000000fe0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sync() sync() fcntl$setpipe(r8, 0x407, 0x100004) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) 2m22.817057892s ago: executing program 34 (id=930): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0xb}, 0x4, 0x6e6baf, 0xc819129d1ef8b85c}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d5, 0x3c}, 0x0, @in6=@mcast2, 0x3502}}, 0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x15, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000000000000000fe0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sync() sync() fcntl$setpipe(r8, 0x407, 0x100004) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) 19.726802145s ago: executing program 3 (id=1309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES8=r3, @ANYRESHEX=r0], 0x0, 0x3}, 0x94) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 18.150344713s ago: executing program 3 (id=1317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 8.831734716s ago: executing program 4 (id=1339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c23004923f7779ccd9606613089b740e01af", 0x3b, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 8.772843591s ago: executing program 7 (id=1340): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(r1, 0x1) 8.748724453s ago: executing program 5 (id=1341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r4, 0x0, 0x0) close(r4) timer_settime(0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20044080) mq_open(&(0x7f0000000200)='\xd9\x93\x10\xe3\x8e\x80Dg@]\xa6\xa2\x9ae\xf1\xce\x18h\x00\x95v\x17jk\xf4\x9f{\fw\x10J&qo\xf4\x9c0\x12*xO\x8b\xe3\xb6\xaa\xc5\x99\xbfK\xd3\x8d\x99K\xfa\xbdZX\x8b\x98e\xf1\x9f\xd6v^\x88\x1c', 0x840, 0x100, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 8.687320608s ago: executing program 4 (id=1342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES8=r3, @ANYRESHEX=r0], 0x0, 0x3}, 0x94) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 7.768009742s ago: executing program 1 (id=1343): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b1b378bcbf5"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.80721264s ago: executing program 7 (id=1344): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x52, &(0x7f0000001380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1c, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x4, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1, 0x0, 0x1, 0x2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x10}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x1, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 6.672990521s ago: executing program 5 (id=1345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) fanotify_init(0x200, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x20000040) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) 6.623361185s ago: executing program 3 (id=1346): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056", 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000340)=0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x80eb, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x1b314843cb6afbc4, @in=@empty, 0x0, 0x5, 0x3, 0xb7}}, 0x117) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000380)=ANY=[], 0x68) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r6, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x9c, 0x0, &(0x7f0000000400)="c26c0a3e348158d1a4c09ad20229ab9d12dae68889154a7a12bdc491f0cc456d0a66392a370c119e8286124543ffa7b2f166069bd2bf4803ee014a88628ee7eeca833019297531474ef3f7992775ddffe5dae059bf2740af1e22e0a4e0cab3aa3495bbd2833bd356cc24991e7e36d8cbedfb78967e2cf3ac4e6311687333a18141451b2cffaab7b1a5e6d23121b98a7d63c1561dd92158ecd4bd1bd9"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x4009, 0x0, 0x2, 0x7fff0000}]}) 6.576774058s ago: executing program 1 (id=1347): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0000200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x52, &(0x7f0000001380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1c, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x4, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1, 0x0, 0x1, 0x2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x10}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x1, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 4.052023393s ago: executing program 5 (id=1348): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000300)=0xf, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x197, &(0x7f0000000100)={0x0, 0xd462, 0x0, 0xfffffffc, 0x3aa}, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) close(0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000"], 0x7c}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) 3.404082815s ago: executing program 1 (id=1349): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000700)={{r0}, "6d2b74f0ddeecda5edce0d79470028f41eb2e0ed28d9472ad3af8616c6ac309d96481d7e91649d071d7177365037f1a086a68984b09e40bf6c2432342deee39cb927641d9cc4425518dad8dcee9716e5c106b16cf7685ecaeea35a5fcb455ab7c27b7c24a4388e6658123a20ffe489122987286d7adf2ef9bf8bae041d8408bce5805871d63b9b668bb77bfcd4d1e0a900a54c0bc43651b18a6a6918944ef227fa1d40e2d4269fa8b1ce6e592422aa854ad2cc17aac79905c21ee2e28f4dc82eb4478f6a50d4a0a7fe76c8646c3f04effe896a13fc6df9f6bf89f1d41a62201a688b4c20d5a41f96301ee41c1ce9c956a2721650b622a7884b6fcc910f005f4cc786ed20708cf4a5aafa9407906369a2fff770a743ed1132987303a47a01d6ac15dda16d1ebad25b07a11b0896ef4448a926c0117ff938c7f9848e16bff8bcbfacb0188c54b1098e6c4ce5f974f5f52f2af164265dffa24d39b3a00e665dd4e32036bdf9a457d56b2e25efefe007502b07e2f0e76dcb1ff6f78a096988688be30fc2bd4c9dfaccbf1aa809f3aed785568f80de56ff000ee2c9f9617b424c0a560f90e8374999323e4ca268fae4cf6f8b96af59efb868541dfaeda1795d41bd251ddae07956bd2770b0af55339f297c59d9941015336e26f99149e1b3478b4f67eeba9eee2c7a32e1023765ce6fd4337f7f497063fa47fa894b68ed4bb7762cb3a9f9c5b72c3b5f95c312a5cff82b10676b818a54d14aa99b5f180ee34f4805092e7ea85b2d81078e31fd5fd5ecc8070189d1d0ac21dd22ebbf9dc7c1268b91ddb2f78932ec0b441d3b8ab7e37ebb9679600b0e5c1a095c7e54690eaba77afc635b9fe142142ba5901b462de70f8e51f2960024e6d2eb82a91ab53cb69b11a5e6742460814c0ad23d686ec059a17908118998466eeadeba39e34cdc37e192743f7ef39e7b1a415526bca2d64f125831cc5cc1fcdfa0a76320e1a601333f3f86320713d4fd2746cead2f350ea05ee654e6ad46485b5985b6e7fc5eb373b7a7e561da3105e650ced4b2b00c46b68527344f0c3bc663257d2bbd4b6c50fa1c61fb2e9cc02b448a99efab57b9c1116e62fb76857611707fc64122b3a6f4351cc15ac5affaebdb2972f1a712277d7a23533803939991a5c82678c61723d17a380de36f8cd5f1a55041745309a4bae4abf0e1334fc8473f5494938f8d071cc6e3de075dff4d2c7fe80eae0779e8719e0e111dfb5bcb462530265d3e041feba7e9e53a66d0376e43a1a446894b36bdd2a6e0594e0d3435df7b84d2ccc2f68580525d38b5c2a1259a1ff46c2785c846512dd7c19f30e219fb7bbd8e8fd95cb13cade63c51031abaa03776129246d196e23b906a8e14f7fa41c8473dc537399f9609e9ca64a86b92e5562544d08f0551624b3dfe75e2b88705e75eb19eab11878802907d44dff5730ffc57bb785fb36634ca8ced92def6afe3addeb7ea99f9331f532b88185166f0682ea737f1d109d9945e981b3359c0101e494f6b83f1f3dbc40572ba26be3188bd20fa087afe7df1404e6b8c63b9fd39ecec4acbbfbcf7ef725ad7a38b2d157f737bb42957a232d714f1f34673de89a2fdca91aa0e1f87ccc0e6141b4c79032674a737b58f3b64f4d86ff1e7c437a0e39020c48f062712f8e35d37bd0c45966722eabfa20d5679d9043ce9d698c1d1fe3fa47c72c0909473edcc293a1d3e12252e27214daad50644c1cafed8d25227008d8bb91f2d47828732f3e077deb37479474b9b84a534f893401012fb53fcefd97dc3105e281c6c3d33f4bf7c7c688034a2463d856d41816199e1345cd905dbd514b760779d1f61e7a67350bef4a5b2f3d72a7b8ce71fa79a9106a711355e99c249eee48e3350857c913b44faf6655fa760ed1e011c8f37aa61eb3ac1c7618594ad3b4cb853e64e780ea24a9a2923e442c386dcf623797d085dd5554e28013e86ff3abdd6ddfd9767f3d64bb8f56eca65cb70bc39bc369c01ef141e17aee50ba9ee9b1ffecdb20dde2ce55260739a294634d1941799aae2f6a3d33f6b0dd48dd6bbb77e4f2f15723fbce24346d5e6ed50e64e5383eca9013282ffe92495e885385555845f51c9c1ae2ea70565a809c06ba232d2436a6404542e124d2f8413e954f4cc1d67479bba78e69e48c8bdf52289f9713037e4f062bd6a0ab65fad5f827caf5fd5cc5fcaf3bd0e801d865ff4c07c0d8acaf2be6fb5442336dedfd2eba0f3bc1e6741c321bf3ea37bd00bbaa0f07f186f32b51d39a2e7c7ce3ab9dcafec648ebf9ebdad2d16c0adf1697ea1bcd4959105f7c418074d83429a90dc781fd3c8efa23ec78f1cac9d5b885d6da08ff1a7b4a671afa8e6d72bc68cf27f12b67ee9ae1adb3f2ab011610761ce45d6e06ec9c9e9a499fc4ba44d2d9872b51970d316327e9c54d3919a54507b76cb98235400516fe1d6f162ec8731b029b7255f88eb1b78f861a37375c218961a369e990efadf8c0a139bb5be991e1f8ec99d49ed518b66c2d86a7d5ce8b265cf59741a7a0b3fb46e2bbec075beb5cf74e1898ff3612e75e4f1c8786450899445d39dbf84b1a3d1ad7fa2660eb4880d58efd887f54d07c7aaf83a40f7e73703adbc924764e73f57a30d76bcb4004eb6762408a97a6e4229cd5bd18976d5db874ab7225de38fabcc440cfe2e8fafa1e14e43837c92e94cf17d94e379eff3f6935884812a13abf26b2e25e737b63ea3039a92cc3a513b959934a4ff2d6368670a86e8e4715ddfd6cd1cf7ce625a724d412396a75b741c0415a1f7804bc3b2f078329cd9feb2979d0f75bfcd5199f72aa6c99fccd7a9533b0f46bed388c9e05e7d691e25efc4535bd7b1b597407564d637aec81ba942fd96ff8bd7c6a894ea7f707f0164c78f2122207e5b824d73ffbcf2d0dc2e01f036c2bd039d41310031a1f8164ac777e0dab081f9d09ac9aae74f73b8dabb23f8d9062830fe4863143c5b8e7201f899f3977fd90a145c3f9525f9853231d07b9b59b45dbfeaa930359a9e977e34192a3373df7260b24b3446e0e091e6f816a5da93ee8098a3d6f1ec9e2fbe67ae3743f89f7317e43b0398be1229d4722b70221ecfca5aacf247a6755aba730f5533bdb96aaac84e51dda1142a36a1c46297d1d6ec9f758ac925e4220864b6c0c4527cf00621fcd9baffcdce064d8054aabcadc6a23adbd704dc7aeef58087146a2fbe7e5ef9acbeefa5aab38f6c50fd7bd4a4d8736d3716dc65a9a17dc6a57c85a88a730be63a9888226af6c283f126997237ddc2a0bf7452ed1ca2c47a32bd6900820242a6a393f4002eb931e2cab03baa4f62fb53a9e29d44108bc37e6aa95774ca1dd766113cccb406fc325ce9580f4ae6ea7efd41b17591b827478bc9dfa74c4b87da0d22897eab1eefea6a137808c30d8c62e9c363292ab085d074266484b89b567d649bff3b09e5a575ab88ad40352c9100661d0f1e7cfb80f516d7910472d50a5e276d6823affba7c310309718ffad2bfc93782320da5477f0b18158e6bf7a6081b8e38289f7b594c3e9b2f94341e5653df79f91bc34efc0c499a505d6d5cf58b80d6901be3c93b992f91b1ae0a481fa14f82d51bd1c08131a9af239e2ed3283af40892fe53ec01ceebfe93b23e11da67821883118d3e61de63ab68e009825cf7ad1157f42a38614cc6a44d28a40a9d63e51ec62677dc90e18af4be8d52b6ea2bed2055e7addb97462fa2d32c501b6c7b3d6f2e8027449f17ca3dcebbcd6d9070d9f7c9d34c205b7e33a5ca60da93c81499710c0cbb0ab5090e3805d407fa3e83de3e294fef2d597d5432d001fa7b0755da6959a489e1e2201031e8aa6d928c410da70326b5d11207a7b490962800d2ebebbe6581154e496455a8f64b14333200b6ef42a6f542134588198796f8b990e4f015187587ae453c482516030873a84d854dbda9555f202ea990cd076f8f49f2213ba5c4865b1ed730509714d9d5deba5dc467f2f5f31334abc5e54d0b3c31e2225cb5354ca61c880a57fad8ea0d224c874fb4231e5a1ec6a678f614aad5ec70956a91a5bbc927c95537eae0149bf08d0ea0fdb071231597a69acc7bd7904e210f5e9e1c4237f373b0777b2db4f74c2aeed6f7a0b6d6b0b756eca755ef4b49ca7cc14ce8a5165ca3216f7c5a690ac7e27ed2b05c0f96add335a93bc078fe29e3be6c67fd80e7e99163fed8574e9c587dc6ee2614f4f9b507eeb5c2dd48dc4a7c2528ce6c4248559ab435af055ad07e73ce04565043043ce0058d39728bfd09509cfd21d551fdaf1a97ee61c310ae11772ea008c913e2059ff4d3091965d193aeaf664fa5790d5e718c22b11424b0252c6907bdd0b440c75fea39d2170fbc85a7f1d00675a83d721e5cc1445144b1444d706a7544b0a5f25b2329ec3ef73050f1b6705b77621a66685106d6636190617d573586756ee752476b06e5f538343d300fe3ccdf810254cf46da28eb4f0fdb4229a24ce20853f6ef624429b93f9f5ece3361f884df28a51462bfcca0d83c32f6ebd4b56721166313476e981065066ead0145093828a07828c7e4369e87632a1714045405d9283e0944371b3862bb1785ece57e4d6984017f45ad61804ae94d1473ef0c0a9cadb699307ea679a922f517f4ca11015af81d3b181b61317cca70d78ec63d0102bb7af35d77f05c3e27f3ebd0785492bb061225d1dd7d76abf212a145b29cf5768b04f6262cb8d91507ac10eade98d32efda51d08d084f65a41bd4c874486fbc7bb82fa37d4584d0ae596346288e00cf2f5d24a70392cf4a29f7de64f7429b0d682390ff92e0e35e2bb9282a8fcfa1cc08dce82a7f21bbfcb06ee8b0477d6b2c2943700852c27342780f1fdaeeed7999824ec01375d2d03b661dbe61df79516defdef5b9d58c46786c4bcd8517d7a712048efb85b325ebcbc55937d4dff058a5b3e482eb394601e3ec5842975b220964ddc9bee80bf64d02faed5f66cd48625241a4b586bed0350cb84a3b9d5b0d7a120e940e7f8bcc90f84611563fab5261097f8db42d453ebea3f96ae3f33f6c3cdf8fc4cdee235cf4ef88695cada068d498c601df0db94aac642e67e37ca042edf3dcc15c93bd53213a9837b6a15312edbd75bedbaaa325310e353925a39b919d8f966d62ae8999778eb2c5cc4e46b4203ff0895c71d894282c6463e2d4c8f1992be3503c522ba3232e617d7fb9a66ddae5d97ddb8cc8a192b7c50bee06b0aed7ee034b293c1d97d6bf57bce62581423883f8a700f2b238c144417539256797f07214556405263bc3607e832140de7e2e96882904acf313786e0e995a3511ace868cbffd8ef8dc8faf1e0a07bddbb29428fa44bbfe32aa78a46f8e7d19585559654dc93eae18288deb9d0e8b9f8e9b17f8c793fc885690dd3e15f30e16b8f3ed4ec11021a3371ae2634d69bdc23387fcace6270581160d6e21fa001c82a04853f6dd9def53ae4d24f5bf800ae226d61ebb7cf4555637e25edb369e9b7034263289d3f496f5d60b73cfdb642b212066ca2c84645a3392d8f5d590ef183d3d38fdfd0a012e77949afffe84e8e783efd984901dc33b39e1eb83473a9228b2ca2339fcac02a4d6895170636d299d3624e206b53a633eea682a1688518ba020eb3821268e11c4f03848183eb3b1fda306702a45895a455f6e6099aee19a6adb00f7f4b3673715384ceaf1029dcf74aa1b27cd912ac3b082bb1010a7200007a6aca35c3c5dd645f35b6fbe3f064b648b00fd6c38533d14cc06dc8004a059d6ed0d091c4841a"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 3.397924826s ago: executing program 7 (id=1350): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x1000002, 0x0, 0x3e, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=alwa']) chdir(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b0000080039"], 0x15) r4 = dup(0xffffffffffffffff) getresuid(&(0x7f0000000340), &(0x7f00000000c0), 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000380)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x8, 0x6, 0x1000, 0x8, {0x1, 0x2, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x2, 0x7fff, 0x7, 0x4000, 0xd, 0x0, 0x0, 0x1, 0x10000}}, {0x0, 0x1}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) lchown(&(0x7f0000005580)='./file0\x00', r5, r6) chown(&(0x7f0000000200)='./file0\x00', 0x0, r6) write$tcp_mem(r3, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) flock(r2, 0x2) 3.249344208s ago: executing program 4 (id=1351): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f00000003c0)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40806685, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) mount_setattr(r1, &(0x7f0000000140)='./file0\x00', 0x800, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.60901388s ago: executing program 1 (id=1352): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b1b378bcbf5a2"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.498929269s ago: executing program 7 (id=1353): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000340), &(0x7f00000000c0), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000380)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x8, 0x6, 0x1000, 0x8, {0x1, 0x2, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x2, 0x7fff, 0x7, 0x4000, 0xd, r3, 0x0, 0x1, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.461747801s ago: executing program 3 (id=1354): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(0x0, 0x0) semget$private(0x0, 0x0, 0x587) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(r1, 0x0, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0xee00, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x18000}], 0x1, 0x10142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 2.296910004s ago: executing program 5 (id=1355): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x52, &(0x7f0000001380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1c, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x4, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1, 0x0, 0x1, 0x2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x10}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x1, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 1.972995771s ago: executing program 4 (id=1356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 1.938094244s ago: executing program 7 (id=1357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 1.560656984s ago: executing program 1 (id=1358): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x709d29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) fallocate(r10, 0x0, 0xfff, 0xff9) 1.401965287s ago: executing program 5 (id=1359): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(0x0, 0x0) semget$private(0x0, 0x0, 0x587) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000400)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(r1, 0x0, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0xee00, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x18000}], 0x1, 0x10142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 1.339398162s ago: executing program 4 (id=1360): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(r1, 0x1) 406.968718ms ago: executing program 1 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES8=r3, @ANYRESHEX=r0], 0x0, 0x3}, 0x94) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 315.435505ms ago: executing program 3 (id=1362): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b1b378bcbf5"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 71.067215ms ago: executing program 5 (id=1363): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r3, 0x0, 0x0) 70.869445ms ago: executing program 3 (id=1364): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056", 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000340)=0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x80eb, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x1b314843cb6afbc4, @in=@empty, 0x0, 0x5, 0x3, 0xb7}}, 0x117) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000380)=ANY=[], 0x68) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r6, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x9c, 0x0, &(0x7f0000000400)="c26c0a3e348158d1a4c09ad20229ab9d12dae68889154a7a12bdc491f0cc456d0a66392a370c119e8286124543ffa7b2f166069bd2bf4803ee014a88628ee7eeca833019297531474ef3f7992775ddffe5dae059bf2740af1e22e0a4e0cab3aa3495bbd2833bd356cc24991e7e36d8cbedfb78967e2cf3ac4e6311687333a18141451b2cffaab7b1a5e6d23121b98a7d63c1561dd92158ecd4bd1bd9"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x4009, 0x0, 0x2, 0x7fff0000}]}) 49.109367ms ago: executing program 4 (id=1365): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000300)=0xf, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x197, &(0x7f0000000100)={0x0, 0xd462, 0x0, 0xfffffffc, 0x3aa}, 0x0, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) close(0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000"], 0x7c}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) 0s ago: executing program 7 (id=1366): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): k becomes ready [ 119.128121][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.163415][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.170517][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.275652][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.459955][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.493237][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.530286][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.537369][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.676688][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.746112][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.944572][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.959668][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.968446][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.011370][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.023426][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.506361][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.541415][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.684528][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.748359][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.781714][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.840667][ T4338] device hsr_slave_0 left promiscuous mode [ 122.849071][ T4338] device hsr_slave_1 left promiscuous mode [ 122.876331][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.906847][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.927852][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.950776][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.966809][ T4338] device bridge_slave_1 left promiscuous mode [ 122.979432][ T5128] loop2: detected capacity change from 0 to 4096 [ 122.992846][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.066034][ T4338] device bridge_slave_0 left promiscuous mode [ 123.111457][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.126982][ T5128] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.280294][ T4338] device veth1_macvtap left promiscuous mode [ 123.296288][ T4338] device veth0_macvtap left promiscuous mode [ 123.343136][ T4338] device veth1_vlan left promiscuous mode [ 123.374002][ T4338] device veth0_vlan left promiscuous mode [ 126.601068][ T5218] loop4: detected capacity change from 0 to 512 [ 128.115509][ T5215] sched: RT throttling activated [ 129.151968][ T5218] ======================================================= [ 129.151968][ T5218] WARNING: The mand mount option has been deprecated and [ 129.151968][ T5218] and is ignored by this kernel. Remove the mand [ 129.151968][ T5218] option from the mount to silence this warning. [ 129.151968][ T5218] ======================================================= [ 129.921883][ T5218] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 129.935475][ T5218] EXT4-fs: failed to create workqueue [ 129.940899][ T5218] EXT4-fs (loop4): mount failed [ 130.856815][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 130.924448][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 131.022676][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.098008][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.361719][ T4338] bond0 (unregistering): Released all slaves [ 131.895547][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.037585][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.108417][ T4861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.624012][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.642575][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.120684][ T5318] loop4: detected capacity change from 0 to 512 [ 137.380886][ T5318] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 137.393443][ T5318] EXT4-fs: failed to create workqueue [ 137.398842][ T5318] EXT4-fs (loop4): mount failed [ 137.970801][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.012696][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.230524][ T4861] device veth0_vlan entered promiscuous mode [ 138.747445][ T4861] device veth1_vlan entered promiscuous mode [ 138.904364][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.931553][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.963014][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.048050][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.151508][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.245101][ T4861] device veth0_macvtap entered promiscuous mode [ 139.265505][ T4861] device veth1_macvtap entered promiscuous mode [ 139.339308][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.033716][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.042694][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.050905][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.194845][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.578602][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.175175][ T5420] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 141.258084][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.288350][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.343875][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.386657][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.420657][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.431949][ T5424] loop3: detected capacity change from 0 to 4096 [ 141.460721][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.482550][ T4861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.545582][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.559018][ T5424] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.560019][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.719218][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.791542][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.836964][ T5429] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 141.874066][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.884628][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.894896][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.905532][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.915384][ T4861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.926104][ T4861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.935008][ T5429] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 142.401841][ T4861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.668111][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.706816][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.747833][ T4861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.769265][ T4861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.800263][ T4861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.830804][ T4861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.212700][ T4436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.263537][ T4436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.333848][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.354536][ T4459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.407387][ T4459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.482139][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.229624][ T5473] loop5: detected capacity change from 0 to 512 [ 146.290970][ T5473] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.302457][ T5473] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.182404][ T5479] loop4: detected capacity change from 0 to 4096 [ 147.393330][ T5479] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.448577][ T5511] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 148.460735][ T5511] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 152.863051][ T5554] loop1: detected capacity change from 0 to 4096 [ 152.878601][ T5554] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.315869][ T5609] loop2: detected capacity change from 0 to 4096 [ 155.539817][ T5609] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.713702][ T5623] netlink: 'syz.3.235': attribute type 2 has an invalid length. [ 155.721643][ T5623] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.235'. [ 158.000868][ T4292] Bluetooth: hci5: command 0x0405 tx timeout [ 158.211762][ T5646] loop5: detected capacity change from 0 to 4096 [ 158.531907][ T5646] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.220254][ T5685] loop2: detected capacity change from 0 to 4096 [ 161.004630][ T5685] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.981102][ T5745] loop5: detected capacity change from 0 to 4096 [ 166.141032][ T5745] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.496353][ T5798] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 168.928191][ T5808] loop3: detected capacity change from 0 to 512 [ 169.006483][ T5808] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 169.034034][ T5808] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.193991][ T5808] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.269: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 169.326267][ T5815] loop4: detected capacity change from 0 to 512 [ 169.338217][ T5808] EXT4-fs (loop3): Remounting filesystem read-only [ 169.489082][ T5815] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 169.581918][ T5815] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.179800][ T5815] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.270: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 170.507986][ T5815] EXT4-fs (loop4): Remounting filesystem read-only [ 172.315595][ T5835] loop1: detected capacity change from 0 to 2048 [ 174.125264][ T5835] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff" or missing value [ 175.699577][ T4256] Bluetooth: hci0: command 0x0406 tx timeout [ 176.006045][ T4245] Bluetooth: hci2: command 0x0406 tx timeout [ 176.046560][ T4245] Bluetooth: hci4: command 0x0406 tx timeout [ 177.123376][ T4256] Bluetooth: hci1: command 0x0406 tx timeout [ 178.014629][ T5878] overlayfs: missing 'lowerdir' [ 180.058418][ T5885] loop4: detected capacity change from 0 to 8192 [ 180.211447][ T5893] overlayfs: unrecognized mount option "/" or missing value [ 180.533401][ T5898] loop1: detected capacity change from 0 to 512 [ 183.142652][ T5898] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 183.155180][ T5898] EXT4-fs: failed to create workqueue [ 183.161071][ T5898] EXT4-fs (loop1): mount failed [ 184.802075][ T5926] tipc: Enabled bearer , priority 0 [ 185.050623][ T5922] tipc: Resetting bearer [ 185.192834][ T5922] tipc: Disabling bearer [ 186.384808][ T5945] tipc: Started in network mode [ 186.420920][ T5945] tipc: Node identity 5a140d9c978b, cluster identity 4711 [ 186.440291][ T5945] tipc: Enabled bearer , priority 0 [ 186.563570][ T5944] tipc: Resetting bearer [ 186.690431][ T5944] tipc: Disabling bearer [ 187.902032][ T5976] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 193.632042][ T6057] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 193.690689][ T6057] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 193.851855][ T6069] loop4: detected capacity change from 0 to 512 [ 195.115136][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.121586][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.736502][ T6069] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 195.812809][ T6069] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.842666][ T6069] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.313: bg 0: block 248: padding at end of block bitmap is not set [ 195.863597][ T6069] Quota error (device loop4): write_blk: dquota write failed [ 195.871609][ T6069] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 195.881739][ T6069] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.313: Failed to acquire dquot type 1 [ 195.908648][ T6069] EXT4-fs (loop4): 1 truncate cleaned up [ 195.972905][ T6069] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 196.122167][ T6069] netlink: 'syz.4.313': attribute type 15 has an invalid length. [ 196.129912][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.313'. [ 196.768617][ T6073] loop1: detected capacity change from 0 to 4096 [ 196.789681][ T6077] loop2: detected capacity change from 0 to 512 [ 196.947914][ T6073] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.155492][ T6077] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 197.287931][ T6077] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.968449][ T6077] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.315: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 199.004529][ T6077] EXT4-fs (loop2): Remounting filesystem read-only [ 200.627948][ T6121] loop2: detected capacity change from 0 to 512 [ 202.199834][ T6121] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 203.345627][ T6121] EXT4-fs: error -4 creating inode table initialization thread [ 203.354315][ T6121] EXT4-fs (loop2): mount failed [ 204.040212][ T6135] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 204.074518][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.5.326'. [ 204.083497][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.5.326'. [ 204.971738][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 206.576161][ T6164] loop1: detected capacity change from 0 to 4096 [ 206.822197][ T6164] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.111189][ T6201] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 209.884477][ T6202] tipc: Enabled bearer , priority 0 [ 209.919913][ T6200] tipc: Disabling bearer [ 211.182635][ T6218] tipc: Enabling of bearer rejected, failed to enable media [ 211.511041][ T6227] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 211.740426][ T6234] loop2: detected capacity change from 0 to 4096 [ 212.315958][ T6234] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.549213][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.347'. [ 213.558284][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.347'. [ 216.183787][ T6288] tipc: Enabled bearer , priority 0 [ 216.316487][ T6281] tipc: Resetting bearer [ 216.330929][ T6296] loop4: detected capacity change from 0 to 2048 [ 216.391904][ T6296] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff" or missing value [ 216.415702][ T6281] tipc: Disabling bearer [ 216.474999][ T6296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 216.597835][ T6306] fuse: Bad value for 'fd' [ 216.860070][ T6305] loop5: detected capacity change from 0 to 512 [ 216.966854][ T6305] EXT4-fs (loop5): 1 orphan inode deleted [ 216.987868][ T6305] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.016565][ T6305] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.281256][ T6335] loop1: detected capacity change from 0 to 512 [ 218.412005][ T6335] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 218.490706][ T6335] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.712594][ T6335] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.368: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 218.826647][ T6335] EXT4-fs (loop1): Remounting filesystem read-only [ 219.384157][ T6347] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 220.750980][ T6366] loop4: detected capacity change from 0 to 512 [ 221.088995][ T6366] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 221.225113][ T6366] EXT4-fs (loop4): orphan cleanup on readonly fs [ 221.239401][ T6366] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.377: bg 0: block 248: padding at end of block bitmap is not set [ 221.263277][ T6366] Quota error (device loop4): write_blk: dquota write failed [ 221.272176][ T6366] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 221.282248][ T6366] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.377: Failed to acquire dquot type 1 [ 221.320976][ T6366] EXT4-fs (loop4): 1 truncate cleaned up [ 221.333497][ T6366] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 221.498925][ T6366] netlink: 'syz.4.377': attribute type 15 has an invalid length. [ 221.506749][ T6366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.377'. [ 225.585798][ T6389] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 225.605870][ T6389] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 227.321797][ T6414] loop5: detected capacity change from 0 to 512 [ 227.377182][ T6416] tipc: Started in network mode [ 227.396254][ T6416] tipc: Node identity fafdb32f4e8b, cluster identity 4711 [ 227.404429][ T6416] tipc: Enabled bearer , priority 0 [ 228.522583][ T6070] tipc: Node number set to 3027677999 [ 229.403604][ T6427] loop4: detected capacity change from 0 to 4096 [ 229.482343][ T6427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.961798][ T6414] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 230.430002][ T6414] EXT4-fs (loop5): orphan cleanup on readonly fs [ 230.469017][ T6414] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.386: bg 0: block 248: padding at end of block bitmap is not set [ 230.484376][ T6414] Quota error (device loop5): write_blk: dquota write failed [ 230.491898][ T6414] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 230.501854][ T6414] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.386: Failed to acquire dquot type 1 [ 230.516886][ T6414] EXT4-fs (loop5): 1 truncate cleaned up [ 230.524063][ T6414] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 230.864040][ T6407] tipc: Resetting bearer [ 230.948656][ T6407] tipc: Disabling bearer [ 232.160869][ T4256] Bluetooth: hci5: command 0x0406 tx timeout [ 233.725388][ T6461] loop5: detected capacity change from 0 to 512 [ 237.826036][ T6460] netlink: 'syz.5.399': attribute type 15 has an invalid length. [ 237.833991][ T6460] netlink: 24 bytes leftover after parsing attributes in process `syz.5.399'. [ 238.024498][ T6466] loop3: detected capacity change from 0 to 1764 [ 238.137948][ T6469] loop2: detected capacity change from 0 to 4096 [ 238.701797][ T6469] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.392393][ T6497] loop5: detected capacity change from 0 to 512 [ 242.125176][ T6499] loop4: detected capacity change from 0 to 512 [ 242.990621][ T26] audit: type=1326 audit(1754735137.111:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 243.072375][ T26] audit: type=1326 audit(1754735137.111:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 243.099073][ T6497] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 243.110671][ T6499] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 243.380502][ T6497] EXT4-fs: failed to create workqueue [ 243.386071][ T6497] EXT4-fs (loop5): mount failed [ 244.122274][ T26] audit: type=1326 audit(1754735137.111:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 244.122392][ T6499] EXT4-fs (loop4): orphan cleanup on readonly fs [ 244.155655][ T6499] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.410: bg 0: block 248: padding at end of block bitmap is not set [ 244.242860][ T26] audit: type=1326 audit(1754735137.111:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 244.595510][ T6499] Quota error (device loop4): write_blk: dquota write failed [ 244.603187][ T6499] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 244.613365][ T6499] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.410: Failed to acquire dquot type 1 [ 244.632924][ T6499] EXT4-fs (loop4): 1 truncate cleaned up [ 244.643958][ T6499] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 244.917102][ T26] audit: type=1326 audit(1754735137.111:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 245.113270][ T6510] loop3: detected capacity change from 0 to 512 [ 246.727805][ T26] audit: type=1326 audit(1754735137.111:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 246.883181][ T26] audit: type=1326 audit(1754735137.111:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 246.996576][ T26] audit: type=1326 audit(1754735137.111:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 247.131729][ T6515] loop4: detected capacity change from 0 to 512 [ 249.191472][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 249.191487][ T26] audit: type=1326 audit(1754735137.171:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 249.473094][ T6510] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 249.485425][ T6510] EXT4-fs: failed to create workqueue [ 249.490889][ T6510] EXT4-fs (loop3): mount failed [ 249.817669][ T26] audit: type=1326 audit(1754735137.171:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 250.387205][ T26] audit: type=1326 audit(1754735137.171:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 250.433409][ T26] audit: type=1326 audit(1754735137.171:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 250.462246][ T26] audit: type=1326 audit(1754735137.171:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 250.489264][ T26] audit: type=1326 audit(1754735137.171:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 250.513313][ T26] audit: type=1326 audit(1754735137.171:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 250.555028][ T26] audit: type=1326 audit(1754735137.171:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 250.678316][ T26] audit: type=1326 audit(1754735137.181:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 250.751110][ T26] audit: type=1326 audit(1754735137.181:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7fc00000 [ 253.373983][ T6549] tipc: Started in network mode [ 253.401150][ T6549] tipc: Node identity 36b1ec36b21c, cluster identity 4711 [ 253.453904][ T6549] tipc: Enabled bearer , priority 0 [ 253.578811][ T6547] tipc: Resetting bearer [ 253.663005][ T6547] tipc: Disabling bearer [ 254.994588][ T6584] loop2: detected capacity change from 0 to 512 [ 255.469550][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.823893][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.247176][ T6584] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 259.392038][ T6584] EXT4-fs: failed to create workqueue [ 259.397414][ T6584] EXT4-fs (loop2): mount failed [ 260.612476][ T6606] netlink: 28 bytes leftover after parsing attributes in process `syz.5.437'. [ 260.621603][ T6606] netlink: 28 bytes leftover after parsing attributes in process `syz.5.437'. [ 261.755042][ T6616] tipc: Enabled bearer , priority 0 [ 261.963437][ T6613] tipc: Resetting bearer [ 262.029352][ T6625] loop5: detected capacity change from 0 to 512 [ 262.360241][ T6613] tipc: Disabling bearer [ 262.382894][ T6625] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 262.458158][ T6625] EXT4-fs (loop5): orphan cleanup on readonly fs [ 262.467555][ T6625] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.440: bg 0: block 248: padding at end of block bitmap is not set [ 262.485137][ T6625] __quota_error: 17 callbacks suppressed [ 262.485150][ T6625] Quota error (device loop5): write_blk: dquota write failed [ 262.498381][ T6625] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 262.508428][ T6625] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.440: Failed to acquire dquot type 1 [ 262.517386][ T6624] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 262.521466][ T6625] EXT4-fs (loop5): 1 truncate cleaned up [ 262.533869][ T6625] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 262.575978][ T6625] netlink: 'syz.5.440': attribute type 15 has an invalid length. [ 262.583798][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.5.440'. [ 264.920482][ T6645] loop4: detected capacity change from 0 to 512 [ 265.844348][ T6648] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.044457][ T6664] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 271.965457][ T6675] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.190953][ T6681] overlayfs: missing 'lowerdir' [ 274.762596][ T6691] tipc: Started in network mode [ 274.767489][ T6691] tipc: Node identity 9e7b9420c0d9, cluster identity 4711 [ 274.775227][ T6691] tipc: Enabled bearer , priority 0 [ 274.807929][ T6692] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 274.834159][ T6692] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 274.843948][ T6690] tipc: Resetting bearer [ 274.904103][ T6690] tipc: Disabling bearer [ 274.969761][ T6699] loop3: detected capacity change from 0 to 512 [ 275.677006][ T6699] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 275.797699][ T6699] EXT4-fs (loop3): orphan cleanup on readonly fs [ 275.805668][ T6699] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.463: bg 0: block 248: padding at end of block bitmap is not set [ 275.968923][ T6699] Quota error (device loop3): write_blk: dquota write failed [ 275.976468][ T6699] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 275.986704][ T6699] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.463: Failed to acquire dquot type 1 [ 276.144422][ T6699] EXT4-fs (loop3): 1 truncate cleaned up [ 276.151396][ T6699] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 276.186760][ T6699] netlink: 'syz.3.463': attribute