last executing test programs: 19m5.959381139s ago: executing program 32 (id=32): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183842, 0x0) r0 = getpid() r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 16m19.737162134s ago: executing program 33 (id=401): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 12m48.353370405s ago: executing program 34 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1832c1, 0x9c37611dc13d0da6) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 12m42.597961389s ago: executing program 35 (id=768): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)="3c5c413ecd45036a2762bb626c65640a", 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f00000002c0), 0x4) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 11m32.225867841s ago: executing program 8 (id=881): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x9520388457b6d5a6}, 0x28) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01032abd7000fddbdf2505040000"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xa318, 0x2002) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x8000000d}) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='affs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x7c9) 11m23.564087823s ago: executing program 8 (id=893): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0xa080) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="680200000005010400000000000000000a000004540201000300000008"], 0x268}, 0x1, 0x0, 0x0, 0x20000091}, 0x4880) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, r5, 0xffffffffffffffff, 0x1, 0x7, 0x4, "66248c08d77deba19f4efc6a141bd3e5dff2a2a846ba8da97927c5d55338fb37a0cce5175dd65d42b7f148d1403925f9d74488a8fc4390c3f880ab8e983c9c", 0x12}, 0x60) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x12000051) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000600)={r1, &(0x7f0000000100)='Z\x9f\'\xb2O\xf8', 0x2100, &(0x7f0000000400)={@align, {0xc, 0x200, 0x19, 0xd5}}, 0x41, &(0x7f0000000580), &(0x7f00000005c0)=0x7}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) move_pages(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) 11m21.815875069s ago: executing program 8 (id=896): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x410) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x290, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40008) sched_setattr(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/166, 0xa6) 11m12.400953907s ago: executing program 8 (id=909): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) 11m12.287477072s ago: executing program 8 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x80000000}) sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r4, 0x1) mprotect(&(0x7f0000a63000/0x3000)=nil, 0x3000, 0x3) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r0, 0x4, &(0x7f0000000100)={0x0}) 11m10.807150048s ago: executing program 8 (id=913): r0 = syz_open_dev$radio(&(0x7f0000000b80), 0x0, 0x2) writev(r0, &(0x7f0000001d00)=[{&(0x7f0000000c40)="2843bb95478fc288b4386b7ad81addc86048f39be08f39e57770f04a41461c59407b7e503bc5e888c6f8a59fd67e8ab7e1c2408cd960282acf2e8aaa223bc7a3e0ee0d9273540a81f8cc7d4477eee54ea1bd89f98beb8d5be5a230a2711d57ba1dd98e09b1793eb3ca84a44489b03ec10d6c15a258544009a2b00056b835121c33bd8826e80d9d02dc4f0ea0e365a7b77f7890ab243bf620fa2d21b0378600317170acfe19ba1da4c2eafa7f16589c57cb2f8c8f8e859b57f4408ff1a7ec51ac89fa0aa1ac4e62f66d9a81a22780630aeabd6f917b7fe8f939adaa0c6f7de4e1e694a473a1af0a8db0f30274b63a2a70803da1b20cb5b0a5567a8d94e6e4bddae1bf6845bc21bdee023a92ffe649361988855bf379edb70ec1c68c6b0da64639cbf0acb8ea7a15ec36f71500947121b6b07194e1d7846ece10a7caa34a194c47ede5740e169dd93d47a78e09bcfe4fe51f974d2e6a07ca5f69c4d3ec399f56faf23cdef9306dfb7904fb01aaf24148fe6f158d30d9057e13d5a39479e7a2c8905e1eff7bc63df2b756657fef797673adf0ba2836eacd36d12ad0724796b9854d0c03de022180dd1b252fcea6ff70b6528d77735a5e8151b0d6660d336aced111df1ca9ec35e22d2b4ce5fef25e017fbddec6973187bab8099e8dd95daff0f20e4e9fa305fad46f81befff6761fff1c676a416d40ae6d8fcce9497f6b7a1ac61d8b757618bed428fc2c05f5db882b196089a35c350208a49ad8f6831ed487ee6d93898dec9187cb5b24074670ce59eac9aa290c4ec98b865a81f72386234b30ee6d41135dc9fe80c36908659ead62c50a0a46f8265df55caa9eb83f669d678a7728da2d95bd2d907e98d53eac071667b643e5d8be88695273eaf44642f00f9a8879ee65c8f5c18d440c7a426af77159a9539fabd9dcef67c2e5e00fa22b4019549bfe4c9b8bf44e2e9da714e9357b07270b95fc6aedaedcc2bd55d140c4562ad42c1b8125d39d341b357baa97e4a890de7df5bf014076ecd0dc4d3cb728701db37a66ed7f3e25bd9558ac2dbdc357a87187df4bc740f0f46aafdfaf2efd20318dd7173f87fbcc1251b7e3c996c31672924d1804059d5a2b1d3dbcf79dc7d9d7a25b9344098465ff11355a99ab9f3891d82b031a096b7a800409ce13b5edb23ad15e4e9caefdd318374e836cd9c14dbcb12c0ef41f1379a4d63df79d4b836b3da7c9738cb5471ae45ee531b825b0d38012fc84cea682743b514425414b524d4f32a6f09ec2399e55886afff5dab412c64bfa0ecf3d4c648f9eecd71d8d8443b9478fc7aec276b52cae6974eacca07a2539ebe92cb7a35554b8f270944d888c75f963e98f2cd7e828e0bebf00c4810c549ae9b94b5b2a51b009bec9f49139ac39effd7d70863f332d42355b3db52d9b1d0e6ea39dd74d74f6e765caf4c47649a5b47466e16c481d0b19997e86af9eb372be054b719e084c7de9b8c5173364942752aff6043ae7cb8578023cae559e4697b569f3c4cbc33c6e9e9e0eb7499b9147e078cf0814dddbfb3e03ff4533b50a19a512cb8f4b1c8da00181ceefe6f4886b4826a226b2f33c75d0dc33d225779cccc64b26a98ebeebb5bc55684f8dac9e41139b8a71602d4ed060588a950fa53d17f95cb33e684dc0f9d7808d861826e500338c0e6c983ccd28f9a65175cbef4a4ec48e88ed0bb8d360cb67a8db87332af24e13187feae533d3ed8d311c9b64f042b9df3ca81895295b12d50401f0d41b95ce884f82411cb896bd840134ec0393568c8ea9564c75a7f5132345fd68f647efb90cba3e28cc9ca3938f7ab42a3f7d71b04a71d0cf1b24dfc96f6bbe4a06c8879fda8770453b3c68b264625cfbdcf573a5476ef845b0d49b61c63ff4d6c6bcfa121c577202f181d1c64acccc7ba14403cfbfc4964805d145ab1eb32d4253e698f1bc52528b182edf57e54a65b3fc671bb9602aa7c40c1f59b38cd3d199ff4e3f27598f2f2df3befdea17ef14eec63e776d17b594dddaae53d92f6c4083c2df0f7548f9623c3b66f8485aec674766e2962c42812d7f11e0a366f0439df8372df118381a3e35259c3245fc1fce8b5ab43cefd3e2bf015f21851812ce7c6fe9b323e9aa7dfee1b7ebb2c511cbdeb6029b668fdc578dcea5ac578294a18eb82fbddae5533c6bcd02a1565e880d129de31b80dba23972e27d2155960323c83cb6b577d599da9da8b743059d886f303f565a62715926e29b97ec46277c59f495a815e47023b7f43878de16d1bc03f52172e4ca68b5b92fc077e76837913f9042c546f87835a131de6511ebdf29a463ccf6c6a59e3c2df05bd89617971cfc7eca4724b9cab064658e9091985cef3b286fe09604a81a1d5af36a625c9bf8ce39af800d1ef03c1fca72b8d6ec57d974a0f58ddc852141d8447ecadc6879164ad35cd0d22abcce683321bb87b08099c269149503f33c3fe1a9fc21da5988ad4bad7b299cc8d87a4442ed503081dea3a7de21ad00ad7f9de8e54ba2b0c2335398e4059c02cff39d48f0c99ccda5fdd4096d7e027e81686e414724a1626cbe07639446c8d56a94f421235816510ee2c720bf2c2cf96e561141f233d21356dba18a60045beb29ebc0db68fe542da9ca28b145f729fea172197a0469e06df13917ba6ceb69629dd623f4e1fc5d1b7af7b14569d0c036f643e906704d0345da5b4be7ef69947e667f25ad722b9840497bfa78f85abfbaca0038a8a915622bf35e9be312ef2cdaa821008d204b743b29a768c54adaf483dddeb5d367d044fe810b0a07b7f4db26ce417493645daca9334dc47bfdd0c3eb8b8ae7752d4041153b3d536a5c6863d42b4ccc6f0e9dba1ec47078c13a73b9a009df8e0e211d9ba309b04be32aa101bc75f678ff2521b29af81c20bbe04be7322e1174cbc802aa3f3395417102a4abf496b983ac766dc1d3a868ded6eeeffa04c53d77b42383799b6a20b1448fa8e04fe318d30f23aa1e85d968a68041629fc17b05424eaa0daaabaf3d6cb76975b503e4f5af8547070b36cc7a4629574f07ea3d401096d65f1db2b27e1b79822085370b901d87ae289108e263cb7b2746c4f7efbfa607490a18de68c5d5ef0ea070a32bedb82de121f379fdaf62910584d3f6425eda2f4e9833dd73bae6f9080f21edfb1280e6b1cde130deaab06ed3aeba81c40a6f64ef3cf3c4414f4a434545f47db63bef4c04bdd2d9722b787cda3cff687d456a276278ff17b9bd3fb171ba81d79146fe5881d9f388fae325ebd8b87e86deb6cfbd7eeffd1a130f67f317b01d12effd7aa8ed83895abfcd58ab8697a79f31d59a2ca897481a5c55b48b51188bc2dd3f81baa173b3fb7a0dc890663da88ecf8101b95bc55ae0b82d008b86dd656fb4194d331746db50a98447d9366cf4366c5236f7a9e96a78f5d4ddda702025717f326233eeecb12c95799edaa6af19f48e1cd210bb813ce7e384ed2b808231ede2b09a0e069d37c1a990761be7379f11164468bd96c18fe5b2146ace7c6fe670cd6652bb2babb4add5240050c9c8451830e419f033b512bc8b29929fd7682c2100e9b8e290877d3c403cc8439d05ffbf7deee4986266e9c5380e0f8a6b0716a8897dd38b73d7b428be22838a8c663d5eb646196629c5d8759305ebdcdfb4de4cc7524a331a2b993168d88a64c3db9ca99dd772a7e82e99c5971338b414ea6bd2ecfd44a9ca63b50d8bd417eefe0ab895a16b4ea3d73c17bdabc5f0f33267f91e84488127db0d5f52fdd8e9e0d66e0f948029e41535c2860fe5ebf5497ee1618aeff0feac656abc12e1d3aaccc96a24ebaef6e685b767881b4c47be2e8287fffd0d622bf5bad90616508a052e8e2043adf225fe441cb149e7ff1548e0909c3b8306c5c9afc4a2f85c5ff83ec21d835924b0ddfc291b495e662cf09e83704e0051a84d6cc819c5bdf52057a5b9e59b601ce0a7f101eca866e502152cd6e40da82bad361bc5ba55e0e6759a9f140e3efd590663ac2224a6b427e3a51b8b99ad533871362ccb330bf5b6204373bf8a9a35a25636b73a700eefda81b31bd0a9b85852e48c247665ba080bf0108f12f01352e8185724a722c97b6fcbcb8689a87fe24adc9fc4cf7dcbc512a0d0b0c9abb0edd8d45405ff16d828736264cb0091f480ff91fad1d199bf1c46dd3d977ce0258192608a1da743ad851968955efbe4552d012a30b087f96a63022915d8246b2b15ce7e0e1b87bb15babe4351168b0bf38ff8c64058168bf701f36b47ef7e4d84d2a8d63cbd72982e1bed303dd3aee243f5d8561311ea15cc75f3dfcacb45328a428e6d7a5e274956aca17a0d83253c178943cc7ab5f89f23690f767930130e831fbe6f15f3b2874a3b92fadf681b84f5afcbc0591fd8ced8548a4ce4f6e453dfc6831d8a27608046c881e0b2e24a27b7bb368c0f1847c1ee4a2f1749f6b9d5a977d641c82586dd4f804019ff9afb1907bcdc66ece2977fd7f23a914e5612f0e6dd9890f506ed95554158178cad907e8afcb52b1f87202aaf0a904cecc88fdc2d9d1dd603a2b9003384b45915f1ab664cf86d90a534e70bf9ba11ed80845c069debce6d79d388c411270ec71a080a8b65499a160035f6951a68b7962c31ecf91b880f22ab568ed81107e7df61906d60ae0fc298d5e922dd5541fcc0db0a9d19062ea4cf3c98c8529ee8c23b9ef94ecc32884ff099701900506cfd2b7f3c124580c47c68cbbfd1aae80b6925be5ac1af4907268439c5b75580a69b8b39a1869fdd1a60a9bc833a212c3f807aeb67663254306ed1895241263d3ce8d8856cc8e688d39bdd7d1005ef27d34d444320dac77ed4240c5d8edfdcbd35f5dbb813a93a1761c340130e073d34ffd5dfadd9efc0431f4fcfbdc039f88a0b619b8a4b382ab42c53ece259f82e1a8a8b4468bd7247348081aafb7a0874093e74c5e927e2bfb93511c4b54d57b1866885dd730a2ddce8e7c76e314850538923c8df78e3b4ba793e1eee1cff4ccfbd8eca1c622dc3e0791b190af37df04df557e42576de7193e141704db57c2dcf636fa9921ed7eef2460859d47fc49232b5a011d713c26479e100065e0c202b2ebb0eb04e420a4806d5788bbcc1e24bc9acdb77b0143ca74682f2dd6341ac5ee6706dd7d95ee783ca95b67073baa7990796201f4b46309af175e29ee930b19c97d2deb6f65caba8df6fcba0169376af2959374ac675562e5ee73c4339ff0f162a185030d443d4989fe9e3211d60ebdce092be4bb9d5912ccf86c73cd9f61e4080c00bec147ed573efe6eab96205291be67949a1d43b22931bbe0bc14acf815757f44958735fe541e97b969bfea74ccc2fa3c0fad33386fa13b98177bc741edda594e13a548d09623eb62f693d753d2afbd94edab7e5f10af07e97f11dacad7d23d1aab1f9172145bd8b4ed115829d88268a745c2a167bdd8cde1575d2a80788a35ac4682bdf1d4dcac27b17079302b6469673a5dd802e03648ee49b36134fbb5cd193bad840829c5656458ab24c6389b3276c2eb3e3fb018af83985ad0c83fa37ef585bbd4494fccc79c4d3375a49b1ec03d00a35326ef128a4eb346cd665209834c25d0820370678650dc07cffb66596d1b3db6975ca7475b9498cdda09a0c091f123937213cc48100f598c62c37447ebda8e4718046bcfbc382c837720a1843b9c78ee4f515e911efe3171ed9ae5e158dea251087081f594a3fd6ae0dae8a002e79a0a8ad23463d330950357dae1668b1f67dc5a0c633166a091c4b976d6c45856492437457383f71ff41", 0xffe}, {&(0x7f0000001c40)="62456f9b21f9e1fef39d128763d94e0e8f1051d0344457c573a583a71bf95b11c723a4e00f93d7c708e0693407e0d173d4608f080b430f7d7fa7ee8eb3039db1b4b5b931b7b2157d97c693402f7a33ec23d1ff4d8ad1ee4793510d05719eb6b0d701306e7fa90edecd8022df5885776dfbb41e4c3f7a74c6a12fa8f64e212fcc74ac72", 0x83}], 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000bc0)={0x0, "cd48b8ad5516b3851ea8a13d68eb4d6d7d86d64a7263cc6b7e157fff84922c04", 0x1, 0x4, 0x108c, 0x2, 0x4, 0x2, 0x3, 0x2b}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@getchain={0x2c, 0x66, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xffe0, 0xffe2}, {0xb}}, [{0x8, 0xb, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008840) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x449, 0x47314356, 0x34324241, 0x3, [{0x9, 0x2009}, {0x5, 0xfffffffe}, {0x0, 0x2003}, {0x292, 0x9}, {0x7, 0x4}, {0xee, 0x200}, {0xffffff03, 0x7ffe}, {0x1, 0x4}], 0x2, 0xa, 0x1, 0x2, 0x6}}) r7 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008010bd40820514009d"], 0x0) syz_open_dev$midi(0x0, 0x3, 0x8ac02) syz_usb_disconnect(r7) syz_emit_vhci(0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000e20500050002000000050001000600000084"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 10m54.605694181s ago: executing program 36 (id=913): r0 = syz_open_dev$radio(&(0x7f0000000b80), 0x0, 0x2) writev(r0, &(0x7f0000001d00)=[{&(0x7f0000000c40)="2843bb95478fc288b4386b7ad81addc86048f39be08f39e57770f04a41461c59407b7e503bc5e888c6f8a59fd67e8ab7e1c2408cd960282acf2e8aaa223bc7a3e0ee0d9273540a81f8cc7d4477eee54ea1bd89f98beb8d5be5a230a2711d57ba1dd98e09b1793eb3ca84a44489b03ec10d6c15a258544009a2b00056b835121c33bd8826e80d9d02dc4f0ea0e365a7b77f7890ab243bf620fa2d21b0378600317170acfe19ba1da4c2eafa7f16589c57cb2f8c8f8e859b57f4408ff1a7ec51ac89fa0aa1ac4e62f66d9a81a22780630aeabd6f917b7fe8f939adaa0c6f7de4e1e694a473a1af0a8db0f30274b63a2a70803da1b20cb5b0a5567a8d94e6e4bddae1bf6845bc21bdee023a92ffe649361988855bf379edb70ec1c68c6b0da64639cbf0acb8ea7a15ec36f71500947121b6b07194e1d7846ece10a7caa34a194c47ede5740e169dd93d47a78e09bcfe4fe51f974d2e6a07ca5f69c4d3ec399f56faf23cdef9306dfb7904fb01aaf24148fe6f158d30d9057e13d5a39479e7a2c8905e1eff7bc63df2b756657fef797673adf0ba2836eacd36d12ad0724796b9854d0c03de022180dd1b252fcea6ff70b6528d77735a5e8151b0d6660d336aced111df1ca9ec35e22d2b4ce5fef25e017fbddec6973187bab8099e8dd95daff0f20e4e9fa305fad46f81befff6761fff1c676a416d40ae6d8fcce9497f6b7a1ac61d8b757618bed428fc2c05f5db882b196089a35c350208a49ad8f6831ed487ee6d93898dec9187cb5b24074670ce59eac9aa290c4ec98b865a81f72386234b30ee6d41135dc9fe80c36908659ead62c50a0a46f8265df55caa9eb83f669d678a7728da2d95bd2d907e98d53eac071667b643e5d8be88695273eaf44642f00f9a8879ee65c8f5c18d440c7a426af77159a9539fabd9dcef67c2e5e00fa22b4019549bfe4c9b8bf44e2e9da714e9357b07270b95fc6aedaedcc2bd55d140c4562ad42c1b8125d39d341b357baa97e4a890de7df5bf014076ecd0dc4d3cb728701db37a66ed7f3e25bd9558ac2dbdc357a87187df4bc740f0f46aafdfaf2efd20318dd7173f87fbcc1251b7e3c996c31672924d1804059d5a2b1d3dbcf79dc7d9d7a25b9344098465ff11355a99ab9f3891d82b031a096b7a800409ce13b5edb23ad15e4e9caefdd318374e836cd9c14dbcb12c0ef41f1379a4d63df79d4b836b3da7c9738cb5471ae45ee531b825b0d38012fc84cea682743b514425414b524d4f32a6f09ec2399e55886afff5dab412c64bfa0ecf3d4c648f9eecd71d8d8443b9478fc7aec276b52cae6974eacca07a2539ebe92cb7a35554b8f270944d888c75f963e98f2cd7e828e0bebf00c4810c549ae9b94b5b2a51b009bec9f49139ac39effd7d70863f332d42355b3db52d9b1d0e6ea39dd74d74f6e765caf4c47649a5b47466e16c481d0b19997e86af9eb372be054b719e084c7de9b8c5173364942752aff6043ae7cb8578023cae559e4697b569f3c4cbc33c6e9e9e0eb7499b9147e078cf0814dddbfb3e03ff4533b50a19a512cb8f4b1c8da00181ceefe6f4886b4826a226b2f33c75d0dc33d225779cccc64b26a98ebeebb5bc55684f8dac9e41139b8a71602d4ed060588a950fa53d17f95cb33e684dc0f9d7808d861826e500338c0e6c983ccd28f9a65175cbef4a4ec48e88ed0bb8d360cb67a8db87332af24e13187feae533d3ed8d311c9b64f042b9df3ca81895295b12d50401f0d41b95ce884f82411cb896bd840134ec0393568c8ea9564c75a7f5132345fd68f647efb90cba3e28cc9ca3938f7ab42a3f7d71b04a71d0cf1b24dfc96f6bbe4a06c8879fda8770453b3c68b264625cfbdcf573a5476ef845b0d49b61c63ff4d6c6bcfa121c577202f181d1c64acccc7ba14403cfbfc4964805d145ab1eb32d4253e698f1bc52528b182edf57e54a65b3fc671bb9602aa7c40c1f59b38cd3d199ff4e3f27598f2f2df3befdea17ef14eec63e776d17b594dddaae53d92f6c4083c2df0f7548f9623c3b66f8485aec674766e2962c42812d7f11e0a366f0439df8372df118381a3e35259c3245fc1fce8b5ab43cefd3e2bf015f21851812ce7c6fe9b323e9aa7dfee1b7ebb2c511cbdeb6029b668fdc578dcea5ac578294a18eb82fbddae5533c6bcd02a1565e880d129de31b80dba23972e27d2155960323c83cb6b577d599da9da8b743059d886f303f565a62715926e29b97ec46277c59f495a815e47023b7f43878de16d1bc03f52172e4ca68b5b92fc077e76837913f9042c546f87835a131de6511ebdf29a463ccf6c6a59e3c2df05bd89617971cfc7eca4724b9cab064658e9091985cef3b286fe09604a81a1d5af36a625c9bf8ce39af800d1ef03c1fca72b8d6ec57d974a0f58ddc852141d8447ecadc6879164ad35cd0d22abcce683321bb87b08099c269149503f33c3fe1a9fc21da5988ad4bad7b299cc8d87a4442ed503081dea3a7de21ad00ad7f9de8e54ba2b0c2335398e4059c02cff39d48f0c99ccda5fdd4096d7e027e81686e414724a1626cbe07639446c8d56a94f421235816510ee2c720bf2c2cf96e561141f233d21356dba18a60045beb29ebc0db68fe542da9ca28b145f729fea172197a0469e06df13917ba6ceb69629dd623f4e1fc5d1b7af7b14569d0c036f643e906704d0345da5b4be7ef69947e667f25ad722b9840497bfa78f85abfbaca0038a8a915622bf35e9be312ef2cdaa821008d204b743b29a768c54adaf483dddeb5d367d044fe810b0a07b7f4db26ce417493645daca9334dc47bfdd0c3eb8b8ae7752d4041153b3d536a5c6863d42b4ccc6f0e9dba1ec47078c13a73b9a009df8e0e211d9ba309b04be32aa101bc75f678ff2521b29af81c20bbe04be7322e1174cbc802aa3f3395417102a4abf496b983ac766dc1d3a868ded6eeeffa04c53d77b42383799b6a20b1448fa8e04fe318d30f23aa1e85d968a68041629fc17b05424eaa0daaabaf3d6cb76975b503e4f5af8547070b36cc7a4629574f07ea3d401096d65f1db2b27e1b79822085370b901d87ae289108e263cb7b2746c4f7efbfa607490a18de68c5d5ef0ea070a32bedb82de121f379fdaf62910584d3f6425eda2f4e9833dd73bae6f9080f21edfb1280e6b1cde130deaab06ed3aeba81c40a6f64ef3cf3c4414f4a434545f47db63bef4c04bdd2d9722b787cda3cff687d456a276278ff17b9bd3fb171ba81d79146fe5881d9f388fae325ebd8b87e86deb6cfbd7eeffd1a130f67f317b01d12effd7aa8ed83895abfcd58ab8697a79f31d59a2ca897481a5c55b48b51188bc2dd3f81baa173b3fb7a0dc890663da88ecf8101b95bc55ae0b82d008b86dd656fb4194d331746db50a98447d9366cf4366c5236f7a9e96a78f5d4ddda702025717f326233eeecb12c95799edaa6af19f48e1cd210bb813ce7e384ed2b808231ede2b09a0e069d37c1a990761be7379f11164468bd96c18fe5b2146ace7c6fe670cd6652bb2babb4add5240050c9c8451830e419f033b512bc8b29929fd7682c2100e9b8e290877d3c403cc8439d05ffbf7deee4986266e9c5380e0f8a6b0716a8897dd38b73d7b428be22838a8c663d5eb646196629c5d8759305ebdcdfb4de4cc7524a331a2b993168d88a64c3db9ca99dd772a7e82e99c5971338b414ea6bd2ecfd44a9ca63b50d8bd417eefe0ab895a16b4ea3d73c17bdabc5f0f33267f91e84488127db0d5f52fdd8e9e0d66e0f948029e41535c2860fe5ebf5497ee1618aeff0feac656abc12e1d3aaccc96a24ebaef6e685b767881b4c47be2e8287fffd0d622bf5bad90616508a052e8e2043adf225fe441cb149e7ff1548e0909c3b8306c5c9afc4a2f85c5ff83ec21d835924b0ddfc291b495e662cf09e83704e0051a84d6cc819c5bdf52057a5b9e59b601ce0a7f101eca866e502152cd6e40da82bad361bc5ba55e0e6759a9f140e3efd590663ac2224a6b427e3a51b8b99ad533871362ccb330bf5b6204373bf8a9a35a25636b73a700eefda81b31bd0a9b85852e48c247665ba080bf0108f12f01352e8185724a722c97b6fcbcb8689a87fe24adc9fc4cf7dcbc512a0d0b0c9abb0edd8d45405ff16d828736264cb0091f480ff91fad1d199bf1c46dd3d977ce0258192608a1da743ad851968955efbe4552d012a30b087f96a63022915d8246b2b15ce7e0e1b87bb15babe4351168b0bf38ff8c64058168bf701f36b47ef7e4d84d2a8d63cbd72982e1bed303dd3aee243f5d8561311ea15cc75f3dfcacb45328a428e6d7a5e274956aca17a0d83253c178943cc7ab5f89f23690f767930130e831fbe6f15f3b2874a3b92fadf681b84f5afcbc0591fd8ced8548a4ce4f6e453dfc6831d8a27608046c881e0b2e24a27b7bb368c0f1847c1ee4a2f1749f6b9d5a977d641c82586dd4f804019ff9afb1907bcdc66ece2977fd7f23a914e5612f0e6dd9890f506ed95554158178cad907e8afcb52b1f87202aaf0a904cecc88fdc2d9d1dd603a2b9003384b45915f1ab664cf86d90a534e70bf9ba11ed80845c069debce6d79d388c411270ec71a080a8b65499a160035f6951a68b7962c31ecf91b880f22ab568ed81107e7df61906d60ae0fc298d5e922dd5541fcc0db0a9d19062ea4cf3c98c8529ee8c23b9ef94ecc32884ff099701900506cfd2b7f3c124580c47c68cbbfd1aae80b6925be5ac1af4907268439c5b75580a69b8b39a1869fdd1a60a9bc833a212c3f807aeb67663254306ed1895241263d3ce8d8856cc8e688d39bdd7d1005ef27d34d444320dac77ed4240c5d8edfdcbd35f5dbb813a93a1761c340130e073d34ffd5dfadd9efc0431f4fcfbdc039f88a0b619b8a4b382ab42c53ece259f82e1a8a8b4468bd7247348081aafb7a0874093e74c5e927e2bfb93511c4b54d57b1866885dd730a2ddce8e7c76e314850538923c8df78e3b4ba793e1eee1cff4ccfbd8eca1c622dc3e0791b190af37df04df557e42576de7193e141704db57c2dcf636fa9921ed7eef2460859d47fc49232b5a011d713c26479e100065e0c202b2ebb0eb04e420a4806d5788bbcc1e24bc9acdb77b0143ca74682f2dd6341ac5ee6706dd7d95ee783ca95b67073baa7990796201f4b46309af175e29ee930b19c97d2deb6f65caba8df6fcba0169376af2959374ac675562e5ee73c4339ff0f162a185030d443d4989fe9e3211d60ebdce092be4bb9d5912ccf86c73cd9f61e4080c00bec147ed573efe6eab96205291be67949a1d43b22931bbe0bc14acf815757f44958735fe541e97b969bfea74ccc2fa3c0fad33386fa13b98177bc741edda594e13a548d09623eb62f693d753d2afbd94edab7e5f10af07e97f11dacad7d23d1aab1f9172145bd8b4ed115829d88268a745c2a167bdd8cde1575d2a80788a35ac4682bdf1d4dcac27b17079302b6469673a5dd802e03648ee49b36134fbb5cd193bad840829c5656458ab24c6389b3276c2eb3e3fb018af83985ad0c83fa37ef585bbd4494fccc79c4d3375a49b1ec03d00a35326ef128a4eb346cd665209834c25d0820370678650dc07cffb66596d1b3db6975ca7475b9498cdda09a0c091f123937213cc48100f598c62c37447ebda8e4718046bcfbc382c837720a1843b9c78ee4f515e911efe3171ed9ae5e158dea251087081f594a3fd6ae0dae8a002e79a0a8ad23463d330950357dae1668b1f67dc5a0c633166a091c4b976d6c45856492437457383f71ff41", 