type 15 has an invalid length. [ 276.197812][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'. [ 278.261198][ T6716] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 280.640258][ T6751] loop2: detected capacity change from 0 to 512 [ 283.728697][ T6751] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 285.562063][ T6770] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 286.665829][ T6796] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 286.773146][ T6796] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 287.855503][ T6817] kernel profiling enabled (shift: 17) [ 288.757776][ T6842] loop2: detected capacity change from 0 to 512 [ 292.143516][ T6842] EXT4-fs: error -4 creating inode table initialization thread [ 292.151539][ T6842] EXT4-fs (loop2): mount failed [ 292.405978][ T6855] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 292.420680][ T6855] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 295.540959][ T6895] overlayfs: missing 'workdir' [ 296.344372][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.515'. [ 296.353393][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.515'. [ 300.371481][ T6976] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 300.382965][ T6976] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 303.670770][ T26] audit: type=1326 audit(1754735197.791:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e0b8be9 code=0x7fc00000 [ 303.721050][ T26] audit: type=1326 audit(1754735197.791:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd79e0b8be9 code=0x7fc00000 [ 303.744915][ T26] audit: type=1326 audit(1754735197.791:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e0b8be9 code=0x7fc00000 [ 303.767386][ T26] audit: type=1326 audit(1754735197.791:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e0b8be9 code=0x7fc00000 [ 303.810203][ T26] audit: type=1326 audit(1754735197.791:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e0b8be9 code=0x7fc00000 [ 303.884805][ T26] audit: type=1326 audit(1754735197.791:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e0b8be9 code=0x7fc00000 [ 303.967888][ T26] audit: type=1326 audit(1754735197.791:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e0b8be9 code=0x7fc00000 [ 304.046457][ T26] audit: type=1326 audit(1754735197.791:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e0b8be9 code=0x7fc00000 [ 304.149650][ T26] audit: type=1326 audit(1754735197.791:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e0b8be9 code=0x7fc00000 [ 304.200685][ T26] audit: type=1326 audit(1754735197.791:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e0b8be9 code=0x7fc00000 [ 305.736419][ T7039] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 306.874258][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 306.883277][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 307.879441][ T7054] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 307.902533][ T7054] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 315.111480][ T7134] loop5: detected capacity change from 0 to 512 [ 316.991467][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.997871][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.336767][ T7134] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 317.348453][ T7134] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.081799][ T7145] loop4: detected capacity change from 0 to 512 [ 321.905321][ T7159] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 323.173481][ T7181] loop2: detected capacity change from 0 to 512 [ 323.308265][ T7181] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 323.607016][ T7181] EXT4-fs (loop2): orphan cleanup on readonly fs [ 323.621047][ T7181] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.579: bg 0: block 248: padding at end of block bitmap is not set [ 323.643347][ T7181] __quota_error: 56 callbacks suppressed [ 323.643361][ T7181] Quota error (device loop2): write_blk: dquota write failed [ 323.656582][ T7181] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 323.666687][ T7181] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.579: Failed to acquire dquot type 1 [ 323.685915][ T7181] EXT4-fs (loop2): 1 truncate cleaned up [ 323.737058][ T7181] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 323.771276][ T7181] netlink: 'syz.2.579': attribute type 15 has an invalid length. [ 323.779023][ T7181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.579'. [ 326.377846][ T7218] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 326.389104][ T7218] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 330.547322][ T7252] netlink: 'syz.5.595': attribute type 2 has an invalid length. [ 330.555086][ T7252] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.595'. [ 331.512222][ T7253] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 331.523270][ T7253] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 333.518892][ T7277] loop2: detected capacity change from 0 to 512 [ 337.161136][ T7277] EXT4-fs: failed to create workqueue [ 337.166535][ T7277] EXT4-fs (loop2): mount failed [ 337.722387][ T7294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 337.743485][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.605'. [ 337.753464][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.605'. [ 342.519709][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.614'. [ 342.528626][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.614'. [ 345.408914][ T7340] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 345.421635][ T7340] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 347.279438][ T7361] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 347.290609][ T7361] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 349.030967][ T7411] loop5: detected capacity change from 0 to 512 [ 349.762858][ T7409] overlayfs: statfs failed on './file0' [ 349.997867][ T7411] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 350.009394][ T7411] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.196004][ T7432] loop1: detected capacity change from 0 to 512 [ 352.217283][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.632'. [ 355.333156][ T7439] overlayfs: failed to resolve './file0': -2 [ 355.624984][ T7454] loop1: detected capacity change from 0 to 512 [ 355.660530][ T7454] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 355.708498][ T7454] EXT4-fs (loop1): orphan cleanup on readonly fs [ 355.803346][ T7454] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.639: bg 0: block 248: padding at end of block bitmap is not set [ 355.852269][ T7454] Quota error (device loop1): write_blk: dquota write failed [ 355.859698][ T7454] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 355.965965][ T7454] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.639: Failed to acquire dquot type 1 [ 356.048070][ T7454] EXT4-fs (loop1): 1 truncate cleaned up [ 356.082399][ T7454] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 356.106921][ T26] audit: type=1326 audit(1754735250.251:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 356.222655][ T26] audit: type=1326 audit(1754735250.251:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 356.286439][ T7454] netlink: 'syz.1.639': attribute type 15 has an invalid length. [ 356.294650][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.639'. [ 356.313614][ T26] audit: type=1326 audit(1754735250.251:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 356.464646][ T26] audit: type=1326 audit(1754735250.251:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 356.653199][ T26] audit: type=1326 audit(1754735250.251:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 356.675660][ T26] audit: type=1326 audit(1754735250.251:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 356.739031][ T26] audit: type=1326 audit(1754735250.251:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 357.591757][ T26] audit: type=1326 audit(1754735250.251:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 358.030072][ T7505] loop5: detected capacity change from 0 to 512 [ 358.126939][ T7505] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 358.346014][ T7505] EXT4-fs (loop5): orphan cleanup on readonly fs [ 358.353840][ T7505] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.647: bg 0: block 248: padding at end of block bitmap is not set [ 358.370315][ T7505] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.647: Failed to acquire dquot type 1 [ 358.383401][ T7505] EXT4-fs (loop5): 1 truncate cleaned up [ 358.431242][ T7505] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 358.466903][ T7502] netlink: 'syz.5.647': attribute type 15 has an invalid length. [ 358.476162][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.647'. [ 360.474319][ T7521] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 360.801197][ T7525] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 360.812640][ T7525] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 363.085972][ T7551] 9pnet: Insufficient options for proto=fd [ 363.575873][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.661'. [ 364.761774][ T7566] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 364.779522][ T7566] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 365.898663][ T7577] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 365.910423][ T7577] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 369.592218][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 369.644855][ T7606] loop4: detected capacity change from 0 to 512 [ 369.915208][ T7610] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 369.926810][ T7610] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 370.463537][ T7606] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 370.479243][ T7606] EXT4-fs (loop4): orphan cleanup on readonly fs [ 370.487793][ T7606] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.672: bg 0: block 248: padding at end of block bitmap is not set [ 370.564505][ T7606] __quota_error: 39 callbacks suppressed [ 370.564522][ T7606] Quota error (device loop4): write_blk: dquota write failed [ 370.577742][ T7606] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 370.587712][ T7606] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.672: Failed to acquire dquot type 1 [ 370.600718][ T7588] chnl_net:caif_netlink_parms(): no params data found [ 370.603037][ T7606] EXT4-fs (loop4): 1 truncate cleaned up [ 371.489891][ T7606] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 371.681854][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 371.753617][ T7624] loop5: detected capacity change from 0 to 512 [ 373.128200][ T7606] netlink: 'syz.4.672': attribute type 15 has an invalid length. [ 373.136432][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.672'. [ 374.138145][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 374.158674][ T7628] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 374.587740][ T7624] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 374.843559][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.046971][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.081654][ T7588] device bridge_slave_0 entered promiscuous mode [ 375.121034][ T7588] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.128095][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.189135][ T7588] device bridge_slave_1 entered promiscuous mode [ 375.953193][ T7647] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 375.964272][ T7647] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 376.345698][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 376.388920][ T7588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.409006][ T7649] loop3: detected capacity change from 0 to 512 [ 376.436742][ T7588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.657071][ T7588] team0: Port device team_slave_0 added [ 376.666369][ T7588] team0: Port device team_slave_1 added [ 376.761878][ T7649] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 376.773094][ T7649] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 376.820814][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.846755][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.588674][ T7588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.601691][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.608648][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.645117][ T7588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.825486][ T7664] loop3: detected capacity change from 0 to 8192 [ 377.838009][ T7588] device hsr_slave_0 entered promiscuous mode [ 377.854256][ T7588] device hsr_slave_1 entered promiscuous mode [ 377.861038][ T7588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.872679][ T7588] Cannot create hsr debugfs directory [ 378.215957][ T7588] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.229273][ T7668] loop1: detected capacity change from 0 to 1764 [ 378.236390][ T7588] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.276548][ T7588] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.382372][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.392450][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.449387][ T7588] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 379.174599][ T7674] loop4: detected capacity change from 0 to 8192 [ 379.747683][ T7588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.441725][ T7588] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.464181][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.487742][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.626018][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.637048][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.648400][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.655513][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.667496][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.239194][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 381.250157][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.308859][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.316013][ T5224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.483839][ T7588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.495012][ T7588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.508112][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 381.561364][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 381.731056][ T7699] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 381.742116][ T7699] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 382.392730][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 382.450914][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 382.551843][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 382.561907][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 382.570437][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 382.579201][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.588196][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 382.597044][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 382.609642][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 382.617641][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.635579][ T7716] 9pnet: Insufficient options for proto=fd [ 383.797985][ T7724] loop3: detected capacity change from 0 to 1764 [ 384.208495][ T7588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.414560][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.426874][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.267232][ T7726] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 386.372900][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 386.391265][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.555992][ T7588] device veth0_vlan entered promiscuous mode [ 386.609514][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.635143][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.717664][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.739629][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.754245][ T7588] device veth1_vlan entered promiscuous mode [ 386.959480][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 386.990254][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.011340][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.022504][ T7588] device veth0_macvtap entered promiscuous mode [ 387.039250][ T7588] device veth1_macvtap entered promiscuous mode [ 387.919107][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.952828][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.963593][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.981091][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.996165][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.006954][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.017768][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.028363][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.046011][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.057841][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.164514][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.178102][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 388.196518][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 388.207532][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 388.238058][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.279025][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.325734][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.387829][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.436984][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.480164][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.544033][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.588478][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.638463][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.695319][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.725516][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.748606][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.760785][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.804868][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.974512][ T7588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.007351][ T7588] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.019353][ T7588] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.724148][ T7588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.503341][ T5013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.607043][ T5013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.640454][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 390.688023][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.701526][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.715068][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 392.947838][ T7830] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 392.976362][ T7830] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 394.439670][ T26] audit: type=1326 audit(1754735288.581:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7ffc0000 [ 394.612906][ T26] audit: type=1326 audit(1754735288.621:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe9465a5be9 code=0x7ffc0000 [ 395.533575][ T26] audit: type=1326 audit(1754735288.621:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7ffc0000 [ 395.955063][ T26] audit: type=1326 audit(1754735288.631:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe9465a5be9 code=0x7ffc0000 [ 396.271664][ T26] audit: type=1326 audit(1754735288.631:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7ffc0000 [ 396.293839][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.351812][ T26] audit: type=1326 audit(1754735288.631:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fe9465a5be9 code=0x7ffc0000 [ 396.432847][ T26] audit: type=1326 audit(1754735288.631:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7ffc0000 [ 396.590704][ T26] audit: type=1326 audit(1754735288.651:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fe9465a5be9 code=0x7ffc0000 [ 396.612868][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.490334][ T26] audit: type=1326 audit(1754735288.651:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9465a5be9 code=0x7ffc0000 [ 397.580701][ T26] audit: type=1326 audit(1754735288.651:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9465a5be9 code=0x7ffc0000 [ 397.609261][ T7905] loop5: detected capacity change from 0 to 512 [ 397.741077][ T7905] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 397.777337][ T7895] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 397.789504][ T7895] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 397.806611][ T7905] EXT4-fs (loop5): orphan cleanup on readonly fs [ 397.874661][ T7905] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.743: bg 0: block 248: padding at end of block bitmap is not set [ 397.897280][ T7905] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.743: Failed to acquire dquot type 1 [ 397.970354][ T7905] EXT4-fs (loop5): 1 truncate cleaned up [ 397.993279][ T7905] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 398.021436][ T7908] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 398.029506][ T7908] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 398.067664][ T7905] netlink: 'syz.5.743': attribute type 15 has an invalid length. [ 398.095906][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.743'. [ 398.468314][ T7931] loop3: detected capacity change from 0 to 512 [ 398.726786][ T7931] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 398.747086][ T7931] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.357991][ T7944] overlayfs: statfs failed on './file0' [ 402.412679][ T7985] loop4: detected capacity change from 0 to 512 [ 402.539584][ T7985] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 402.677964][ T7985] EXT4-fs (loop4): orphan cleanup on readonly fs [ 402.686097][ T7985] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.763: bg 0: block 248: padding at end of block bitmap is not set [ 402.701227][ T7985] __quota_error: 69 callbacks suppressed [ 402.701240][ T7985] Quota error (device loop4): write_blk: dquota write failed [ 402.714570][ T7985] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 402.724611][ T7985] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.763: Failed to acquire dquot type 1 [ 402.758555][ T7985] EXT4-fs (loop4): 1 truncate cleaned up [ 402.801108][ T7985] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 402.874312][ T7985] netlink: 'syz.4.763': attribute type 15 has an invalid length. [ 402.882504][ T7985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.763'. [ 403.937022][ T8005] 9pnet: Insufficient options for proto=fd [ 404.383013][ T8022] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 404.415464][ T8022] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 404.424539][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.776'. [ 404.443645][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.776'. [ 404.548021][ T8028] loop4: detected capacity change from 0 to 512 [ 404.574710][ T8030] loop5: detected capacity change from 0 to 512 [ 404.684557][ T8028] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 404.698432][ T8030] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 404.728127][ T8028] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.740627][ T8030] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.796790][ T8037] 9pnet: Insufficient options for proto=fd [ 406.289746][ T26] audit: type=1326 audit(1754735300.431:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 406.411389][ T26] audit: type=1326 audit(1754735300.431:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 406.731562][ T26] audit: type=1326 audit(1754735300.431:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 407.107930][ T26] audit: type=1326 audit(1754735300.431:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 407.196327][ T26] audit: type=1326 audit(1754735300.431:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 407.219448][ T26] audit: type=1326 audit(1754735300.431:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 407.242261][ T26] audit: type=1326 audit(1754735300.431:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 407.264848][ T26] audit: type=1326 audit(1754735300.431:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 409.187975][ T8094] loop5: detected capacity change from 0 to 512 [ 409.218410][ T8094] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 409.233811][ T8094] EXT4-fs (loop5): orphan cleanup on readonly fs [ 409.242093][ T8094] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.797: bg 0: block 248: padding at end of block bitmap is not set [ 409.267510][ T8094] __quota_error: 58 callbacks suppressed [ 409.267525][ T8094] Quota error (device loop5): write_blk: dquota write failed [ 409.281125][ T8094] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 409.291114][ T8094] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.797: Failed to acquire dquot type 1 [ 409.306612][ T8094] EXT4-fs (loop5): 1 truncate cleaned up [ 409.319128][ T8094] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 409.353743][ T8094] netlink: 'syz.5.797': attribute type 15 has an invalid length. [ 409.361733][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.797'. [ 410.538535][ T8116] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 410.665882][ T8116] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 412.960146][ T8162] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 412.998799][ T8162] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 413.252970][ T8169] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 413.275462][ T8169] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 417.609197][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.833'. [ 417.626583][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 423.246478][ T8300] loop1: detected capacity change from 0 to 1764 [ 423.289606][ T8298] loop4: detected capacity change from 0 to 512 [ 423.627753][ T8298] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 423.869643][ T8298] EXT4-fs (loop4): orphan cleanup on readonly fs [ 423.902189][ T8298] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.851: bg 0: block 248: padding at end of block bitmap is not set [ 424.024630][ T8298] Quota error (device loop4): write_blk: dquota write failed [ 424.032347][ T8298] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 424.042536][ T8298] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.851: Failed to acquire dquot type 1 [ 424.101950][ T8298] EXT4-fs (loop4): 1 truncate cleaned up [ 424.111415][ T8298] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 424.776031][ T8330] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 424.815283][ T8330] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 427.469419][ T8373] loop5: detected capacity change from 0 to 512 [ 427.755253][ T8373] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 427.870726][ T8373] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 428.265563][ T8385] loop5: detected capacity change from 0 to 1764 [ 428.493882][ T8387] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 428.508449][ T8387] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 432.894266][ T8449] loop5: detected capacity change from 0 to 1764 [ 433.306624][ T26] audit: type=1326 audit(1754735327.391:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 433.480276][ T26] audit: type=1326 audit(1754735327.501:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 433.632273][ T26] audit: type=1326 audit(1754735327.771:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 433.841827][ T26] audit: type=1326 audit(1754735327.771:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 434.420505][ T26] audit: type=1326 audit(1754735327.771:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 434.464286][ T26] audit: type=1326 audit(1754735327.771:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 434.540589][ T26] audit: type=1326 audit(1754735327.771:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 434.601205][ T26] audit: type=1326 audit(1754735327.771:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 434.673457][ T26] audit: type=1326 audit(1754735327.771:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 434.780735][ T26] audit: type=1326 audit(1754735327.771:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 439.257632][ T8512] loop5: detected capacity change from 0 to 1764 [ 439.608022][ T8515] loop1: detected capacity change from 0 to 512 [ 439.758606][ T8515] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 439.762870][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.780305][ T8515] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 439.783289][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.147126][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.909'. [ 