0xffe}, {&(0x7f0000001c40)="62456f9b21f9e1fef39d128763d94e0e8f1051d0344457c573a583a71bf95b11c723a4e00f93d7c708e0693407e0d173d4608f080b430f7d7fa7ee8eb3039db1b4b5b931b7b2157d97c693402f7a33ec23d1ff4d8ad1ee4793510d05719eb6b0d701306e7fa90edecd8022df5885776dfbb41e4c3f7a74c6a12fa8f64e212fcc74ac72", 0x83}], 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000bc0)={0x0, "cd48b8ad5516b3851ea8a13d68eb4d6d7d86d64a7263cc6b7e157fff84922c04", 0x1, 0x4, 0x108c, 0x2, 0x4, 0x2, 0x3, 0x2b}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@getchain={0x2c, 0x66, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xffe0, 0xffe2}, {0xb}}, [{0x8, 0xb, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008840) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x449, 0x47314356, 0x34324241, 0x3, [{0x9, 0x2009}, {0x5, 0xfffffffe}, {0x0, 0x2003}, {0x292, 0x9}, {0x7, 0x4}, {0xee, 0x200}, {0xffffff03, 0x7ffe}, {0x1, 0x4}], 0x2, 0xa, 0x1, 0x2, 0x6}}) r7 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008010bd40820514009d"], 0x0) syz_open_dev$midi(0x0, 0x3, 0x8ac02) syz_usb_disconnect(r7) syz_emit_vhci(0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000e20500050002000000050001000600000084"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 9m4.221601234s ago: executing program 7 (id=1100): r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5f1, &(0x7f0000000c80)="$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") setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x100, 0x40, 0x2, 0x7, 0x1, [0x101, 0x4, 0x81]}) creat(&(0x7f0000000100)='./file0\x00', 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x24040051) llistxattr(0x0, 0x0, 0x0) 9m2.200507663s ago: executing program 7 (id=1104): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2/file0\x00', 0x121140, 0xd9) mprotect(&(0x7f0000ccf000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) getpid() syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000100)="$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") r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) 9m0.546948522s ago: executing program 7 (id=1108): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f0000000040)="3c5c413ecd45036a2762bb626c65640a", 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 8m45.714230583s ago: executing program 7 (id=1131): r0 = socket(0x40000000015, 0x2, 0x3) bind$inet(r0, 0x0, 0x0) close_range(r0, r0, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) sendmmsg(r1, &(0x7f0000008000)=[{{&(0x7f0000000100)=@rc={0x1f, @any, 0x9}, 0x80, &(0x7f00000015c0)}}, {{&(0x7f0000000780)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}, 0x80, &(0x7f00000037c0)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d80)}}], 0x3, 0x4008000) rename(&(0x7f0000000100)='./bus/file0\x00', 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x20000}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) listen(r3, 0x2) listen(r3, 0x101) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xffbf, 0x2000}], 0x1, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'pcm3724\x00', [0x200, 0x5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x41c, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="1506066186eaeababab57682672c7126e049c2bbab2c9534ebfe8a49f5cc81a1399356cc8f61af0a9e36a8519d6e866ccf54f0529d59c56869488db82d7aa82ae67893b10af1cb2c0438790779dae01f3f6ddd3193db39bc3140c4624815b120fa1e3ac8c525fa82869ee2bda8b555262a9176a8abebc4e56ccd7cff3566b629cf7debf366163616aa8089f098263979b5496b063b7b5f9dca5f9f6ef857fabf639ddfdcf3124d9f1cfb761769942d7fbed0387718f26d5234c9535d51ca3978aa8dada8968efb2a26a7b75e76c377fb6b09bd2bb8b25be9b47da6aa814baaa72e0186b06fcd9630cf8d68ceefa8104b780840568619873bad", @ANYRES32], 0x1, 0xaa0, &(0x7f0000000240)="$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") 8m43.33515356s ago: executing program 7 (id=1137): prctl$PR_MCE_KILL(0x23, 0x3, 0x7ffffffff000) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_pgetevents(r4, 0x1, 0x0, 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480c0}, 0x4004844) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(r6, 0x0, 0x8044) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000002980)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m39.879271451s ago: executing program 7 (id=1142): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000001000)="fc", 0xfffffdd8, 0x7) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000806010800000000000000000100000105000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) r3 = io_uring_setup(0x1b7b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 8m22.610987397s ago: executing program 37 (id=1142): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000001000)="fc", 0xfffffdd8, 0x7) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000806010800000000000000000100000105000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) r3 = io_uring_setup(0x1b7b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 6m23.307086878s ago: executing program 5 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 6m22.095049716s ago: executing program 5 (id=1402): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x100030, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, r3) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x8e}, 0x28) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x920, 0x12) 6m16.256963474s ago: executing program 5 (id=1414): r0 = socket(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="210629bd7000fedbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) 6m13.946416479s ago: executing program 5 (id=1419): socket(0x10, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$inet(r1, 0x0, 0x2004010) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 6m12.952390256s ago: executing program 5 (id=1422): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0xb, 0x5}]}]}, {0x0, [0x0]}}, 0x0, 0x37}, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="680200000005010400000000000000000a000004540201000300000008"], 0x268}, 0x1, 0x0, 0x0, 0x20000091}, 0x4880) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, r6, 0xffffffffffffffff, 0x1, 0x7, 0x4, "66248c08d77deba19f4efc6a141bd3e5dff2a2a846ba8da97927c5d55338fb37a0cce5175dd65d42b7f148d1403925f9d74488a8fc4390c3f880ab8e983c9c", 0x12}, 0x60) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x12000051) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000600)={r2, &(0x7f0000000100)='Z\x9f\'\xb2O\xf8', 0x2100, &(0x7f0000000400)={@align, {0xc, 0x200, 0x19, 0xd5}}, 0x41, &(0x7f0000000580), &(0x7f00000005c0)=0x7}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) move_pages(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) 6m5.270004144s ago: executing program 5 (id=1439): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b704000000000000850000003f"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) sendto(r3, &(0x7f0000000700)="01", 0xffffffee, 0x0, 0x0, 0x0) 5m49.880762483s ago: executing program 38 (id=1439): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b704000000000000850000003f"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) sendto(r3, &(0x7f0000000700)="01", 0xffffffee, 0x0, 0x0, 0x0) 2m57.925752896s ago: executing program 6 (id=1835): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 2m55.439834888s ago: executing program 6 (id=1836): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e28, 0x20, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0xffffffff, @loopback}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 2m54.118961597s ago: executing program 6 (id=1840): accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, 0x0, 0x20040010) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x40000000}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='hist:k', 0x6) 2m53.108669015s ago: executing program 6 (id=1843): r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5f1, &(0x7f0000000c80)="$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") setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x100, 0x40, 0x2, 0x7, 0x1, [0x101, 0x4, 0x81]}) 2m50.965769194s ago: executing program 3 (id=1848): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e28, 0x20, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0xffffffff, @loopback}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 2m49.919152816s ago: executing program 3 (id=1851): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_getevents(0x0, 0x5, 0x5, &(0x7f0000000940)=[{}, {}, {}, {}, {}], &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(&(0x7f0000000280)=0x9, 0x681, 0x0, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)=0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xffe) 2m47.846251847s ago: executing program 3 (id=1856): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e28, 0x20, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0xffffffff, @loopback}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 2m46.836099766s ago: executing program 3 (id=1860): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7273) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 2m46.612134898s ago: executing program 3 (id=1861): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r3, &(0x7f0000003d40)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r9, 0x8b2c, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$sock_SIOCDELRT(r2, 0x890c, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0xc039}], 0x1, 0x0, 0x0, 0x0) 2m45.898242117s ago: executing program 6 (id=1865): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@nombcache}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}]}, 0x5, 0x4bf, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$UHID_INPUT(r0, &(0x7f0000001740)={0x8, {"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", 0x1000}}, 0x1006) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x121242, 0x0) 2m43.90856073s ago: executing program 3 (id=1868): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e28, 0x20, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0xffffffff, @loopback}}}, 0x108) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 2m40.586124244s ago: executing program 6 (id=1876): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 2m28.370649534s ago: executing program 39 (id=1868): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e28, 0x20, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0xffffffff, @loopback}}}, 0x108) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 2m25.192684203s ago: executing program 40 (id=1876): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 51.482566304s ago: executing program 2 (id=2076): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 51.197833315s ago: executing program 2 (id=2078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 50.822077789s ago: executing program 2 (id=2079): r0 = socket(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) 49.666894158s ago: executing program 2 (id=2081): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@setlink={0x34, 0x13, 0x5, 0x3, 0x25dfdbfc, {0x0, 0x0, 0x0, r6}, [@IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x34}}, 0x40080) 37.610738393s ago: executing program 2 (id=2100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) userfaultfd(0x80001) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46, r4}) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r5 = add_key$keyring(&(0x7f00000007c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dvmrp1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB="40165200060010"], 0x24}}, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000580)={0x8000000000000001, 0x5}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r6}) 33.669381769s ago: executing program 2 (id=2104): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(0x0, &(0x7f00000006c0)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e28, 0x20, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0xffffffff, @loopback}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 23.620618002s ago: executing program 4 (id=2117): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4050) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 18.327032096s ago: executing program 41 (id=2104): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(0x0, &(0x7f00000006c0)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e28, 0x20, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0xffffffff, @loopback}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 16.87528683s ago: executing program 4 (id=2127): r0 = socket(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) 15.87425033s ago: executing program 4 (id=2129): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4) 15.860574303s ago: executing program 1 (id=2130): chmod(&(0x7f0000000000)='./file0\x00', 0xba) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="14040a00000b00000000000000"], 0xe) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04030b00c8000000000000080100"], 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000001000), 0x1000, 0x0) 15.532278545s ago: executing program 0 (id=2131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) capset(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="1ffdfaae35289d4f333173846fe8", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 14.875733459s ago: executing program 1 (id=2133): pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x2100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) io_uring_setup(0x3d5c, &(0x7f0000000140)={0x0, 0x5cd6, 0x400, 0x2, 0x3c1}) userfaultfd(0x80001) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 14.871261181s ago: executing program 4 (id=2134): syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x259, &(0x7f0000002440)="$eJzs3T1oJGUcBvBnZnc9c7fo+VEI4geIiAbC2Qk2Z6NwIMchIqhwImKj3Alngl1iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8rEmZnfdlczvB5OZybzz/t9h53l3m9kNUFvnk1xM0kgym6SVpNjb4P5qOd/fXZ5Zv5p0Os/8VvTaVfuV3fPOJVlK8liStbLIa81kYfWFrT82nnro3fnWgx+vPj8z0Yvs297afHrno8vvfHbp0YVvvvvlcpGLae+7rvErBvyvWSS3/xfF/ieK5rRHwL9x5a1Pv+/m/o4kD/Ty30qZ6sV778ZNa6088uE/nfv+r9/ePcmxAuPX6bS674FLHaB2yiTtFOVckmq7LOfmqs/wPzTOlq9fv/Hm7KvX56+9Mu2ZChiXdrL55BdnPj93IP8/N6r8A6dXN//PXln5sbu905j2aICJuKdadfM/+9Liw5F/qB35h/qSf6gv+Yf6kn+oL/mH+pJ/OMVaRx+Wf6gv+Yf6kn+or735BwDqpXNmmKeGbx3/g8jAxE17/gEAAAAAAAAAAAAAAAAAAA5bnlm/ursM20dxwvZffZBsP5GkOah+o/d7xMnNvb9nfy+6zfbVag470L4X7xuxgxF9Mo6nr4/5ntej3PLTGOqP4Ot7p1t/8Vqy9HaSC83m4fuv6N9/w7vtmOOtl0cscEIH8/n4c5Otf9BfK2Pu8M6TNb+0kXzZnX8uDJp/ytzVWw+ef9qjRa/njT9H7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICJ+TsAAP//wphsdg==") syz_emit_ethernet(0x82, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c200000e00000000000086dd6472bef1004c2f0100000000000000000000000000000000ff026f0000000000000000000000000187000000000000000c21880b0000000300000800000086dd080088be00000003137fad0201000000000100010800e43860e3cd172a749a22eb00000004220ce3020200000000000008000508"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000900)=[{&(0x7f0000000340)=""/260, 0x104}], 0x1, 0x3, 0x3) 11.402343018s ago: executing program 1 (id=2136): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4050) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 11.369821286s ago: executing program 0 (id=2137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001a000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r3, r3, 0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 11.27409492s ago: executing program 4 (id=2138): syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x259, &(0x7f0000002440)="$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") syz_emit_ethernet(0x82, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c200000e00000000000086dd6472bef1004c2f0100000000000000000000000000000000ff026f0000000000000000000000000187000000000000000c21880b0000000300000800000086dd080088be00000003137fad0201000000000100010800e43860e3cd172a749a22eb00000004220ce3020200000000000008000508"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103243, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000900)=[{&(0x7f0000000340)=""/260, 0x104}], 0x1, 0x3, 0x3) 11.149992301s ago: executing program 9 (id=2139): r0 = socket(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) 8.912087411s ago: executing program 0 (id=2140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001a000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r3, r3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 6.375899195s ago: executing program 0 (id=2141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) syz_open_procfs(0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46, r5}) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = add_key$keyring(&(0x7f00000007c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dvmrp1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40165200060010"], 0x24}}, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000580)={0x8000000000000001, 0x5}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r7}) 5.325249268s ago: executing program 4 (id=2142): accept(0xffffffffffffffff, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0x40000000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r3, &(0x7f0000006780)={0x2020}, 0x2020) 5.31713404s ago: executing program 9 (id=2143): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4) 5.148783063s ago: executing program 9 (id=2144): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f0000000040)="3c5c413ecd45036a2762bb626c65640a", 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 4.822136314s ago: executing program 1 (id=2145): pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x2100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) io_uring_setup(0x3d5c, &(0x7f0000000140)={0x0, 0x5cd6, 0x400, 0x2, 0x3c1}) userfaultfd(0x80001) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.983125284s ago: executing program 9 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001a000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r3, r3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.903210604s ago: executing program 1 (id=2147): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 1.854243887s ago: executing program 0 (id=2148): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 570.434607ms ago: executing program 1 (id=2149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) pipe2(0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d70617468300000") write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e) ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d70617468300000") ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d70617468300000") write(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xc138fd0e, &(0x7f0000003000)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d70617468300000") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f", 0x6, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60038d08001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22ec03a4dae709ec6410d3fb435bf07e0868b35b030000007ef9394b394626ddd40f7bf3a3278ac015ef1c0915866c175c230ecec66abe8921dc7f4b7fe2d0ada516d06da2835538cf54cbbca0bbad6a9275521231353c2c795f5fcf59f16d9b27a919675f868284997b49ed8271a7ec7f70363beb1707a9517fe7b9d523a51b0fab2183cc6c3f46154d1d24ad4c1d657bd70b9db82cd9309030", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780004020422ec"], 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r6, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0) 168.969968ms ago: executing program 9 (id=2150): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) 162.03353ms ago: executing program 0 (id=2151): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x2f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) writev(r0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) pipe(&(0x7f0000000280)) fanotify_init(0x200, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 0s ago: executing program 9 (id=2152): r0 = socket(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) kernel console output (not intermixed with test programs): ed capacity change from 0 to 2048 [ 699.355126][ T9998] NILFS (loop6): couldn't find nilfs on the device [ 699.435990][ T9505] udevd[9505]: incorrect nilfs2 checksum on /dev/loop6 [ 699.443979][ T9505] udevd[9505]: symlink '../../loop6' '/dev/disk/by-diskseq/506.tmp-b7:6' failed: Read-only file system [ 700.245994][T10010] loop5: detected capacity change from 0 to 1024 [ 700.323046][ T9504] udevd[9504]: symlink '../../loop5' '/dev/disk/by-diskseq/507.tmp-b7:5' failed: Read-only file system [ 700.360870][ T9504] udevd[9504]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system [ 700.424353][T10015] overlayfs: unrecognized mount option "lowerdir" or missing value [ 700.464406][ T9504] udevd[9504]: symlink '../../loop5' '/dev/disk/by-uuid/0f76b7e0-a395-392e-9506-9fb3b29b70e3.tmp-b7:5' failed: Read-only file system [ 700.481230][ T9505] udevd[9505]: symlink '../../loop6' '/dev/disk/by-diskseq/506.tmp-b7:6' failed: Read-only file system [ 700.636135][ T7] libceph: connect (1)[c::]:6789 error -101 [ 700.657399][T10025] ceph: No mds server is up or the cluster is laggy [ 700.704106][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 701.482666][ T9505] udevd[9505]: symlink '../../loop6' '/dev/disk/by-diskseq/506.tmp-b7:6' failed: Read-only file system [ 701.552561][ T9504] udevd[9504]: symlink '../../loop5' '/dev/disk/by-diskseq/507.tmp-b7:5' failed: Read-only file system [ 701.604725][T10024] ceph: No mds server is up or the cluster is laggy [ 701.621052][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 701.638194][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 701.666647][ T9505] udevd[9505]: symlink '../../loop5' '/dev/disk/by-diskseq/507.tmp-b7:5' failed: Read-only file system [ 701.711690][ T9505] udevd[9505]: symlink '../../loop5' '/dev/disk/by-diskseq/507.tmp-b7:5' failed: Read-only file system [ 701.835892][T10036] affs: No valid root block on device nullb0 [ 701.929353][T10037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.347398][T10054] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 705.347398][T10054] program syz.5.1124 not setting count and/or reply_len properly [ 706.638657][T10052] affs: No valid root block on device nullb0 [ 707.833878][T10066] loop4: detected capacity change from 0 to 16 [ 708.066204][T10066] erofs: (device loop4): mounted with root inode @ nid 36. [ 708.107742][T10061] udevd[10061]: symlink '../../loop4' '/dev/disk/by-diskseq/510.tmp-b7:4' failed: Read-only file system [ 708.393795][ T4803] Bluetooth: hci0: command 0x0406 tx timeout [ 709.135624][T10061] udevd[10061]: symlink '../../loop4' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:4' failed: Read-only file system [ 709.160324][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 709.204482][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 709.776854][T10069] ceph: No mds server is up or the cluster is laggy [ 709.882159][T10091] loop4: detected capacity change from 0 to 16 [ 709.906894][T10091] erofs: (device loop4): mounted with root inode @ nid 36. [ 709.998869][T10082] loop7: detected capacity change from 0 to 2048 [ 710.184132][T10082] NILFS (loop7): couldn't find nilfs on the device [ 711.490651][T10061] udevd[10061]: incorrect nilfs2 checksum on /dev/loop7 [ 712.908698][T10110] loop4: detected capacity change from 0 to 128 [ 712.914358][T10114] loop9: detected capacity change from 0 to 128 [ 713.042600][T10114] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 713.102056][T10114] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 714.668942][T10114] affs: No valid root block on device nullb0 [ 715.104565][T10138] loop5: detected capacity change from 0 to 2048 [ 715.780282][T10137] loop4: detected capacity change from 0 to 16 [ 715.818018][T10138] NILFS (loop5): invalid segment: Magic number mismatch [ 715.823787][T10137] erofs: (device loop4): mounted with root inode @ nid 36. [ 715.825233][T10138] NILFS (loop5): trying rollback from an earlier position [ 715.854752][T10138] NILFS (loop5): recovery complete [ 715.896527][T10140] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 720.364895][T10160] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 720.596492][T10171] affs: No valid root block on device nullb0 [ 720.634842][T10171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.500923][T10192] loop9: detected capacity change from 0 to 128 [ 723.746734][T10201] affs: No valid root block on device nullb0 [ 723.791258][T10201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.591271][T10244] affs: No valid root block on device nullb0 [ 730.628186][T10244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.387492][T10256] loop9: detected capacity change from 0 to 16 [ 733.550079][T10256] erofs: (device loop9): mounted with root inode @ nid 36. [ 733.687607][T10263] loop6: detected capacity change from 0 to 2048 [ 734.346248][T10258] udevd[10258]: symlink '../../loop9' '/dev/disk/by-diskseq/526.tmp-b7:9' failed: Read-only file system [ 734.584846][T10263] NILFS (loop6): invalid segment: Magic number mismatch [ 734.592184][T10263] NILFS (loop6): trying rollback from an earlier position [ 734.608250][T10263] NILFS (loop6): recovery complete [ 735.555747][T10269] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 735.631073][T10258] udevd[10258]: symlink '../../loop9' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:9' failed: Read-only file system [ 735.657789][T10264] udevd[10264]: symlink '../../loop6' '/dev/disk/by-diskseq/527.tmp-b7:6' failed: Read-only file system [ 735.792778][ T4354] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.829709][T10264] udevd[10264]: symlink '../../loop6' '/dev/disk/by-uuid/33ea582e-c541-419d-a8ce-517211853ed2.tmp-b7:6' failed: Read-only file system [ 737.452132][T10276] udevd[10276]: symlink '../../loop9' '/dev/disk/by-diskseq/526.tmp-b7:9' failed: Read-only file system [ 737.471374][T10264] udevd[10264]: symlink '../../loop6' '/dev/disk/by-diskseq/527.tmp-b7:6' failed: Read-only file system [ 737.491574][T10264] udevd[10264]: symlink '../../loop6' '/dev/disk/by-diskseq/527.tmp-b7:6' failed: Read-only file system [ 737.516039][T10264] udevd[10264]: symlink '../../loop6' '/dev/disk/by-diskseq/527.tmp-b7:6' failed: Read-only file system [ 737.685587][T10296] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 737.908566][T10264] udevd[10264]: symlink '../../loop9' '/dev/disk/by-diskseq/526.tmp-b7:9' failed: Read-only file system [ 738.237773][ T4354] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.376743][ T4354] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.851605][ T4354] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.917144][T10326] overlayfs: unrecognized mount option "/" or missing value [ 739.968317][ T4938] Bluetooth: hci2: command 0x0409 tx timeout [ 740.924243][T10339] loop5: detected capacity change from 0 to 2048 [ 741.665250][T10339] NILFS (loop5): invalid segment: Magic number mismatch [ 741.672366][T10339] NILFS (loop5): trying rollback from an earlier position [ 741.727264][T10339] NILFS (loop5): recovery complete [ 741.758327][T10342] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 742.047373][ T4933] Bluetooth: hci2: command 0x041b tx timeout [ 742.083138][ T4933] libceph: connect (1)[c::]:6789 error -101 [ 742.186637][ T4933] libceph: mon0 (1)[c::]:6789 connect error [ 742.563107][T10346] ceph: No mds server is up or the cluster is laggy [ 742.585806][ T4938] libceph: connect (1)[c::]:6789 error -101 [ 742.591915][ T4938] libceph: mon0 (1)[c::]:6789 connect error [ 742.609932][T10290] chnl_net:caif_netlink_parms(): no params data found [ 742.879861][T10361] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 742.879861][T10361] program syz.4.1183 not setting count and/or reply_len properly [ 743.555241][ T7] libceph: connect (1)[c::]:6789 error -101 [ 743.642344][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 744.015263][T10290] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.039148][T10290] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.053577][T10290] device bridge_slave_0 entered promiscuous mode [ 744.078396][T10290] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.085748][T10290] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.093983][T10290] device bridge_slave_1 entered promiscuous mode [ 744.103952][T10379] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 744.103952][T10379] program syz.4.1184 not setting count and/or reply_len properly [ 744.132894][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 744.228838][T10290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.283752][T10290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.406754][T10389] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 744.406754][T10389] program syz.5.1187 not setting count and/or reply_len properly [ 744.448224][T10290] team0: Port device team_slave_0 added [ 744.582102][T10290] team0: Port device team_slave_1 added [ 745.251242][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 745.277334][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 746.166836][ T4951] libceph: connect (1)[c::]:6789 error -101 [ 746.173047][ T4951] libceph: mon0 (1)[c::]:6789 connect error [ 746.205437][ T4951] Bluetooth: hci2: command 0x0419 tx timeout [ 746.345174][T10407] ceph: No mds server is up or the cluster is laggy [ 746.374573][T10290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.396618][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.543236][T10426] affs: No valid root block on device nullb0 [ 746.577062][T10426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.168690][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.175877][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.682794][T10290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.028751][T10290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.130903][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.313138][T10290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.143836][T10290] device hsr_slave_0 entered promiscuous mode [ 751.155721][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 751.161867][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 751.172055][T10290] device hsr_slave_1 entered promiscuous mode [ 751.178840][T10290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 751.186907][T10290] Cannot create hsr debugfs directory [ 751.422589][ T4354] device hsr_slave_0 left promiscuous mode [ 751.429711][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 751.444670][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 751.454585][ T4354] device hsr_slave_1 left promiscuous mode [ 751.467662][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.513667][T10458] overlayfs: unrecognized mount option "/" or missing value [ 752.184817][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 752.191014][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 752.197309][T10433] ceph: No mds server is up or the cluster is laggy [ 752.224497][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.319301][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.367998][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.629083][ T4354] device bridge_slave_1 left promiscuous mode [ 752.645544][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.664403][ T4354] device bridge_slave_0 left promiscuous mode [ 753.571451][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.646078][ T4354] device veth1_macvtap left promiscuous mode [ 753.652197][ T4354] device veth0_macvtap left promiscuous mode [ 753.673915][ T4354] device veth1_vlan left promiscuous mode [ 753.682995][ T4354] device veth0_vlan left promiscuous mode [ 754.302064][T10481] affs: No valid root block on device nullb0 [ 754.338311][T10481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.738870][ T13] libceph: connect (1)[c::]:6789 error -101 [ 755.771471][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 756.651501][ T7] libceph: connect (1)[c::]:6789 error -101 [ 756.658503][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 756.845996][T10491] ceph: No mds server is up or the cluster is laggy [ 757.094324][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 757.337361][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 757.493672][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.687282][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.948049][ T4354] bond0 (unregistering): Released all slaves [ 759.789185][T10540] affs: No valid root block on device nullb0 [ 759.829439][T10540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.850155][T10551] affs: No valid root block on device nullb0 [ 760.887089][T10551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.912354][T10290] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 766.978485][T10290] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 767.575640][T10615] blktrace: Concurrent blktraces are not allowed on loop8 [ 767.616538][T10290] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 767.642975][T10290] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 768.325738][T10290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.347926][T10290] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.555207][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 769.602261][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 769.680454][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 769.756165][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 770.576569][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.583688][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.592838][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 770.601742][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 770.611428][T10634] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 770.611428][T10634] program syz.9.1241 not setting count and/or reply_len properly [ 770.632305][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.639489][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.755776][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 770.797043][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 770.833671][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 770.970975][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 771.082617][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 771.195673][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 771.314371][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 771.416574][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 771.536902][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 771.633035][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 771.737769][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 771.846936][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 771.893529][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 772.210112][T10658] blktrace: Concurrent blktraces are not allowed on loop12 [ 775.983034][T10676] ceph: No mds server is up or the cluster is laggy [ 776.020955][ T4197] libceph: connect (1)[c::]:6789 error -101 [ 776.055470][ T4197] libceph: mon0 (1)[c::]:6789 connect error [ 776.136877][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 776.145291][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 776.200179][T10290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.281470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 776.309118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 777.397369][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 777.414869][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 780.835369][T10699] blktrace: Concurrent blktraces are not allowed on loop12 [ 780.883969][T10290] device veth0_vlan entered promiscuous mode [ 780.935931][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 780.967696][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 781.012627][T10290] device veth1_vlan entered promiscuous mode [ 781.436756][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 781.470398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 781.489731][T10290] device veth0_macvtap entered promiscuous mode [ 781.507427][T10290] device veth1_macvtap entered promiscuous mode [ 781.593442][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.617967][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.638408][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.659461][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.684650][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.695385][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.705518][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.716073][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.830736][T10290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.879071][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 782.239921][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 782.349065][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 782.897263][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 782.958736][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.969569][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.002300][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.046327][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.130638][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.156427][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.187585][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.216691][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.256861][T10290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.295566][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 783.304204][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 783.360097][T10290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.406435][T10290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.415237][T10290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.439550][T10734] loop6: detected capacity change from 0 to 16 [ 784.373943][T10290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.440947][T10739] affs: No valid root block on device nullb0 [ 784.483286][T10739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.210265][T10734] erofs: (device loop6): mounted with root inode @ nid 36. [ 788.348264][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.362286][ T4933] libceph: connect (1)[c::]:6789 error -101 [ 788.381500][T10750] ceph: No mds server is up or the cluster is laggy [ 788.405521][ T4933] libceph: mon0 (1)[c::]:6789 connect error [ 788.419722][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.459156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 788.587085][T10761] affs: No valid root block on device nullb0 [ 788.626197][T10761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.667431][ T4951] libceph: connect (1)[c::]:6789 error -101 [ 788.693532][ T4951] libceph: mon0 (1)[c::]:6789 connect error [ 790.513126][ T5453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.603265][ T5453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.762149][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 791.047940][T10765] kAFS: No cell specified [ 792.042206][T10769] affs: No valid root block on device nullb0 [ 792.075564][T10769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.033733][ T13] FS-Cache: Duplicate cookie detected [ 793.039263][ T13] FS-Cache: O-cookie c=00000013 [p=00000006 fl=222 nc=0 na=1] [ 793.046838][ T13] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff8880771b3800 [ 793.055454][ T13] FS-Cache: O-key=[4] '73797a30' [ 793.060479][ T13] FS-Cache: N-cookie c=00000018 [p=00000006 fl=2 nc=0 na=1] [ 793.068043][ T13] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff8880757de800 [ 793.076261][ T13] FS-Cache: N-key=[4] '73797a30' [ 793.092626][T10782] kAFS: No cell specified [ 796.115967][T10785] loop6: detected capacity change from 0 to 128 [ 801.538934][T10809] loop2: detected capacity change from 0 to 2048 [ 801.608836][T10809] NILFS (loop2): couldn't find nilfs on the device [ 801.670448][T10793] udevd[10793]: incorrect nilfs2 checksum on /dev/loop2 [ 802.106084][ T4234] libceph: connect (1)[c::]:6789 error -101 [ 802.112547][ T4234] libceph: mon0 (1)[c::]:6789 connect error [ 802.137777][T10833] ceph: No mds server is up or the cluster is laggy [ 802.958133][T10853] loop4: detected capacity change from 0 to 128 [ 808.610005][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.617990][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.641530][T10897] device syzkaller0 entered promiscuous mode [ 812.513032][ T4951] libceph: connect (1)[c::]:6789 error -101 [ 812.524094][T10908] ceph: No mds server is up or the cluster is laggy [ 812.531821][ T4951] libceph: mon0 (1)[c::]:6789 connect error [ 814.991866][T10932] loop5: detected capacity change from 0 to 32768 [ 815.110792][T10932] JBD2: Ignoring recovery information on journal [ 815.119150][T10932] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 815.127487][T10932] JBD2: bad block at offset 32 [ 815.325173][T10932] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 816.394273][T10940] loop2: detected capacity change from 0 to 2048 [ 816.591969][T10940] NILFS (loop2): couldn't find nilfs on the device [ 817.746887][ T4426] ocfs2: Unmounting device (7,5) on (node local) [ 818.685059][T10972] device syzkaller0 entered promiscuous mode [ 818.795910][T10968] ceph: No mds server is up or the cluster is laggy [ 818.808126][T10890] libceph: connect (1)[c::]:6789 error -101 [ 818.815509][T10890] libceph: mon0 (1)[c::]:6789 connect error [ 822.953394][T11016] affs: No valid root block on device nullb0 [ 822.973878][T11016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.188769][T11019] loop2: detected capacity change from 0 to 32768 [ 823.336205][T11019] JBD2: Ignoring recovery information on journal [ 823.344672][T11019] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 823.353116][T11019] JBD2: bad block at offset 32 [ 823.368542][T11021] loop5: detected capacity change from 0 to 2048 [ 823.388056][T11019] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 823.452438][T11021] NILFS (loop5): couldn't find nilfs on the device [ 824.167787][T10290] ocfs2: Unmounting device (7,2) on (node local) [ 824.234379][T11027] udevd[11027]: incorrect nilfs2 checksum on /dev/loop5 [ 827.423568][T11078] loop9: detected capacity change from 0 to 32768 [ 827.432866][ T7] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 827.518306][T11078] JBD2: Ignoring recovery information on journal [ 827.525856][T11078] jbd2_journal_bmap: journal block not found at offset 32 on loop9-75 [ 827.534351][T11078] JBD2: bad block at offset 32 [ 827.565527][T11078] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 827.740451][T11086] loop5: detected capacity change from 0 to 16 [ 827.976549][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.043593][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 828.222427][ T7] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 828.390065][T11086] erofs: (device loop5): mounted with root inode @ nid 36. [ 828.443874][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.617836][ T7] usb 3-1: config 0 descriptor?? [ 828.653438][ T8956] ocfs2: Unmounting device (7,9) on (node local) [ 829.089264][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 829.145539][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 829.212662][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 829.262719][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 829.270033][ T7] usb 3-1: media controller created [ 829.280513][T11067] dvb-usb: bulk message failed: -22 (33/0) [ 829.311581][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 829.394880][T11114] loop2: detected capacity change from 0 to 512 [ 829.423099][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 829.454564][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 829.557310][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 829.613330][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 829.652170][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 831.389691][T11122] ceph: No mds server is up or the cluster is laggy [ 831.436671][ T7] usb 3-1: USB disconnect, device number 2 [ 831.494222][T10890] libceph: connect (1)[c::]:6789 error -101 [ 831.535449][T10890] libceph: mon0 (1)[c::]:6789 connect error [ 831.789919][T11147] affs: No valid root block on device nullb0 [ 831.830361][T11147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.138629][ T4806] libceph: connect (1)[c::]:6789 error -101 [ 832.161478][ T4806] libceph: mon0 (1)[c::]:6789 connect error [ 833.161164][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 833.215548][T11149] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 833.215548][T11149] program syz.2.1349 not setting count and/or reply_len properly [ 834.310380][T11169] loop6: detected capacity change from 0 to 32768 [ 834.384323][T11169] JBD2: Ignoring recovery information on journal [ 834.392375][T11169] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 834.400677][T11169] JBD2: bad block at offset 32 [ 834.421497][T11169] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 834.595429][ T4235] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 835.316605][ T6339] ocfs2: Unmounting device (7,6) on (node local) [ 835.615611][ T4235] usb 10-1: no configurations [ 835.623576][ T4235] usb 10-1: can't read configurations, error -22 [ 836.185949][ T4235] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 836.285412][T10038] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 836.357238][T11201] loop6: detected capacity change from 0 to 2048 [ 836.406866][T11201] NILFS (loop6): couldn't find nilfs on the device [ 836.465788][T11094] udevd[11094]: incorrect nilfs2 checksum on /dev/loop6 [ 836.495781][ T4235] usb 10-1: no configurations [ 836.500780][ T4235] usb 10-1: can't read configurations, error -22 [ 836.527161][ T4235] usb usb10-port1: attempt power cycle [ 836.671921][T11219] affs: No valid root block on device nullb0 [ 836.708914][T11219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.746312][T10038] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.818478][T10038] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 836.948460][T10038] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 836.958652][ T4235] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 837.095729][T10038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.269027][T10038] usb 6-1: config 0 descriptor?? [ 837.428295][T10038] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 838.027082][ T4235] usb 10-1: device descriptor read/8, error -71 [ 838.087390][T10038] dvb-usb: bulk message failed: -22 (3/0) [ 838.106862][T11225] loop5: detected capacity change from 0 to 512 [ 838.317076][T10038] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 838.409989][T10038] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 838.466050][T10038] usb 6-1: media controller created [ 838.498188][T10038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 838.556938][T10038] dvb-usb: bulk message failed: -22 (6/0) [ 838.564003][T10038] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 838.980551][T10038] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27 [ 839.133728][T11232] loop4: detected capacity change from 0 to 32768 [ 839.152693][T10038] dvb-usb: schedule remote query interval to 150 msecs. [ 839.159820][T10038] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 839.349098][T11232] JBD2: Ignoring recovery information on journal [ 839.357186][T11232] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 839.365467][T11232] JBD2: bad block at offset 32 [ 839.388928][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 839.427332][T11232] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 839.511283][ T4234] usb 6-1: USB disconnect, device number 11 [ 839.680725][ T4235] dvb-usb: error while querying for an remote control event. [ 840.108780][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 840.110279][ T4234] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 840.186662][T11247] loop9: detected capacity change from 0 to 16 [ 840.279604][T11247] erofs: (device loop9): mounted with root inode @ nid 36. [ 840.569724][T11257] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 841.339707][ T4234] libceph: connect (1)[c::]:6789 error -101 [ 841.348653][T11257] ceph: No mds server is up or the cluster is laggy [ 841.359246][ T4234] libceph: mon0 (1)[c::]:6789 connect error [ 842.003783][T11273] loop5: detected capacity change from 0 to 2048 [ 842.120761][T11273] NILFS (loop5): couldn't find nilfs on the device [ 842.235035][T11094] udevd[11094]: incorrect nilfs2 checksum on /dev/loop5 [ 842.681083][T10890] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 842.924207][T11297] tipc: Started in network mode [ 842.941066][T11297] tipc: Node identity caf459c2ff2b, cluster identity 4711 [ 842.966934][T11297] tipc: Enabled bearer , priority 0 [ 842.988726][T11297] device syzkaller0 entered promiscuous mode [ 843.031109][T11297] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 843.092273][T11297] tipc: Resetting bearer [ 843.149063][T11296] tipc: Resetting bearer [ 843.175732][T10890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.212410][T10890] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 843.242490][T10890] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 843.265519][T10890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.308138][T10890] usb 6-1: config 0 descriptor?? [ 843.343071][T11296] tipc: Disabling bearer [ 843.357443][T10890] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 843.364145][T10890] dvb-usb: bulk message failed: -22 (3/0) [ 843.396477][T10890] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 843.457010][T10890] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 843.464192][T10890] usb 6-1: media controller created [ 843.675002][T10890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 843.687660][T11289] dvb-usb: bulk message failed: -22 (33/0) [ 843.876412][T11318] loop9: detected capacity change from 0 to 2048 [ 844.331890][T10890] dvb-usb: bulk message failed: -22 (6/0) [ 844.338475][T10890] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 844.341078][T11319] loop5: detected capacity change from 0 to 512 [ 844.549358][T11318] NILFS (loop9): invalid segment: Magic number mismatch [ 844.557066][T11318] NILFS (loop9): trying rollback from an earlier position [ 844.730259][T11318] NILFS (loop9): recovery complete [ 844.953012][T10890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28 [ 845.122197][T11322] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 845.184007][T10890] dvb-usb: schedule remote query interval to 150 msecs. [ 845.252539][T10890] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 845.379627][T11327] loop6: detected capacity change from 0 to 16 [ 845.407467][T10890] dvb-usb: bulk message failed: -22 (1/0) [ 845.413313][T10890] dvb-usb: error while querying for an remote control event. [ 845.507877][ T4938] usb 6-1: USB disconnect, device number 12 [ 845.519939][T11327] erofs: (device loop6): mounted with root inode @ nid 36. [ 845.709553][ T4938] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 848.337997][ T4933] libceph: connect (1)[c::]:6789 error -101 [ 848.351028][T11363] ceph: No mds server is up or the cluster is laggy [ 848.359868][ T4933] libceph: mon0 (1)[c::]:6789 connect error [ 848.778864][T11375] loop6: detected capacity change from 0 to 2048 [ 850.285218][T11380] loop5: detected capacity change from 0 to 16 [ 850.339071][T11375] NILFS (loop6): invalid segment: Magic number mismatch [ 850.346189][T11375] NILFS (loop6): trying rollback from an earlier position [ 850.360029][T11375] NILFS (loop6): recovery complete [ 850.405408][T11384] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 850.507764][T11380] erofs: (device loop5): mounted with root inode @ nid 36. [ 851.276884][T10890] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 852.835470][T10890] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.491595][T10890] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 853.502368][T10890] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 853.511740][T10890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.526222][T10890] usb 10-1: config 0 descriptor?? [ 853.545494][T10890] usb 10-1: can't set config #0, error -71 [ 853.560370][T10890] usb 10-1: USB disconnect, device number 12 [ 856.769588][T11438] loop2: detected capacity change from 0 to 128 [ 857.177127][T11438] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 857.207140][T11451] loop9: detected capacity change from 0 to 128 [ 857.415479][T11438] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 857.427890][T11451] EXT4-fs (loop9): Test dummy encryption mode enabled [ 857.558587][T11455] loop6: detected capacity change from 0 to 2048 [ 858.283180][T11451] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 858.305731][T11451] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 858.325999][T11455] NILFS (loop6): invalid segment: Magic number mismatch [ 858.333088][T11455] NILFS (loop6): trying rollback from an earlier position [ 858.375665][T11455] NILFS (loop6): recovery complete [ 858.570515][T11438] affs: No valid root block on device nullb0 [ 858.669323][T11458] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 858.936232][ T4933] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 860.635569][ T4933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.675580][ T4933] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 860.691264][ T4933] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 860.769651][ T4933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.999713][ T4933] usb 5-1: config 0 descriptor?? [ 861.144784][ T4933] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 861.267884][ T4933] dvb-usb: bulk message failed: -22 (3/0) [ 861.456740][T11501] loop6: detected capacity change from 0 to 16 [ 861.479133][ T4933] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 861.493048][T11499] loop4: detected capacity change from 0 to 512 [ 861.581879][T11501] erofs: (device loop6): mounted with root inode @ nid 36. [ 861.602795][ T4933] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 861.661608][ T4933] usb 5-1: media controller created [ 861.699089][ T4933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 862.520666][ T4933] dvb-usb: bulk message failed: -22 (6/0) [ 862.527294][ T4933] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 862.544866][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 862.557548][ T4230] libceph: connect (1)[c::]:6789 error -101 [ 862.563750][ T4230] libceph: mon0 (1)[c::]:6789 connect error [ 862.571105][T11510] ceph: No mds server is up or the cluster is laggy [ 862.579626][ T4933] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 862.595603][ T4933] dvb-usb: schedule remote query interval to 150 msecs. [ 862.602899][ T4933] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 862.673981][ T4933] usb 5-1: USB disconnect, device number 8 [ 862.787201][ T4933] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 863.459467][T11537] loop4: detected capacity change from 0 to 128 [ 863.756961][T11537] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 863.795608][T11537] ext4 filesystem being mounted at /322/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 863.882291][T11537] affs: No valid root block on device nullb0 [ 864.163822][T11547] loop4: detected capacity change from 0 to 128 [ 864.290257][T11547] EXT4-fs (loop4): Test dummy encryption mode enabled [ 864.321302][T11547] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 864.371719][T11547] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 865.562220][T11579] loop9: detected capacity change from 0 to 16 [ 866.949131][T11579] erofs: (device loop9): mounted with root inode @ nid 36. [ 867.198069][T11586] ceph: No mds server is up or the cluster is laggy [ 867.205117][ T4234] libceph: connect (1)[c::]:6789 error -101 [ 867.216452][ T4234] libceph: mon0 (1)[c::]:6789 connect error [ 869.913908][T10890] libceph: connect (1)[c::]:6789 error -101 [ 869.920035][T10890] libceph: mon0 (1)[c::]:6789 connect error [ 869.935197][T11610] ceph: No mds server is up or the cluster is laggy [ 870.051960][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.061186][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.508669][T10890] libceph: connect (1)[c::]:6789 error -101 [ 871.984768][T10890] libceph: mon0 (1)[c::]:6789 connect error [ 872.011533][T11626] loop9: detected capacity change from 0 to 128 [ 872.394597][T11626] EXT4-fs (loop9): Test dummy encryption mode enabled [ 872.740469][T11626] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 872.772663][T11626] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 876.660340][T11651] ceph: No mds server is up or the cluster is laggy [ 876.689682][T11652] libceph: connect (1)[c::]:6789 error -101 [ 876.771670][T11659] loop9: detected capacity change from 0 to 16 [ 876.785102][T11652] libceph: mon0 (1)[c::]:6789 connect error [ 876.790587][T11659] erofs: (device loop9): mounted with root inode @ nid 36. [ 877.270244][ T7] libceph: connect (1)[c::]:6789 error -101 [ 877.466666][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 879.596501][T11688] affs: No valid root block on device nullb0 [ 879.638770][T11688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.265170][T11696] loop2: detected capacity change from 0 to 128 [ 882.382395][T11708] loop6: detected capacity change from 0 to 16 [ 883.964323][T11696] EXT4-fs (loop2): Test dummy encryption mode enabled [ 884.011658][T11708] erofs: (device loop6): mounted with root inode @ nid 36. [ 884.423712][T11696] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 885.364735][T11696] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 886.658211][T11733] loop6: detected capacity change from 0 to 2048 [ 886.751658][T11733] NILFS (loop6): invalid segment: Magic number mismatch [ 886.758838][T11733] NILFS (loop6): trying rollback from an earlier position [ 886.818953][T11733] NILFS (loop6): recovery complete [ 887.345425][T11734] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 888.014746][T11762] device syzkaller0 entered promiscuous mode [ 888.987363][T11781] affs: No valid root block on device nullb0 [ 889.020862][T11781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.365482][ T4938] Bluetooth: hci1: command 0x0409 tx timeout [ 891.108758][T11786] loop6: detected capacity change from 0 to 16 [ 891.203698][T11786] erofs: (device loop6): mounted with root inode @ nid 36. [ 891.216725][T11783] affs: No valid root block on device nullb0 [ 891.226545][T11783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.459389][T11749] chnl_net:caif_netlink_parms(): no params data found [ 892.216733][T11792] loop6: detected capacity change from 0 to 128 [ 892.241923][T11792] EXT4-fs (loop6): Test dummy encryption mode enabled [ 892.306026][T11792] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 892.455895][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 893.300117][T11792] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 893.366655][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.400506][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.417920][T11749] device bridge_slave_0 entered promiscuous mode [ 893.431698][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.442182][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.455601][T11749] device bridge_slave_1 entered promiscuous mode [ 893.622593][T11749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.156658][T11749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.335555][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 895.417246][T11749] team0: Port device team_slave_0 added [ 895.578902][T11844] tipc: Started in network mode [ 895.613162][T11844] tipc: Node identity 6a116771f6d3, cluster identity 4711 [ 895.620575][T11844] tipc: Enabled bearer , priority 0 [ 895.646771][T11749] team0: Port device team_slave_1 added [ 895.672652][T11844] tipc: Disabling bearer [ 895.702153][T11845] tipc: Enabled bearer , priority 0 [ 895.731922][T11749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.768572][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.851564][T11749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.866190][T11749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.873795][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.907673][T11749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.253632][ T4933] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 896.266618][T11845] device syzkaller0 entered promiscuous mode [ 896.435614][T11749] device hsr_slave_0 entered promiscuous mode [ 896.459214][T11749] device hsr_slave_1 entered promiscuous mode [ 896.474681][T11749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.487158][T11749] Cannot create hsr debugfs directory [ 896.508454][T11869] affs: No valid root block on device nullb0 [ 896.543009][T11865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.593639][T11875] loop2: detected capacity change from 0 to 128 [ 896.670824][T11875] EXT4-fs (loop2): Test dummy encryption mode enabled [ 896.725762][ T4933] usb 10-1: config 0 has no interfaces? [ 896.730294][T11875] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 896.735464][ T4933] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 896.756811][T11875] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 896.909711][ T4933] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.920048][ T4933] usb 10-1: config 0 descriptor?? [ 897.584600][T11652] Bluetooth: hci1: command 0x0419 tx timeout [ 897.664099][ T21] tipc: Node number set to 903829954 [ 897.710959][T11845] tipc: Resetting bearer [ 897.752429][T11901] tipc: Started in network mode [ 897.765459][T11901] tipc: Node identity 6e49d900cae2, cluster identity 4711 [ 897.767047][ T4803] usb 10-1: USB disconnect, device number 13 [ 897.783423][T11901] tipc: Enabled bearer , priority 0 [ 897.813064][T11840] tipc: Resetting bearer [ 897.849496][T11840] tipc: Disabling bearer [ 897.881283][T11904] device syzkaller0 entered promiscuous mode [ 897.999881][T11914] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 897.999881][T11914] program syz.2.1497 not setting count and/or reply_len properly [ 898.921560][T11913] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 898.921560][T11913] program syz.6.1498 not setting count and/or reply_len properly [ 899.017568][T11901] tipc: Resetting bearer [ 899.054583][ T4938] tipc: Node number set to 2762725632 [ 899.119251][T11900] tipc: Resetting bearer [ 899.143955][T11900] tipc: Disabling bearer [ 899.397861][T11652] libceph: connect (1)[c::]:6789 error -101 [ 899.417428][T11652] libceph: mon0 (1)[c::]:6789 connect error [ 899.430159][T11930] ceph: No mds server is up or the cluster is laggy [ 900.490328][T11942] loop6: detected capacity change from 0 to 128 [ 900.561481][T11942] EXT4-fs (loop6): Test dummy encryption mode enabled [ 900.764476][T11942] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 900.825588][T11942] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 900.987412][T11957] loop9: detected capacity change from 0 to 2048 [ 901.573480][T11957] NILFS (loop9): invalid segment: Magic number mismatch [ 901.581921][T11957] NILFS (loop9): trying rollback from an earlier position [ 901.612993][T11957] NILFS (loop9): recovery complete [ 901.631780][T11964] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 902.117919][T11749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 902.205897][T11980] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 902.205897][T11980] program syz.9.1508 not setting count and/or reply_len properly [ 903.338385][T11989] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 903.338385][T11989] program syz.6.1511 not setting count and/or reply_len properly [ 904.190336][T11749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 904.307974][T11749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 904.356565][T11749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 904.441158][T12001] tipc: Started in network mode [ 904.574540][T12001] tipc: Node identity 026b6e63b5f5, cluster identity 4711 [ 904.584621][T12001] tipc: Enabled bearer , priority 0 [ 904.597696][T11995] device syzkaller0 entered promiscuous mode [ 905.463744][T12001] tipc: Resetting bearer [ 905.571861][T12008] ceph: No mds server is up or the cluster is laggy [ 905.629513][ T7] libceph: connect (1)[c::]:6789 error -101 [ 905.675833][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 905.733325][T11994] tipc: Resetting bearer [ 905.773930][T11994] tipc: Disabling bearer [ 905.795956][T11652] tipc: Node number set to 3080613475 [ 905.934036][T11749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.991216][T11749] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.291343][T12029] loop2: detected capacity change from 0 to 2048 [ 907.285493][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 907.293476][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 907.334275][T12029] NILFS (loop2): invalid segment: Magic number mismatch [ 907.341414][T12029] NILFS (loop2): trying rollback from an earlier position [ 907.371042][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 907.382455][T12029] NILFS (loop2): recovery complete [ 907.384885][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 907.397496][T12035] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.410532][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.417689][ T8854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.428501][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 907.445419][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 907.455068][T12033] ceph: No mds server is up or the cluster is laggy [ 907.458158][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.463454][ T4803] libceph: connect (1)[c::]:6789 error -101 [ 907.468898][ T8854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.488394][ T4803] libceph: mon0 (1)[c::]:6789 connect error [ 907.505590][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 907.513889][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 907.525900][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 907.609424][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 907.631351][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 907.663440][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 907.691600][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 907.753274][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 907.802902][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 907.813043][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 907.823656][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 907.844050][T12048] affs: No valid root block on device nullb0 [ 907.861990][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 907.927641][T12047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.972500][T11749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 909.203665][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 909.215631][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 909.240685][T11749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.258320][T12065] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 909.258320][T12065] program syz.9.1525 not setting count and/or reply_len properly [ 909.354039][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 909.368920][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 910.377115][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 910.414567][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 910.453852][T11749] device veth0_vlan entered promiscuous mode [ 910.471741][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 910.506450][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 910.543774][T11749] device veth1_vlan entered promiscuous mode [ 910.621584][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 910.653292][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 910.673339][T11749] device veth0_macvtap entered promiscuous mode [ 910.692342][T11749] device veth1_macvtap entered promiscuous mode [ 910.725938][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.881198][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.893854][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.912855][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.961432][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.178096][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.196278][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.211488][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.348749][T12106] loop4: detected capacity change from 0 to 2048 [ 912.036557][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.049235][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.069739][T11749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.084097][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 912.096217][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 912.151486][T12106] NILFS (loop4): invalid segment: Magic number mismatch [ 912.158716][T12106] NILFS (loop4): trying rollback from an earlier position [ 912.170933][ T4938] libceph: connect (1)[c::]:6789 error -101 [ 912.177255][ T4938] libceph: mon0 (1)[c::]:6789 connect error [ 912.187878][T12109] ceph: No mds server is up or the cluster is laggy [ 912.195855][T12106] NILFS (loop4): recovery complete [ 912.206383][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 912.244629][T12112] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 912.314497][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 912.350606][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.435799][ T4938] libceph: connect (1)[c::]:6789 error -101 [ 912.441865][ T4938] libceph: mon0 (1)[c::]:6789 connect error [ 912.452595][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.465061][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.514691][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.295671][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.345170][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.364568][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.385579][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.396265][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.408227][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.426645][T11749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.437687][T11749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.446653][T11749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.455845][T11749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.478166][T11749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.514227][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 913.543744][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 916.484619][ T5047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.508957][ T5047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.991659][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 917.705784][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.713720][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.796882][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 918.616880][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1544'. [ 919.514428][T12174] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 919.514428][T12174] program syz.6.1545 not setting count and/or reply_len properly [ 919.547815][T12175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.579288][T12171] affs: No valid root block on device nullb0 [ 923.401560][T12177] FS-Cache: Duplicate cookie detected [ 923.407967][T12177] FS-Cache: O-cookie c=00000013 [p=00000006 fl=222 nc=0 na=1] [ 923.415729][T12177] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff8880771b3800 [ 923.423846][T12177] FS-Cache: O-key=[4] '73797a30' [ 923.428894][T12177] FS-Cache: N-cookie c=00000019 [p=00000006 fl=2 nc=0 na=1] [ 923.436215][T12177] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff88807c327800 [ 923.444295][T12177] FS-Cache: N-key=[4] '73797a30' [ 923.584399][T12204] loop2: detected capacity change from 0 to 128 [ 923.795622][T12201] device syzkaller0 entered promiscuous mode [ 923.828627][T12204] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 