440.190552][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.909'. [ 440.332119][ T8539] loop1: detected capacity change from 0 to 512 [ 440.446449][ T8539] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 440.468060][ T8539] EXT4-fs (loop1): orphan cleanup on readonly fs [ 440.476350][ T8539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.910: bg 0: block 248: padding at end of block bitmap is not set [ 440.491788][ T8539] __quota_error: 43 callbacks suppressed [ 440.491801][ T8539] Quota error (device loop1): write_blk: dquota write failed [ 440.505532][ T8539] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 440.515474][ T8539] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.910: Failed to acquire dquot type 1 [ 440.529433][ T8539] EXT4-fs (loop1): 1 truncate cleaned up [ 440.587849][ T8539] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 440.620520][ T8539] netlink: 'syz.1.910': attribute type 15 has an invalid length. [ 440.628284][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.910'. [ 440.998002][ T8550] loop3: detected capacity change from 0 to 512 [ 441.122812][ T8550] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 441.144021][ T8550] EXT4-fs (loop3): orphan cleanup on readonly fs [ 441.155766][ T8550] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.913: bg 0: block 248: padding at end of block bitmap is not set [ 441.190278][ T8550] Quota error (device loop3): write_blk: dquota write failed [ 441.197803][ T8550] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 441.208391][ T8550] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.913: Failed to acquire dquot type 1 [ 441.225460][ T8550] EXT4-fs (loop3): 1 truncate cleaned up [ 441.231659][ T8550] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 442.980302][ T8577] loop1: detected capacity change from 0 to 1764 [ 444.971244][ T8601] loop4: detected capacity change from 0 to 512 [ 445.019710][ T8602] netlink: 148 bytes leftover after parsing attributes in process `syz.1.927'. [ 445.029392][ T8602] netlink: 116 bytes leftover after parsing attributes in process `syz.1.927'. [ 445.794120][ T8601] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 445.908491][ T8601] EXT4-fs (loop4): orphan cleanup on readonly fs [ 446.581060][ T8601] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.928: bg 0: block 248: padding at end of block bitmap is not set [ 447.218656][ T8601] Quota error (device loop4): write_blk: dquota write failed [ 447.240674][ T8601] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 447.278666][ T8601] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.928: Failed to acquire dquot type 1 [ 447.638134][ T8601] EXT4-fs (loop4): 1 truncate cleaned up [ 447.809605][ T8601] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 448.999775][ T8638] loop5: detected capacity change from 0 to 1764 [ 449.029008][ T8639] loop4: detected capacity change from 0 to 512 [ 449.253491][ T8639] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 449.384587][ T8639] EXT4-fs (loop4): orphan cleanup on readonly fs [ 449.393450][ T8639] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.936: bg 0: block 248: padding at end of block bitmap is not set [ 449.420711][ T8639] Quota error (device loop4): write_blk: dquota write failed [ 449.428208][ T8639] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 449.438265][ T8639] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.936: Failed to acquire dquot type 1 [ 449.451873][ T8639] EXT4-fs (loop4): 1 truncate cleaned up [ 450.119441][ T8639] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 450.153783][ T8639] netlink: 'syz.4.936': attribute type 15 has an invalid length. [ 450.161586][ T8639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.936'. [ 453.911898][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.948'. [ 454.827446][ T8693] loop3: detected capacity change from 0 to 1764 [ 455.397603][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.5.955'. [ 455.413012][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.955'. [ 455.567374][ T8711] loop5: detected capacity change from 0 to 512 [ 455.642402][ T8711] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 455.665822][ T8711] EXT4-fs (loop5): orphan cleanup on readonly fs [ 455.673758][ T8711] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.958: bg 0: block 248: padding at end of block bitmap is not set [ 455.694147][ T8711] Quota error (device loop5): write_blk: dquota write failed [ 455.701648][ T8711] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 455.713080][ T8711] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.958: Failed to acquire dquot type 1 [ 455.726099][ T8711] EXT4-fs (loop5): 1 truncate cleaned up [ 455.735419][ T8711] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 457.706487][ T8729] syz.4.963 uses obsolete (PF_INET,SOCK_PACKET) [ 463.333161][ T8765] loop1: detected capacity change from 0 to 512 [ 464.132861][ T26] audit: type=1326 audit(1754735358.181:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 464.591906][ T8765] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 464.686503][ T26] audit: type=1326 audit(1754735358.181:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 464.710692][ T8765] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.728318][ T26] audit: type=1326 audit(1754735358.221:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 464.762762][ T26] audit: type=1326 audit(1754735358.221:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 464.852713][ T26] audit: type=1326 audit(1754735358.231:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 465.265263][ T8768] chnl_net:caif_netlink_parms(): no params data found [ 465.369006][ T26] audit: type=1326 audit(1754735358.241:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 465.507253][ T13] Bluetooth: hci6: command 0x0409 tx timeout [ 465.514497][ T26] audit: type=1326 audit(1754735358.241:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 465.573501][ T26] audit: type=1326 audit(1754735358.241:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 465.653746][ T26] audit: type=1326 audit(1754735358.251:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 465.676947][ T26] audit: type=1326 audit(1754735358.251:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 466.268177][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.292374][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.315286][ T8768] device bridge_slave_0 entered promiscuous mode [ 466.348252][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.366478][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.383654][ T8768] device bridge_slave_1 entered promiscuous mode [ 466.485136][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.532767][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.538616][ T8807] loop3: detected capacity change from 0 to 512 [ 466.568439][ T8811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.987'. [ 466.577453][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 466.623304][ T8807] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 466.640933][ T8768] team0: Port device team_slave_0 added [ 466.647038][ T8807] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 466.649884][ T8768] team0: Port device team_slave_1 added [ 466.736630][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.744389][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.774537][ T8768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.798482][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.810390][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.845379][ T8768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.306755][ T8768] device hsr_slave_0 entered promiscuous mode [ 467.436635][ T8768] device hsr_slave_1 entered promiscuous mode [ 467.631213][ T4292] Bluetooth: hci6: command 0x041b tx timeout [ 467.897249][ T8768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.905472][ T8768] Cannot create hsr debugfs directory [ 469.690552][ T4237] Bluetooth: hci6: command 0x040f tx timeout [ 469.973189][ T8768] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 470.760741][ T8768] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 470.770865][ T8858] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 470.797399][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.808836][ T8768] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 470.837570][ T8768] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 470.884558][ T8858] CIFS: Unable to determine destination address [ 470.952123][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 470.952136][ T26] audit: type=1326 audit(1754735365.101:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7fc00000 [ 471.051148][ T8874] loop4: detected capacity change from 0 to 512 [ 471.137284][ T8874] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 471.187361][ T8874] EXT4-fs (loop4): orphan cleanup on readonly fs [ 471.201744][ T8874] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1003: bg 0: block 248: padding at end of block bitmap is not set [ 471.220957][ T8874] Quota error (device loop4): write_blk: dquota write failed [ 471.228702][ T8874] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 471.239007][ T8874] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.1003: Failed to acquire dquot type 1 [ 471.261397][ T8874] EXT4-fs (loop4): 1 truncate cleaned up [ 471.274420][ T8874] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 471.320223][ T8874] netlink: 'syz.4.1003': attribute type 15 has an invalid length. [ 471.328269][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1003'. [ 471.519500][ T26] audit: type=1326 audit(1754735365.101:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe77510bbe9 code=0x7fc00000 [ 471.761134][ T4292] Bluetooth: hci6: command 0x0419 tx timeout [ 472.203255][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.253390][ T26] audit: type=1326 audit(1754735365.131:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7fc00000 [ 472.373991][ T26] audit: type=1326 audit(1754735365.131:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7fc00000 [ 472.417233][ T8768] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.440767][ T26] audit: type=1326 audit(1754735365.131:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7fc00000 [ 472.999227][ T26] audit: type=1326 audit(1754735365.131:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7fc00000 [ 474.674030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 474.681384][ T26] audit: type=1326 audit(1754735365.131:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7fc00000 [ 474.687175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 474.770530][ T26] audit: type=1326 audit(1754735365.131:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7fc00000 [ 474.906852][ T8768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 474.960550][ T8768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.030928][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.155182][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.188549][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.195697][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.313150][ T8912] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1012'. [ 475.323546][ T8912] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1012'. [ 476.186106][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.442083][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.634176][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.641318][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.650877][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.661659][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.670606][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 476.679336][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.688155][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.697900][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.706662][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.808674][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.828477][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.841325][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.354057][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 477.466280][ T8929] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1015'. [ 477.475832][ T8929] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1015'. [ 478.107374][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 478.160173][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 479.365845][ T8951] 9pnet: Insufficient options for proto=fd [ 479.602895][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.654802][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.630787][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 480.630803][ T26] audit: type=1326 audit(1754735374.221:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7ffc0000 [ 480.654696][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.659174][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.676905][ T26] audit: type=1326 audit(1754735374.221:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7ffc0000 [ 480.711339][ T26] audit: type=1326 audit(1754735374.251:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77510bbe9 code=0x7ffc0000 [ 480.744713][ T8959] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 480.760754][ T26] audit: type=1326 audit(1754735374.251:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7ffc0000 [ 480.842578][ T26] audit: type=1326 audit(1754735374.251:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7ffc0000 [ 480.997574][ T26] audit: type=1326 audit(1754735374.281:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe77510bbe9 code=0x7ffc0000 [ 481.090379][ T26] audit: type=1326 audit(1754735374.281:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7ffc0000 [ 481.462982][ T26] audit: type=1326 audit(1754735374.291:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77510bbe9 code=0x7ffc0000 [ 482.335069][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 482.353751][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.380965][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.389876][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.408069][ T8768] device veth0_vlan entered promiscuous