923.841240][T12204] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 924.317979][T12204] affs: No valid root block on device nullb0 [ 924.552706][T12222] affs: No valid root block on device nullb0 [ 924.585820][T12222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.490806][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.498063][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.422673][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 934.800484][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 937.492392][T12323] ceph: No mds server is up or the cluster is laggy [ 937.501225][ T4938] libceph: connect (1)[c::]:6789 error -101 [ 937.524666][ T4938] libceph: mon0 (1)[c::]:6789 connect error [ 938.683316][ T4938] libceph: connect (1)[c::]:6789 error -101 [ 938.689413][ T4938] libceph: mon0 (1)[c::]:6789 connect error [ 939.082906][T12349] tipc: Enabled bearer , priority 0 [ 939.098515][T12349] device syzkaller0 entered promiscuous mode [ 939.267682][T12349] tipc: Resetting bearer [ 939.365021][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'. [ 940.246347][T12348] tipc: Resetting bearer [ 940.547384][T12348] tipc: Disabling bearer [ 940.780653][T12353] ceph: No mds server is up or the cluster is laggy [ 940.787816][ T4938] libceph: connect (1)[c::]:6789 error -101 [ 940.801341][ T4938] libceph: mon0 (1)[c::]:6789 connect error [ 941.867301][ T4197] libceph: connect (1)[c::]:6789 error -101 [ 941.874929][ T4197] libceph: mon0 (1)[c::]:6789 connect error [ 942.520139][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1588'. [ 942.578036][ T4197] libceph: connect (1)[c::]:6789 error -101 [ 942.586790][ T4197] libceph: mon0 (1)[c::]:6789 connect error [ 944.168347][T12395] device syzkaller0 entered promiscuous mode [ 944.786610][T12420] No such timeout policy "syz1" [ 947.829694][T12444] ceph: No mds server is up or the cluster is laggy [ 947.861799][ T13] libceph: connect (1)[c::]:6789 error -101 [ 947.967260][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 949.218902][T12467] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 950.257578][T12465] ceph: No mds server is up or the cluster is laggy [ 950.264670][ T4803] libceph: connect (1)[c::]:6789 error -101 [ 950.271982][ T4803] libceph: mon0 (1)[c::]:6789 connect error [ 950.463462][T12476] device syzkaller0 entered promiscuous mode [ 951.740127][ T4203] Bluetooth: Frame is too long (len 16, expected len 4) [ 951.798897][T12490] md/raid10:md0: not clean -- starting background reconstruction [ 951.809586][T12490] md/raid10:md0: active with 1 out of 2 devices [ 951.832843][T12490] md0: detected capacity change from 0 to 2048 [ 951.997138][T12507] md: resync of RAID array md0 [ 952.062074][T12507] md: md0: resync done. [ 952.122377][T12511] md: recovery of RAID array md0 [ 952.209361][T12511] md: md0: recovery done. [ 957.103755][T12553] No such timeout policy "syz1" [ 958.011710][ T13] libceph: connect (1)[c::]:6789 error -101 [ 958.030292][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 958.040071][T12549] ceph: No mds server is up or the cluster is laggy [ 958.355717][ T4951] libceph: connect (1)[c::]:6789 error -101 [ 958.361990][ T4951] libceph: mon0 (1)[c::]:6789 connect error [ 959.320068][T12574] No such timeout policy "syz1" [ 959.350777][T12577] No such timeout policy "syz1" [ 961.478465][T12587] ceph: No mds server is up or the cluster is laggy [ 961.487417][T12177] libceph: connect (1)[c::]:6789 error -101 [ 961.493412][T12177] libceph: mon0 (1)[c::]:6789 connect error [ 962.182736][T12601] ceph: No mds server is up or the cluster is laggy [ 962.189794][ T4937] libceph: connect (1)[c::]:6789 error -101 [ 962.195915][ T4937] libceph: mon0 (1)[c::]:6789 connect error [ 962.565790][ T13] libceph: connect (1)[c::]:6789 error -101 [ 963.575101][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 964.278096][ T4937] libceph: connect (1)[c::]:6789 error -101 [ 964.317697][ T4937] libceph: mon0 (1)[c::]:6789 connect error [ 964.946836][T12632] loop3: detected capacity change from 0 to 128 [ 965.071658][T12632] EXT4-fs (loop3): Test dummy encryption mode enabled [ 965.283847][T12636] loop4: detected capacity change from 0 to 2048 [ 965.401951][T12636] NILFS (loop4): invalid segment: Magic number mismatch [ 965.409295][T12636] NILFS (loop4): trying rollback from an earlier position [ 965.470667][T12636] NILFS (loop4): recovery complete [ 965.619404][T12638] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 965.716871][T12632] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 965.753520][T12632] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 966.313018][T12643] tipc: Enabled bearer , priority 0 [ 966.320655][T12643] device syzkaller0 entered promiscuous mode [ 966.479589][T12654] ceph: No mds server is up or the cluster is laggy [ 966.488384][ T4803] libceph: connect (1)[c::]:6789 error -101 [ 966.512300][ T4803] libceph: mon0 (1)[c::]:6789 connect error [ 966.765707][T12643] tipc: Resetting bearer [ 967.115594][T12640] tipc: Resetting bearer [ 967.195993][T12640] tipc: Disabling bearer [ 967.991126][T12668] ceph: No mds server is up or the cluster is laggy [ 968.001909][ T13] libceph: connect (1)[c::]:6789 error -101 [ 968.013929][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 968.105065][T12682] No such timeout policy "syz1" [ 968.375726][T12682] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 982.542237][T12822] loop9: detected capacity change from 0 to 128 [ 982.754274][T12822] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 984.119220][T12835] device syzkaller0 entered promiscuous mode [ 985.558884][T12860] md: couldn't update array info. -22 [ 985.592460][T12860] md: could not open device unknown-block(1,1). [ 986.266230][T12860] md: md_import_device returned -16 [ 988.447161][T12888] No such timeout policy "syz1" [ 990.364493][T12908] loop2: detected capacity change from 0 to 128 [ 990.564887][T12908] EXT4-fs (loop2): Test dummy encryption mode enabled [ 991.622370][T12908] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 991.685453][T12908] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 992.656193][T12937] loop3: detected capacity change from 0 to 128 [ 992.826398][T12937] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 992.945713][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.952592][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.794201][T12946] loop2: detected capacity change from 0 to 128 [ 995.261372][T12946] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 997.802988][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1702'. [ 999.258806][T13024] No such timeout policy "syz1" [ 1001.504842][T13052] tipc: Enabled bearer , priority 0 [ 1001.517399][T13052] device syzkaller0 entered promiscuous mode [ 1001.887863][T13052] tipc: Resetting bearer [ 1001.928764][T13050] tipc: Resetting bearer [ 1003.186117][T13050] tipc: Disabling bearer [ 1003.614822][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 1003.659238][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 1004.413939][T13074] ceph: No mds server is up or the cluster is laggy [ 1004.588367][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 1004.594437][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 1007.924396][T13120] tipc: Started in network mode [ 1007.948539][T13120] tipc: Node identity ea75c8227ba1, cluster identity 4711 [ 1007.990882][T13120] tipc: Enabled bearer , priority 0 [ 1008.047031][T13122] device syzkaller0 entered promiscuous mode [ 1008.146324][T13120] tipc: Resetting bearer [ 1008.215598][T13115] tipc: Resetting bearer [ 1008.280288][T13115] tipc: Disabling bearer [ 1011.051851][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1734'. [ 1011.220233][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 1011.921195][ T4933] libceph: connect (1)[c::]:6789 error -101 [ 1011.964348][ T4933] libceph: mon0 (1)[c::]:6789 connect error [ 1012.039027][T13169] ceph: No mds server is up or the cluster is laggy [ 1012.052721][ T4933] libceph: connect (1)[c::]:6789 error -101 [ 1012.109121][ T4933] libceph: mon0 (1)[c::]:6789 connect error [ 1015.037944][T13195] device syzkaller0 entered promiscuous mode [ 1015.075746][T13210] tipc: Enabling of bearer rejected, failed to enable media [ 1015.271874][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1747'. [ 1017.089146][T13228] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 1017.089146][T13228] program syz.4.1748 not setting count and/or reply_len properly [ 1018.190686][T13238] loop6: detected capacity change from 0 to 4096 [ 1019.755510][T13261] No such timeout policy "syz1" [ 1020.685151][T13271] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 1020.685151][T13271] program syz.2.1759 not setting count and/or reply_len properly [ 1022.459125][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1760'. [ 1022.666324][T13283] tipc: Enabled bearer , priority 0 [ 1022.697105][T13283] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 1022.763880][T13283] tipc: Resetting bearer [ 1022.781612][T13280] tipc: Disabling bearer [ 1022.977870][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 1023.074362][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 1023.172264][T13290] ceph: No mds server is up or the cluster is laggy [ 1023.263615][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 1023.359386][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 1024.405132][T13299] device syzkaller0 entered promiscuous mode [ 1024.590608][T13311] device syzkaller0 entered promiscuous mode [ 1025.460397][T13298] netlink: 'syz.4.1765': attribute type 4 has an invalid length. [ 1026.509072][T13347] loop3: detected capacity change from 0 to 128 [ 1026.778453][T13347] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1026.904928][T13347] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 1027.041786][T13347] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.298232][T13367] loop2: detected capacity change from 0 to 4096 [ 1027.434371][T13367] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1028.425419][T13367] EXT4-fs (loop2): inline encryption not supported [ 1028.432037][T13367] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1028.509011][T13367] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 1028.576587][T13367] System zones: 0-5 [ 1028.582922][T13367] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 1030.091798][T13398] tipc: Cannot configure node identity twice [ 1030.108229][ T13] libceph: connect (1)[c::]:6789 error -101 [ 1030.114671][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 1030.142418][T13392] ceph: No mds server is up or the cluster is laggy [ 1030.302695][T13396] netlink: 'syz.9.1780': attribute type 4 has an invalid length. [ 1030.420086][T13407] loop3: detected capacity change from 0 to 512 [ 1031.531221][T13407] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,nombcache,dioread_lock,errors=remount-ro,nodiscard,block_validity,. Quota mode: writeback. [ 1031.675898][T13407] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.889910][T13450] ceph: No mds server is up or the cluster is laggy [ 1034.898366][ T21] libceph: connect (1)[c::]:6789 error -101 [ 1034.928466][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 1035.683127][T13483] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1035.683127][T13483] program syz.6.1798 not setting count and/or reply_len properly [ 1036.277806][T13487] loop3: detected capacity change from 0 to 128 [ 1036.305938][T13464] ceph: No mds server is up or the cluster is laggy [ 1036.324833][T12177] libceph: connect (1)[c::]:6789 error -101 [ 1036.331125][T12177] libceph: mon0 (1)[c::]:6789 connect error [ 1036.501303][T13487] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1036.595615][T13487] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.192803][T13515] loop2: detected capacity change from 0 to 512 [ 1039.351138][T13514] device syzkaller0 entered promiscuous mode [ 1039.440199][T13515] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,nombcache,dioread_lock,errors=remount-ro,nodiscard,block_validity,. Quota mode: writeback. [ 1039.469566][T13515] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.541030][ T4933] libceph: connect (1)[c::]:6789 error -101 [ 1039.557497][ T4933] libceph: mon0 (1)[c::]:6789 connect error [ 1039.931294][T13524] ceph: No mds server is up or the cluster is laggy [ 1040.365983][ T4933] libceph: connect (1)[c::]:6789 error -101 [ 1040.372065][ T4933] libceph: mon0 (1)[c::]:6789 connect error [ 1040.574556][T13541] input: syz0 as /devices/virtual/input/input30 [ 1040.680791][T13551] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1040.680791][T13551] program syz.2.1809 not setting count and/or reply_len properly [ 1041.080328][T13546] loop6: detected capacity change from 0 to 4096 [ 1041.303053][T13546] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1041.409214][T13546] EXT4-fs (loop6): inline encryption not supported [ 1041.511412][T13546] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1041.606577][T13546] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 1041.615824][T13546] System zones: 0-5 [ 1041.624504][T13546] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 1044.446514][T13497] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 401: padding at end of block bitmap is not set [ 1044.575571][T13497] EXT4-fs (loop6): Remounting filesystem read-only [ 1044.746750][T13586] No such timeout policy "syz1" [ 1046.178144][ T4933] libceph: connect (1)[c::]:6789 error -101 [ 1046.188784][T13595] ceph: No mds server is up or the cluster is laggy [ 1046.216053][ T4933] libceph: mon0 (1)[c::]:6789 connect error [ 1047.093181][T13594] ceph: No mds server is up or the cluster is laggy [ 1047.112330][T10038] libceph: connect (1)[c::]:6789 error -101 [ 1048.061416][T10038] libceph: mon0 (1)[c::]:6789 connect error [ 1048.077733][T10038] libceph: connect (1)[c::]:6789 error -101 [ 1048.094118][T10038] libceph: mon0 (1)[c::]:6789 connect error [ 1050.409617][T13620] ceph: No mds server is up or the cluster is laggy [ 1050.439116][T11652] libceph: connect (1)[c::]:6789 error -101 [ 1050.468179][T11652] libceph: mon0 (1)[c::]:6789 connect error [ 1050.550512][T11652] libceph: connect (1)[c::]:6789 error -101 [ 1050.600426][T11652] libceph: mon0 (1)[c::]:6789 connect error [ 1050.742743][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 1050.754013][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 1050.845435][T13628] No such timeout policy "syz1" [ 1054.572833][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.579764][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.472733][T13653] ceph: No mds server is up or the cluster is laggy [ 1055.671940][ T4937] libceph: connect (1)[c::]:6789 error -101 [ 1055.705758][ T4937] libceph: mon0 (1)[c::]:6789 connect error [ 1055.724523][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 1055.730715][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 1055.737720][T13651] ceph: No mds server is up or the cluster is laggy [ 1056.603653][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 1056.661287][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 1056.670771][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 1056.677072][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 1058.216583][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 1058.222756][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 1059.213446][ T4937] libceph: connect (1)[c::]:6789 error -101 [ 1059.221375][ T4937] libceph: mon0 (1)[c::]:6789 connect error [ 1059.845453][T13684] device syzkaller0 entered promiscuous mode [ 1060.504824][T13684] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 1061.848500][T13711] loop6: detected capacity change from 0 to 1024 [ 1063.686121][T13730] loop4: detected capacity change from 0 to 128 [ 1063.774002][T13730] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1066.676396][T13769] loop9: detected capacity change from 0 to 128 [ 1066.769685][T13769] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1067.654071][T13773] device syzkaller0 entered promiscuous mode [ 1067.864771][T13790] device syzkaller0 entered promiscuous mode [ 1067.896175][T13788] loop9: detected capacity change from 0 to 2048 [ 1067.914238][T13790] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 1067.959820][T13788] NILFS (loop9): couldn't find nilfs on the device [ 1068.034826][T13741] udevd[13741]: incorrect nilfs2 checksum on /dev/loop9 [ 1068.276694][T13798] ceph: No mds server is up or the cluster is laggy [ 1068.354855][T12177] libceph: connect (1)[c::]:6789 error -101 [ 1068.361163][T12177] libceph: mon0 (1)[c::]:6789 connect error [ 1068.676071][T12177] libceph: connect (1)[c::]:6789 error -101 [ 1068.682128][T12177] libceph: mon0 (1)[c::]:6789 connect error [ 1070.194170][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 1070.221440][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 1071.011265][T13823] loop6: detected capacity change from 0 to 512 [ 1072.260950][T13842] tipc: Cannot configure node identity twice [ 1073.823387][T13823] EXT4-fs warning (device loop6): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop6. [ 1073.838284][T13851] device syzkaller0 entered promiscuous mode [ 1074.043942][T13862] device syzkaller0 entered promiscuous mode [ 1074.086323][T13862] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 1074.214803][T13872] No such timeout policy "syz1" [ 1074.436102][T13874] loop9: detected capacity change from 0 to 128 [ 1074.770214][T13874] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1075.226992][T13874] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 1075.249989][T13874] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.143235][T13916] device syzkaller0 entered promiscuous mode [ 1087.115308][ T4233] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1088.698251][T13943] ceph: No mds server is up or the cluster is laggy [ 1088.710907][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 1088.754380][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 1088.825366][ T4233] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.034603][ T4233] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1089.043661][ T4233] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1089.053429][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.066134][ T4233] usb 3-1: config 0 descriptor?? [ 1089.106928][ T4233] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1089.121013][ T4233] dvb-usb: bulk message failed: -22 (3/0) [ 1089.176028][ T4233] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1089.199369][T13949] ceph: No mds server is up or the cluster is laggy [ 1089.211016][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 1089.235585][ T4233] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1089.255294][ T4233] usb 3-1: media controller created [ 1089.261662][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1089.272858][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 1089.273716][ T4233] dvb-usb: bulk message failed: -22 (6/0) [ 1089.286161][ T4233] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1089.317831][T13936] dibusb: i2c wr: len=61 is too big! [ 1089.317831][T13936] [ 1089.338019][ T4233] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 1089.373745][ T4233] dvb-usb: schedule remote query interval to 150 msecs. [ 1089.402709][ T4233] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1089.429469][T13936] loop2: detected capacity change from 0 to 512 [ 1089.622325][ T4230] dvb-usb: bulk message failed: -22 (1/0) [ 1089.669884][ T4230] dvb-usb: error while querying for an remote control event. [ 1089.973815][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1089.980023][ T23] dvb-usb: error while querying for an remote control event. [ 1090.155341][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1090.161296][ T23] dvb-usb: error while querying for an remote control event. [ 1090.413997][T10038] usb 3-1: USB disconnect, device number 3 [ 1092.193218][ T4230] Bluetooth: hci1: command 0x0409 tx timeout [ 1092.211047][T10038] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1092.406381][ T4354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.036468][ T4354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.208939][ T4235] Bluetooth: hci5: command 0x0409 tx timeout [ 1094.673595][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 1095.178882][ T4354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.655529][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 1096.693012][ T4354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.827673][T14027] loop9: detected capacity change from 0 to 4096 [ 1096.894700][T13976] chnl_net:caif_netlink_parms(): no params data found [ 1096.905597][T14027] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1096.912443][T14027] EXT4-fs (loop9): inline encryption not supported [ 1096.969016][T14027] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 1097.000880][T14027] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 1097.022558][T14027] System zones: 0-5 [ 1097.066607][T13983] chnl_net:caif_netlink_parms(): no params data found [ 1097.112218][T14027] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 1097.146270][ T4235] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1097.165893][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 1097.387786][T13976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.395153][T13976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.403847][T13976] device bridge_slave_0 entered promiscuous mode [ 1097.412766][T13976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.420241][T13976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.428714][T13976] device bridge_slave_1 entered promiscuous mode [ 1097.634077][T13976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.700254][ T4354] tipc: Left network mode [ 1097.750300][T13976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.886375][T13983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.902853][T13983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.932417][T13983] device bridge_slave_0 entered promiscuous mode [ 1097.990788][T13983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.015872][ T4235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.035745][T13983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.050293][ T4235] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1098.082406][T13983] device bridge_slave_1 entered promiscuous mode [ 1098.096460][ T4235] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1098.134150][T13976] team0: Port device team_slave_0 added [ 1098.158306][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.233080][ T4235] usb 3-1: config 0 descriptor?? [ 1098.241511][T13976] team0: Port device team_slave_1 added [ 1098.277496][T13983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.296632][T13983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.310250][ T4235] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1098.333991][ T4235] dvb-usb: bulk message failed: -22 (3/0) [ 1098.378630][ T4235] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1098.609328][T14030] dibusb: i2c wr: len=61 is too big! [ 1098.609328][T14030] [ 1098.685427][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 1098.910751][T14073] loop2: detected capacity change from 0 to 512 [ 1099.850449][ T1109] Bluetooth: hci1: command 0x0419 tx timeout [ 1100.186424][T14039] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 401: padding at end of block bitmap is not set [ 1100.218668][T14039] EXT4-fs (loop9): Remounting filesystem read-only [ 1100.221975][ T4235] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1100.244136][ T4235] usb 3-1: media controller created [ 1100.254730][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1100.266343][ T4235] dvb-usb: bulk message failed: -22 (6/0) [ 1100.272191][ T4235] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1100.326756][ T4235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33 [ 1100.354712][T13983] team0: Port device team_slave_0 added [ 1100.362801][ T4235] dvb-usb: schedule remote query interval to 150 msecs. [ 1100.379657][T13976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.391043][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.392674][ T4235] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1100.438817][T13976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.461144][T13983] team0: Port device team_slave_1 added [ 1100.489459][T13976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.513509][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.546542][ T4235] usb 3-1: USB disconnect, device number 4 [ 1100.585028][T13976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.765373][ T4230] Bluetooth: hci5: command 0x0419 tx timeout [ 1100.880766][T13983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.901214][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.033635][T13983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.179538][T13976] device hsr_slave_0 entered promiscuous mode [ 1101.216097][T13976] device hsr_slave_1 entered promiscuous mode [ 1101.267731][ T4235] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1101.287653][T13976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1101.299192][T13976] Cannot create hsr debugfs directory [ 1101.319381][T13983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.338913][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.458606][T13983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.168259][T13983] device hsr_slave_0 entered promiscuous mode [ 1102.191355][T13983] device hsr_slave_1 entered promiscuous mode [ 1102.219864][T13983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1102.245311][T13983] Cannot create hsr debugfs directory [ 1102.973880][T14125] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 1106.487401][T14156] No such timeout policy "syz1" [ 1108.905759][ T4354] device hsr_slave_0 left promiscuous mode [ 1108.952695][ T4354] device hsr_slave_1 left promiscuous mode [ 1108.966330][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.004610][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.035442][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.212387][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.221504][ T4354] device bridge_slave_1 left promiscuous mode [ 1109.355646][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.987963][ T4354] device bridge_slave_0 left promiscuous mode [ 1109.999131][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.032473][ T4354] device veth1_macvtap left promiscuous mode [ 1110.049075][ T4354] device veth0_macvtap left promiscuous mode [ 1110.065310][ T4354] device veth1_vlan left promiscuous mode [ 1110.076154][ T4354] device veth0_vlan left promiscuous mode [ 1110.226119][T10038] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1110.425488][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 1110.442730][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 1110.455763][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.473620][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.546876][ T4354] bond0 (unregistering): Released all slaves [ 1110.682724][T14183] device syzkaller0 entered promiscuous mode [ 1110.736256][T10038] usb 10-1: device descriptor read/all, error -71 [ 1112.893867][T14199] md: couldn't update array info. -22 [ 1112.918551][T14199] md: could not open device unknown-block(1,1). [ 1112.925917][T14199] md: md_import_device returned -16 [ 1113.132402][T14204] loop9: detected capacity change from 0 to 4096 [ 1113.214219][T14204] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1113.243529][T14204] EXT4-fs (loop9): inline encryption not supported [ 1113.276128][T14204] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 1113.347091][T14204] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 1113.375393][T14204] System zones: 0-5 [ 1113.401560][T14204] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 1113.895700][T14211] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 401: padding at end of block bitmap is not set [ 1114.094677][T14211] EXT4-fs (loop9): Remounting filesystem read-only [ 1116.208862][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.215581][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.749260][T14243] No such timeout policy "syz1" [ 1117.298150][T14247] device syzkaller0 entered promiscuous mode [ 1117.502559][T14254] device syzkaller0 entered promiscuous mode [ 1120.978987][ T4689] libceph: connect (1)[c::]:6789 error -101 [ 1120.988843][T14303] ceph: No mds server is up or the cluster is laggy [ 1121.028187][ T4689] libceph: mon0 (1)[c::]:6789 connect error [ 1121.756210][T13976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1121.781494][T13976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1121.798871][T13976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1121.933651][T13976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1122.970807][T13983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1123.141009][T13983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1123.413919][T13983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1123.637846][T13983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1123.905430][T13976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.959846][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1124.007885][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1124.049770][T13976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.181373][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1124.203686][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1124.255870][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.263036][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.375282][ T4689] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1125.544116][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1125.576190][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1125.626284][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1125.683059][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.690230][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.698188][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1125.707812][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1125.732606][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1125.775467][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1125.814415][T13976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1125.940347][ T21] libceph: connect (1)[c::]:6789 error -101 [ 1125.955775][T14359] ceph: No mds server is up or the cluster is laggy [ 1125.964072][T13976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1125.981969][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 1125.995484][ T4689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.046111][ T4689] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1126.169608][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1126.178003][ T4689] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1126.248414][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1126.288304][ T4689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.379836][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1126.461704][ T4689] usb 5-1: config 0 descriptor?? [ 1126.538224][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1126.666739][ T4689] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1126.675704][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1126.684491][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1126.693696][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1126.704999][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1126.712578][ T4689] dvb-usb: bulk message failed: -22 (3/0) [ 1126.783275][ T4689] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1126.794021][T14340] dibusb: i2c wr: len=61 is too big! [ 1126.794021][T14340] [ 1126.839460][T13983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.852358][ T4803] libceph: connect (1)[c::]:6789 error -101 [ 1126.858896][ T4803] libceph: mon0 (1)[c::]:6789 connect error [ 1126.885570][ T4689] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1126.903475][T14370] loop4: detected capacity change from 0 to 512 [ 1126.935457][ T4689] usb 5-1: media controller created [ 1126.942784][ T4689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1126.952806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1126.965870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1127.021716][T13983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.050333][ T4689] dvb-usb: bulk message failed: -22 (6/0) [ 1127.067423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1127.084645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1127.094055][ T4689] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1127.124701][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.131899][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.156691][ T4689] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 1127.192588][ T4689] dvb-usb: schedule remote query interval to 150 msecs. [ 1127.210393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1127.223632][ T4689] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1127.241848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1127.288660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1127.317165][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.324302][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1127.333235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1127.372691][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1127.381429][ T4803] dvb-usb: bulk message failed: -22 (1/0) [ 1127.470683][ T4803] dvb-usb: error while querying for an remote control event. [ 1127.604627][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1127.729776][T12177] usb 5-1: USB disconnect, device number 9 [ 1127.961950][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1127.982422][T12177] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1128.013627][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1128.165432][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1128.174986][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1128.260657][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1128.331236][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1128.652220][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1128.806498][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1128.952794][T13976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.608354][T13983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1129.686027][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1129.693594][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1129.750086][T14395] loop9: detected capacity change from 0 to 2048 [ 1129.789792][T14395] NILFS (loop9): couldn't find nilfs on the device [ 1129.832627][T13961] udevd[13961]: incorrect nilfs2 checksum on /dev/loop9 [ 1131.212986][ T4350] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.783670][T14413] ceph: No mds server is up or the cluster is laggy [ 1131.794165][ T4689] libceph: connect (1)[c::]:6789 error -101 [ 1131.856796][ T4689] libceph: mon0 (1)[c::]:6789 connect error [ 1132.121088][ T4350] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.169591][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 1132.183975][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 1132.584166][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1132.639072][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1132.902081][ T4689] libceph: connect (1)[c::]:6789 error -101 [ 1132.908210][ T4689] libceph: mon0 (1)[c::]:6789 connect error [ 1133.027286][ T4350] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.005485][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1134.013080][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1134.049275][T13976] device veth0_vlan entered promiscuous mode [ 1134.080461][ T4350] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.155487][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1134.181464][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1134.220841][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1134.278104][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1134.296208][T13983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.499671][T13976] device veth1_vlan entered promiscuous mode [ 1135.637219][T13976] device veth0_macvtap entered promiscuous mode [ 1135.650307][T14460] loop9: detected capacity change from 0 to 2048 [ 1135.686025][T13976] device veth1_macvtap entered promiscuous mode [ 