mode [ 482.419741][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.434022][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.453132][ T8768] device veth1_vlan entered promiscuous mode [ 482.516409][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 482.535379][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 482.548639][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 482.561685][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.587421][ T8768] device veth0_macvtap entered promiscuous mode [ 482.637725][ T8768] device veth1_macvtap entered promiscuous mode [ 483.007238][ T8994] 9pnet: Insufficient options for proto=fd [ 483.019684][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.104334][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.194938][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.296414][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.413243][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.542959][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.581912][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.595106][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.605447][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.615994][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.627761][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.638491][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.650341][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.670094][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 483.689512][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 483.704090][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 483.713640][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 483.722851][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.743806][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.754837][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.766659][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.776638][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.787356][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.067771][ T9004] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1035'. [ 484.077160][ T9004] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1035'. [ 484.750545][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.819920][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.857309][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.868322][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.879307][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.893816][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.913078][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.924061][ T8768] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.937495][ T8768] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.980311][ T8768] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.989733][ T8768] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.004758][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.039440][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 485.059459][ T9012] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 485.813541][ T9019] 9pnet: Insufficient options for proto=fd [ 485.951687][ T5319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.999369][ T5319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.045053][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 486.144015][ T5224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.910597][ T5224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.927479][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 487.627370][ T9037] loop7: detected capacity change from 0 to 1764 [ 488.684660][ T9054] 9pnet: Insufficient options for proto=fd [ 488.872297][ T9059] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 489.706674][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 491.338224][ T9094] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1061'. [ 493.402286][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 493.647447][ T9092] loop7: detected capacity change from 0 to 1764 [ 495.088310][ T9125] loop4: detected capacity change from 0 to 512 [ 495.156591][ T9125] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 495.195126][ T9125] EXT4-fs (loop4): orphan cleanup on readonly fs [ 495.207398][ T9132] loop7: detected capacity change from 0 to 512 [ 495.222220][ T9125] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1069: bg 0: block 248: padding at end of block bitmap is not set [ 495.243100][ T9125] Quota error (device loop4): write_blk: dquota write failed [ 495.250754][ T9125] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 495.260701][ T9125] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.1069: Failed to acquire dquot type 1 [ 495.285739][ T9125] EXT4-fs (loop4): 1 truncate cleaned up [ 495.314677][ T9132] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 495.319360][ T9125] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 495.365477][ T9125] netlink: 'syz.4.1069': attribute type 15 has an invalid length. [ 495.373464][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1069'. [ 495.420344][ T9132] EXT4-fs (loop7): orphan cleanup on readonly fs [ 495.526805][ T9132] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1071: bg 0: block 248: padding at end of block bitmap is not set [ 495.586509][ T9132] Quota error (device loop7): write_blk: dquota write failed [ 495.594352][ T9132] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 495.604995][ T9132] EXT4-fs error (device loop7): ext4_acquire_dquot:6207: comm syz.7.1071: Failed to acquire dquot type 1 [ 495.627184][ T9132] EXT4-fs (loop7): 1 truncate cleaned up [ 495.729638][ T9144] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1076'. [ 495.738988][ T9144] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1076'. [ 496.687637][ T9132] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 497.882013][ T9161] overlayfs: statfs failed on './file0' [ 498.176826][ T9171] loop1: detected capacity change from 0 to 1764 [ 500.417515][ T9198] loop3: detected capacity change from 0 to 512 [ 501.202591][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.208912][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.429343][ T9198] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 501.450601][ T9198] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 502.930174][ T9225] 9pnet: Insufficient options for proto=fd [ 503.830394][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1098'. [ 503.874920][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 505.060307][ T9253] loop7: detected capacity change from 0 to 1764 [ 505.175480][ T26] audit: type=1326 audit(1754735399.321:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 505.212597][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1104'. [ 505.247428][ T26] audit: type=1326 audit(1754735399.321:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 505.290304][ T26] audit: type=1326 audit(1754735399.321:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 505.315314][ T26] audit: type=1326 audit(1754735399.321:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 505.357239][ T26] audit: type=1326 audit(1754735399.321:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 506.064430][ T26] audit: type=1326 audit(1754735399.321:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 506.214645][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1107'. [ 507.677127][ T26] audit: type=1326 audit(1754735399.321:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 508.029720][ T26] audit: type=1326 audit(1754735399.321:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 508.052428][ T26] audit: type=1326 audit(1754735399.321:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 508.075612][ T26] audit: type=1326 audit(1754735399.321:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7fc00000 [ 508.585041][ T9277] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 508.631294][ T9277] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 509.296651][ T9299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1119'. [ 511.656830][ T4256] Process accounting resumed [ 512.698032][ T9325] loop3: detected capacity change from 0 to 1764 [ 512.969121][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 512.969136][ T26] audit: type=1326 audit(1754735407.111:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 513.105008][ T9334] affs: No valid root block on device nullb0 [ 513.152173][ T26] audit: type=1326 audit(1754735407.151:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 513.753792][ T26] audit: type=1326 audit(1754735407.151:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 513.785754][ T26] audit: type=1326 audit(1754735407.151:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 513.807988][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.849096][ T26] audit: type=1326 audit(1754735407.151:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 514.139066][ T9345] affs: No valid root block on device nullb0 [ 515.153022][ T9358] affs: No valid root block on device nullb0 [ 515.181922][ T26] audit: type=1326 audit(1754735407.151:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 515.535762][ T26] audit: type=1326 audit(1754735407.151:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 515.558010][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.724439][ T26] audit: type=1326 audit(1754735407.151:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 515.905872][ T26] audit: type=1326 audit(1754735407.151:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 515.979819][ T9365] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 515.988182][ T26] audit: type=1326 audit(1754735407.151:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161005ebe9 code=0x7ffc0000 [ 516.020070][ T9365] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 516.547641][ T9380] affs: No valid root block on device nullb0 [ 517.591093][ T9394] affs: No valid root block on device nullb0 [ 517.795425][ T9396] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1140'. [ 517.804837][ T9396] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1140'. [ 524.407000][ T9456] affs: No valid root block on device nullb0 [ 524.723721][ T9469] affs: No valid root block on device nullb0 [ 526.908107][ T9482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1164'. [ 528.275242][ T9488] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1166'. [ 531.664976][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 532.160884][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 532.160926][ T26] audit: type=1326 audit(1754735426.301:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 532.271143][ T26] audit: type=1326 audit(1754735426.301:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 532.295389][ T26] audit: type=1326 audit(1754735426.371:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 532.318465][ T26] audit: type=1326 audit(1754735426.371:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 532.343258][ T26] audit: type=1326 audit(1754735426.371:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 532.366597][ T26] audit: type=1326 audit(1754735426.371:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 532.421226][ T26] audit: type=1326 audit(1754735426.371:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 533.241577][ T26] audit: type=1326 audit(1754735426.371:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 533.263975][ T26] audit: type=1326 audit(1754735426.371:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 533.288070][ T26] audit: type=1326 audit(1754735426.371:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 533.786247][ T9540] loop7: detected capacity change from 0 to 512 [ 533.908877][ T9540] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 534.009313][ T9540] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 535.684827][ T9577] affs: No valid root block on device nullb0 [ 535.898333][ T9561] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 536.220572][ T9561] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 537.132964][ T9598] loop7: detected capacity change from 0 to 512 [ 537.515841][ T9598] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 537.546316][ T9598] EXT4-fs (loop7): orphan cleanup on readonly fs [ 537.554137][ T9598] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1189: bg 0: block 248: padding at end of block bitmap is not set [ 537.569710][ T9598] __quota_error: 24 callbacks suppressed [ 537.569723][ T9598] Quota error (device loop7): write_blk: dquota write failed [ 537.582874][ T9598] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 537.592883][ T9598] EXT4-fs error (device loop7): ext4_acquire_dquot:6207: comm syz.7.1189: Failed to acquire dquot type 1 [ 537.607484][ T9598] EXT4-fs (loop7): 1 truncate cleaned up [ 537.641814][ T9598] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 537.676608][ T9598] netlink: 'syz.7.1189': attribute type 15 has an invalid length. [ 537.684675][ T9598] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1189'. [ 538.755927][ T9613] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1193'. [ 538.765097][ T9613] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1193'. [ 538.973461][ T9614] affs: No valid root block on device nullb0 [ 540.246620][ T9630] affs: No valid root block on device nullb0 [ 542.374045][ T9657] loop7: detected capacity change from 0 to 512 [ 542.423132][ T9657] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 542.508422][ T9657] EXT4-fs (loop7): orphan cleanup on readonly fs [ 542.516452][ T9657] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1205: bg 0: block 248: padding at end of block bitmap is not set [ 542.531853][ T9657] Quota error (device loop7): write_blk: dquota write failed [ 542.540278][ T9657] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 542.550249][ T9657] EXT4-fs error (device loop7): ext4_acquire_dquot:6207: comm syz.7.1205: Failed to acquire dquot type 1 [ 542.563313][ T9657] EXT4-fs (loop7): 1 truncate cleaned up [ 542.572819][ T9657] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 544.518161][ T9673] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 544.585562][ T9673] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 546.666772][ T9699] loop3: detected capacity change from 0 to 512 [ 546.761087][ T9699] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 546.811695][ T9699] EXT4-fs (loop3): orphan cleanup on readonly fs [ 546.819554][ T9699] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1214: bg 0: block 248: padding at end of block bitmap is not set [ 546.836464][ T9699] Quota error (device loop3): write_blk: dquota write failed [ 546.844999][ T9699] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 546.856788][ T9699] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.1214: Failed to acquire dquot type 1 [ 546.900169][ T9699] EXT4-fs (loop3): 1 truncate cleaned up [ 546.918827][ T9699] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 546.954620][ T9699] netlink: 'syz.3.1214': attribute type 15 has an invalid length. [ 546.962484][ T9699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1214'. [ 550.031686][ T9720] loop7: detected capacity change from 0 to 512 [ 550.297655][ T9720] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 550.347982][ T9720] EXT4-fs (loop7): orphan cleanup on readonly fs [ 550.363990][ T9720] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1221: bg 0: block 248: padding at end of block bitmap is not set [ 550.384081][ T9720] Quota error (device loop7): write_blk: dquota write failed [ 550.391832][ T9720] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 550.401994][ T9720] EXT4-fs error (device loop7): ext4_acquire_dquot:6207: comm syz.7.1221: Failed to acquire dquot type 1 [ 550.429792][ T9720] EXT4-fs (loop7): 1 truncate cleaned up [ 550.440019][ T9720] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 551.868904][ T9735] overlayfs: failed to resolve './file1': -2 [ 552.846746][ T9749] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1230'. [ 557.529624][ T9792] 9pnet: Insufficient options for proto=fd [ 562.138183][ T9836] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 562.786708][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.793065][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.513055][ T9872] affs: No valid root block on device nullb0 [ 567.586748][ T4245] Process accounting resumed [ 567.964706][ T9874] affs: No valid root block on device nullb0 [ 568.728355][ T9885] affs: No valid root block on device nullb0 [ 568.746279][ T9891] 9pnet: Insufficient options for proto=fd [ 571.316127][ T9933] affs: No valid root block on device nullb0 [ 571.861187][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1278'. [ 571.880974][ T9934] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1278'. [ 573.441390][ T9951] affs: No valid root block on device nullb0 [ 577.782309][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1294'. [ 577.858138][ T9998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1294'. [ 582.306013][T10042] affs: No valid root block on device nullb0 [ 587.664956][T10111] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 589.917221][T10132] 9pnet: Insufficient options for proto=fd [ 591.790293][ T4245] Bluetooth: hci6: command 0x0406 tx timeout [ 593.779723][T10149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1333'. [ 593.794584][ T26] audit: type=1326 audit(1754735487.941:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 593.926951][ T26] audit: type=1326 audit(1754735488.011:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 593.950606][ T26] audit: type=1326 audit(1754735488.011:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 593.973874][ T26] audit: type=1326 audit(1754735488.011:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 594.742320][ T26] audit: type=1326 audit(1754735488.011:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 594.784285][ T26] audit: type=1326 audit(1754735488.011:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 594.886506][ T26] audit: type=1326 audit(1754735488.011:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 595.851557][ T26] audit: type=1326 audit(1754735488.011:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 595.876364][ T26] audit: type=1326 audit(1754735488.011:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 595.902831][ T26] audit: type=1326 audit(1754735488.011:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6fa15be9 code=0x7ffc0000 [ 601.127416][T10224] overlayfs: failed to resolve './file1': -2 [ 602.028868][T10239] loop7: detected capacity change from 0 to 512 [ 602.090666][T10239] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 602.234101][T10239] EXT4-fs (loop7): orphan cleanup on readonly fs [ 602.376137][T10239] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1357: bg 0: block 248: padding at end of block bitmap is not set [ 602.405784][T10239] __quota_error: 25 callbacks suppressed [ 602.405815][T10239] Quota error (device loop7): write_blk: dquota write failed [ 603.240704][T10239] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 603.254506][T10239] EXT4-fs error (device loop7): ext4_acquire_dquot:6207: comm syz.7.1357: Failed to acquire dquot type 1 [ 603.282608][T10239] EXT4-fs (loop7): 1 truncate cleaned up [ 603.323853][T10239] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 603.601648][ T27] INFO: task syz.6.930:8611 blocked for more than 143 seconds. [ 603.614188][ T27] Not tainted 5.15.189-syzkaller #0 [ 603.640604][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.197530][ T27] task:syz.6.930 state:D stack:25600 pid: 8611 ppid: 7588 flags:0x00004004 [ 604.277490][ T27] Call Trace: [ 604.308993][ T27] [ 604.353854][ T27] __schedule+0x11b8/0x43b0 [ 604.385208][ T27] ? release_firmware_map_entry+0x190/0x190 [ 604.432078][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 604.599538][ T27] ? lock_chain_count+0x20/0x20 [ 604.604534][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 604.609650][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 604.653318][ T27] schedule+0x11b/0x1e0 [ 604.664298][ T27] schedule_preempt_disabled+0xf/0x20 [ 604.674268][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 604.680088][ T27] ? down_write_killable_nested+0x90/0x90 [ 604.686285][ T27] ? read_lock_is_recursive+0x10/0x10 [ 604.692150][ T27] ? __rwlock_init+0x140/0x140 [ 604.697498][ T27] ? ksys_sync+0x150/0x150 [ 604.727446][ T27] down_read+0x96/0x2e0 [ 604.731906][ T27] ? ksys_sync+0x150/0x150 [ 604.736442][ T27] iterate_supers+0xa4/0x1d0 [ 604.741409][ T27] ksys_sync+0x91/0x150 [ 604.745633][ T27] ? sync_filesystem+0x220/0x220 [ 604.754008][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 604.759981][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 604.766060][ T27] __ia32_sys_sync+0xa/0x10 [ 604.770807][ T27] do_syscall_64+0x4c/0xa0 [ 604.775291][ T27] ? clear_bhb_loop+0x30/0x80 [ 604.780077][ T27] ? clear_bhb_loop+0x30/0x80 [ 604.785168][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 604.791365][ T27] RIP: 0033:0x7f18f7c06be9 [ 604.795852][ T27] RSP: 002b:00007f18f5e2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 604.805360][ T27] RAX: ffffffffffffffda RBX: 00007f18f7e2e180 RCX: 00007f18f7c06be9 [ 604.813652][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.821943][ T27] RBP: 00007f18f7e2e180 R08: 0000000000000000 R09: 0000000000000000 [ 604.829981][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.838356][ T27] R13: 00007f18f7e2e218 R14: 00007f18f7e2e180 R15: 00007ffdfbc91558 [ 604.846605][ T27] [ 604.849808][ T27] [ 604.849808][ T27] Showing all locks held in the system: [ 604.878816][ T27] 1 lock held by khungtaskd/27: [ 604.884027][ T27] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 604.894520][ T27] 3 locks held by kworker/u4:2/154: [ 604.900292][ T27] 2 locks held by getty/3949: [ 604.905300][ T27] #0: ffff88814c79b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 604.915360][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 604.925867][ T27] 1 lock held by syz-executor/4186: [ 604.931294][ T27] #0: ffff8880266d60e0 (&type->s_umount_key#80){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 604.941858][ T27] 2 locks held by kworker/0:5/4237: [ 604.947126][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 604.957909][ T27] #1: ffffc9000425fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 604.976511][ T27] 3 locks held by kworker/0:6/4256: [ 604.985073][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 604.995788][ T27] #1: ffffc900046bfd00 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 605.006088][ T27] #2: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x347/0x6b0 [ 605.017348][ T27] 1 lock held by syz.6.930/8611: [ 605.022515][ T27] #0: ffff8880266d60e0 (&type->s_umount_key#80){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 605.032957][ T27] 2 locks held by syz-executor/8768: [ 605.038314][ T27] #0: ffff888020004918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 605.048016][ T27] #1: ffff888020218468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 605.057538][ T27] 1 lock held by syz.1.1361/10255: [ 605.062981][ T27] [ 605.065380][ T27] ============================================= [ 605.065380][ T27] [ 605.090274][ T27] NMI backtrace for cpu 1 [ 605.094617][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 605.102595][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.112651][ T27] Call Trace: [ 605.115951][ T27] [ 605.118878][ T27] dump_stack_lvl+0x168/0x230 [ 605.123563][ T27] ? show_regs_print_info+0x20/0x20 [ 605.128757][ T27] ? load_image+0x3b0/0x3b0 [ 605.133252][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 605.138626][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 605.143742][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 605.148684][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 605.154836][ T27] ? _printk+0xcc/0x110 [ 605.158996][ T27] ? load_image+0x3b0/0x3b0 [ 605.163503][ T27] ? load_image+0x3b0/0x3b0 [ 605.168001][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 605.174065][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 605.180047][ T27] watchdog+0xe0f/0xe50 [ 605.184215][ T27] kthread+0x436/0x520 [ 605.188284][ T27] ? hungtask_pm_notify+0x40/0x40 [ 605.193296][ T27] ? kthread_blkcg+0xd0/0xd0 [ 605.197883][ T27] ret_from_fork+0x1f/0x30 [ 605.202312][ T27] [ 605.205876][ T27] Sending NMI from CPU 1 to CPUs 0: [ 605.211560][ C0] NMI backtrace for cpu 0 [ 605.211570][ C0] CPU: 0 PID: 4416 Comm: kworker/u4:11 Not tainted 5.15.189-syzkaller #0 [ 605.211585][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.211594][ C0] Workqueue: phy9 ieee80211_iface_work [ 605.211612][ C0] RIP: 0010:deref_stack_reg+0x4f/0x120 [ 605.211629][ C0] Code: c1 e8 03 42 80 3c 20 00 74 05 e8 3c 91 87 00 4d 8b 6f 08 49 8d 7f 10 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 21 91 87 00 <49> 8b 6f 10 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 92 00 [ 605.211641][ C0] RSP: 0018:ffffc90003107670 EFLAGS: 00000246 [ 605.211652][ C0] RAX: 1ffff92000620eef RBX: ffffc900031077a8 RCX: 0000000000000000 [ 605.211662][ C0] RDX: ffffc900031077a8 RSI: ffffc90003107db8 RDI: ffffc90003107778 [ 605.211679][ C0] RBP: ffffc900031077b0 R08: dffffc0000000000 R09: ffffc900031077b8 [ 605.211690][ C0] R10: fffff52000620ef9 R11: 1ffff92000620ef7 R12: dffffc0000000000 [ 605.211701][ C0] R13: ffffc90003100000 R14: ffffc90003107db8 R15: ffffc90003107768 [ 605.211711][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 605.211723][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.211732][ C0] CR2: 000055a3bf9b2a58 CR3: 00000000509f9000 CR4: 00000000003506f0 [ 605.211745][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 605.211753][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 605.211762][ C0] Call Trace: [ 605.211766][ C0] [ 605.211772][ C0] unwind_next_frame+0x115d/0x1d90 [ 605.211791][ C0] ? process_one_work+0x863/0x1000 [ 605.211808][ C0] ? stack_trace_save+0xe0/0xe0 [ 605.211821][ C0] arch_stack_walk+0x10c/0x140 [ 605.211844][ C0] ? worker_thread+0xaa8/0x12a0 [ 605.211858][ C0] ? kmem_cache_free+0x8f/0x210 [ 605.211870][ C0] stack_trace_save+0x98/0xe0 [ 605.211883][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 605.211894][ C0] ? skb_release_data+0x6fe/0x850 [ 605.211910][ C0] ? worker_thread+0xaa8/0x12a0 [ 605.211922][ C0] ? ret_from_fork+0x1f/0x30 [ 605.211939][ C0] kasan_set_track+0x4b/0x70 [ 605.211952][ C0] ? kasan_set_track+0x4b/0x70 [ 605.211964][ C0] ? kasan_set_free_info+0x1f/0x40 [ 605.211978][ C0] ? ____kasan_slab_free+0xd5/0x110 [ 605.211992][ C0] ? slab_free_freelist_hook+0xea/0x170 [ 605.212004][ C0] ? kmem_cache_free+0x8f/0x210 [ 605.212016][ C0] ? ieee80211_iface_work+0x798/0xc60 [ 605.212029][ C0] ? process_one_work+0x863/0x1000 [ 605.212061][ C0] kasan_set_free_info+0x1f/0x40 [ 605.212075][ C0] ____kasan_slab_free+0xd5/0x110 [ 605.212090][ C0] slab_free_freelist_hook+0xea/0x170 [ 605.212104][ C0] ? ieee80211_iface_work+0x798/0xc60 [ 605.212119][ C0] kmem_cache_free+0x8f/0x210 [ 605.212133][ C0] ieee80211_iface_work+0x798/0xc60 [ 605.212150][ C0] process_one_work+0x863/0x1000 [ 605.212176][ C0] ? worker_detach_from_pool+0x240/0x240 [ 605.212190][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 605.212206][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 605.212222][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 605.212238][ C0] ? wq_worker_running+0x97/0x170 [ 605.212252][ C0] worker_thread+0xaa8/0x12a0 [ 605.212278][ C0] kthread+0x436/0x520 [ 605.212290][ C0] ? rcu_lock_release+0x20/0x20 [ 605.212302][ C0] ? kthread_blkcg+0xd0/0xd0 [ 605.212315][ C0] ret_from_fork+0x1f/0x30 [ 605.212334][ C0] [ 605.422814][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 605.552595][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 605.560558][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.570598][ T27] Call Trace: [ 605.573863][ T27] [ 605.576774][ T27] dump_stack_lvl+0x168/0x230 [ 605.581434][ T27] ? show_regs_print_info+0x20/0x20 [ 605.586610][ T27] ? load_image+0x3b0/0x3b0 [ 605.591152][ T27] panic+0x2c9/0x7f0 [ 605.595027][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 605.600647][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 605.605128][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 605.610657][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 605.616798][ T27] watchdog+0xe4e/0xe50 [ 605.620962][ T27] kthread+0x436/0x520 [ 605.625029][ T27] ? hungtask_pm_notify+0x40/0x40 [ 605.630044][ T27] ? kthread_blkcg+0xd0/0xd0 [ 605.634614][ T27] ret_from_fork+0x1f/0x30 [ 605.639025][ T27] [ 605.642224][ T27] Kernel Offset: disabled [ 605.646539][ T27] Rebooting in 86400 seconds..