1135.766039][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.802684][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.836615][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.938270][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.981448][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.035507][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.070195][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.091500][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.107497][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.123063][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.186895][T13976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.203413][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1136.217248][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1136.226202][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1136.247684][T14460] NILFS (loop9): couldn't find nilfs on the device [ 1136.316615][T14464] udevd[14464]: incorrect nilfs2 checksum on /dev/loop9 [ 1136.381936][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1136.421443][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1136.494604][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1136.513182][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1136.523560][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1136.642987][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.692253][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.029457][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.319252][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.375209][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.435244][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.491144][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.501766][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.511699][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.522191][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.534335][T13976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.595989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1137.622318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1137.641495][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1137.670011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1137.766966][T13976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.816843][T13976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.287248][T13976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.859230][T13976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.711973][T13983] device veth0_vlan entered promiscuous mode [ 1139.757317][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1139.777496][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1139.874513][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1139.899243][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1139.933415][T13983] device veth1_vlan entered promiscuous mode [ 1140.445539][T14517] loop2: detected capacity change from 0 to 2048 [ 1140.515816][T14517] NILFS (loop2): couldn't find nilfs on the device [ 1140.539721][T11828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.571373][T11828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.876922][T14493] udevd[14493]: incorrect nilfs2 checksum on /dev/loop2 [ 1141.099521][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1141.133721][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.150709][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.251978][T11828] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1141.260298][T11828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1141.270235][T11828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1141.283222][T13983] device veth0_macvtap entered promiscuous mode [ 1141.337954][T13983] device veth1_macvtap entered promiscuous mode [ 1141.443597][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.481302][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.245268][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.276479][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.288794][T14549] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1142.324071][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.345401][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.501217][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.700050][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.724372][ T4803] libceph: connect (1)[c::]:6789 error -101 [ 1142.731006][ T4803] libceph: mon0 (1)[c::]:6789 connect error [ 1142.739026][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.761022][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.771431][T14550] ceph: No mds server is up or the cluster is laggy [ 1142.787093][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.805947][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.962348][T13983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.988905][T14535] device syzkaller0 entered promiscuous mode [ 1142.998238][ T4350] tipc: Left network mode [ 1143.036860][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 1143.042864][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 1143.266613][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1143.281832][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1143.297872][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1143.314015][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1144.065852][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.090027][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.100633][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.111247][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.136016][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.155204][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.181222][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.208150][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.225610][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.242787][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.257482][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.274604][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.305056][T13983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.331406][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1144.872546][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1145.224134][T13983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.242738][T13983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.256374][T13983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.284627][T13983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.391438][T14011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.415975][T14011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.482019][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1146.998029][T14011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.063484][T14011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.154555][T14011] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1150.311980][T10038] libceph: connect (1)[c::]:6789 error -101 [ 1150.319137][T10038] libceph: mon0 (1)[c::]:6789 connect error [ 1150.349392][T14610] ceph: No mds server is up or the cluster is laggy [ 1150.598056][T14617] device syzkaller0 entered promiscuous mode [ 1151.942960][ T4350] device hsr_slave_0 left promiscuous mode [ 1152.001486][ T4350] device hsr_slave_1 left promiscuous mode [ 1152.033675][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.137264][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.239200][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1152.265316][ T4230] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1152.341615][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.444970][ T4350] device bridge_slave_1 left promiscuous mode [ 1152.517865][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.630264][ T4350] device bridge_slave_0 left promiscuous mode [ 1152.699247][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.761251][ T4350] device veth1_macvtap left promiscuous mode [ 1152.775267][ T4350] device veth0_macvtap left promiscuous mode [ 1152.782273][ T4350] device veth1_vlan left promiscuous mode [ 1152.805588][ T4350] device veth0_vlan left promiscuous mode [ 1153.176812][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.426668][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1153.435752][ T4230] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1153.444876][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.468319][ T4230] usb 1-1: config 0 descriptor?? [ 1154.244678][ T4230] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1154.255124][T14662] ceph: No mds server is up or the cluster is laggy [ 1154.324536][ T4230] dvb-usb: bulk message failed: -22 (3/0) [ 1154.334340][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 1154.340625][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 1154.347054][ T4230] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1154.375521][ T4230] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1154.382682][ T4230] usb 1-1: media controller created [ 1154.425492][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1154.439137][T14635] dibusb: i2c wr: len=61 is too big! [ 1154.439137][T14635] [ 1154.514154][T14637] loop0: detected capacity change from 0 to 512 [ 1154.577497][ T4230] dvb-usb: bulk message failed: -22 (6/0) [ 1154.583852][ T4230] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1154.640664][ T4803] libceph: connect (1)[c::]:6789 error -101 [ 1154.648458][ T4803] libceph: mon0 (1)[c::]:6789 connect error [ 1154.674613][ T4230] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 1154.745944][ T4230] dvb-usb: schedule remote query interval to 150 msecs. [ 1154.792358][ T4230] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1154.993533][ T4230] dvb-usb: bulk message failed: -22 (1/0) [ 1155.000332][ T4230] dvb-usb: error while querying for an remote control event. [ 1155.196809][ T4230] libceph: connect (1)[c::]:6789 error -101 [ 1155.203890][ T4230] libceph: mon0 (1)[c::]:6789 connect error [ 1155.460302][ T4230] dvb-usb: bulk message failed: -22 (1/0) [ 1155.475686][ T4230] dvb-usb: error while querying for an remote control event. [ 1156.037715][ T1109] dvb-usb: bulk message failed: -22 (1/0) [ 1156.043827][ T1109] dvb-usb: error while querying for an remote control event. [ 1156.652405][ T4230] dvb-usb: bulk message failed: -22 (1/0) [ 1156.658427][ T4230] dvb-usb: error while querying for an remote control event. [ 1156.912803][T14685] loop1: detected capacity change from 0 to 4096 [ 1156.944568][ T4230] dvb-usb: bulk message failed: -22 (1/0) [ 1156.973562][ T4230] dvb-usb: error while querying for an remote control event. [ 1157.010344][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 1157.027612][T14685] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1157.075120][T14685] EXT4-fs (loop1): inline encryption not supported [ 1157.088236][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 1157.115353][T14685] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1157.145683][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.160244][ T4230] dvb-usb: bulk message failed: -22 (1/0) [ 1157.198066][ T4230] dvb-usb: error while querying for an remote control event. [ 1157.229003][T14685] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 1157.245342][T14685] System zones: 0-5 [ 1157.251959][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.270443][T14685] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 1157.365228][ T4230] dvb-usb: bulk message failed: -22 (1/0) [ 1157.371073][ T4230] dvb-usb: error while querying for an remote control event. [ 1157.434321][ T4350] bond0 (unregistering): Released all slaves [ 1157.637500][ T4230] dvb-usb: bulk message failed: -22 (1/0) [ 1157.650533][ T4230] dvb-usb: error while querying for an remote control event. [ 1157.830388][ T4230] dvb-usb: bulk message failed: -22 (1/0) [ 1157.851255][ T4230] dvb-usb: error while querying for an remote control event. [ 1157.862107][ T4230] usb 1-1: USB disconnect, device number 5 [ 1159.013196][ T4230] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1164.268208][ T4938] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1166.315567][ T4938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.342368][ T4938] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1166.371114][ T4938] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1166.384301][ T4938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.418078][ T4938] usb 1-1: config 0 descriptor?? [ 1166.484017][ T4938] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1166.495504][ T4938] dvb-usb: bulk message failed: -22 (3/0) [ 1166.603228][ T4938] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1166.636174][ T4938] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1166.644598][ T4938] usb 1-1: media controller created [ 1166.708417][T14757] dibusb: i2c wr: len=61 is too big! [ 1166.708417][T14757] [ 1167.643935][T14791] loop0: detected capacity change from 0 to 512 [ 1167.928669][ T4938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1167.958937][ T4938] dvb-usb: bulk message failed: -22 (6/0) [ 1168.137956][ T4938] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1168.186552][ T4938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 1169.002371][ T4938] dvb-usb: schedule remote query interval to 150 msecs. [ 1169.045194][ T4938] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1169.055583][T14814] kAFS: No cell specified [ 1169.103124][ T4938] usb 1-1: USB disconnect, device number 6 [ 1169.141243][ T4933] FS-Cache: Duplicate cookie detected [ 1169.146844][ T4933] FS-Cache: O-cookie c=00000013 [p=00000006 fl=222 nc=0 na=1] [ 1169.154385][ T4933] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff8880771b3800 [ 1169.162521][ T4933] FS-Cache: O-key=[4] '73797a30' [ 1169.168061][ T4933] FS-Cache: N-cookie c=0000001a [p=00000006 fl=2 nc=0 na=1] [ 1169.175520][ T4933] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888056e24800 [ 1169.183619][ T4933] FS-Cache: N-key=[4] '73797a30' [ 1171.582690][ T4938] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1178.185524][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.191865][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.469347][T14914] device syzkaller0 entered promiscuous mode [ 1185.695378][T14934] No such timeout policy "syz1" [ 1191.213978][T14972] device syzkaller0 entered promiscuous mode [ 1194.275661][T14985] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1194.283287][T14985] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1194.893087][T14985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1202.688110][T15038] No such timeout policy "syz1" [ 1212.260312][T15106] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1212.267901][T15106] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1213.594352][T15106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1214.448698][T15124] device syzkaller0 entered promiscuous mode [ 1216.195356][ T4938] Bluetooth: hci1: command 0x0406 tx timeout [ 1216.201455][ T4938] Bluetooth: hci5: command 0x0406 tx timeout [ 1219.933569][T15183] loop4: detected capacity change from 0 to 128 [ 1221.195178][T10890] Bluetooth: hci2: command 0x0409 tx timeout [ 1222.210707][T15183] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1223.248633][ T4803] Bluetooth: hci2: command 0x041b tx timeout [ 1223.342206][T15153] chnl_net:caif_netlink_parms(): no params data found [ 1223.511460][T15205] loop4: detected capacity change from 0 to 128 [ 1225.489552][ T4803] Bluetooth: hci2: command 0x040f tx timeout [ 1225.682098][T15205] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1228.203637][ T1109] Bluetooth: hci2: command 0x0419 tx timeout [ 1229.368921][T15153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.445291][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.501069][T15153] device bridge_slave_0 entered promiscuous mode [ 1229.539132][T15153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.608630][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.628963][T15153] device bridge_slave_1 entered promiscuous mode [ 1230.018898][T15153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.214118][T15153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.643801][T15153] team0: Port device team_slave_0 added [ 1230.734713][T15153] team0: Port device team_slave_1 added [ 1231.061418][T15153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.068594][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.206584][T15153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.199663][T15153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.214766][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.473105][T15153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.141842][T15153] device hsr_slave_0 entered promiscuous mode [ 1234.423393][T15153] device hsr_slave_1 entered promiscuous mode [ 1234.506696][T15271] CIFS: Attempting to mount \\127.0.0.1\share [ 1234.514574][T15271] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1235.515974][T15271] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1235.523551][T15273] ================================================================== [ 1235.532519][T15273] BUG: KASAN: use-after-free in string+0x204/0x290 [ 1235.539075][T15273] Read of size 1 at addr ffff88805b8f2f20 by task cifsd/15273 [ 1235.546592][T15273] [ 1235.548951][T15273] CPU: 1 PID: 15273 Comm: cifsd Not tainted syzkaller #0 [ 1235.556014][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1235.566113][T15273] Call Trace: [ 1235.569424][T15273] [ 1235.572373][T15273] dump_stack_lvl+0x188/0x250 [ 1235.577203][T15273] ? show_regs_print_info+0x20/0x20 [ 1235.582451][T15273] ? _printk+0xda/0x130 [ 1235.586674][T15273] ? load_image+0x410/0x410 [ 1235.591211][T15273] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1235.596780][T15273] ? lock_chain_count+0x20/0x20 [ 1235.601675][T15273] print_address_description+0x60/0x2d0 [ 1235.607248][T15273] ? string+0x204/0x290 [ 1235.611427][T15273] kasan_report+0xdf/0x130 [ 1235.615890][T15273] ? string+0x204/0x290 [ 1235.620072][T15273] string+0x204/0x290 [ 1235.624077][T15273] vsnprintf+0x10db/0x1c20 [ 1235.628540][T15273] scnprintf+0xe5/0x180 [ 1235.632742][T15273] ? snprintf+0x140/0x140 [ 1235.637096][T15273] reconn_set_ipaddr_from_hostname+0x112/0x580 [ 1235.643274][T15273] ? cifs_mark_tcp_ses_conns_for_reconnect+0x13a0/0x13a0 [ 1235.650318][T15273] ? cifs_tree_connect+0x4f0/0x4f0 [ 1235.655449][T15273] ? tcp_recvmsg+0x28a/0x760 [ 1235.660062][T15273] ? do_raw_spin_unlock+0x11d/0x230 [ 1235.665284][T15273] cifs_reconnect+0x470/0x1350 [ 1235.670079][T15273] ? inet_recvmsg+0x18b/0x200 [ 1235.674773][T15273] ? cifs_mount_params_proc_show+0x1a0/0x1a0 [ 1235.680771][T15273] ? inet_sendpage+0x2e0/0x2e0 [ 1235.685550][T15273] ? security_socket_recvmsg+0x85/0xb0 [ 1235.691034][T15273] ? sock_recvmsg+0x6f/0xf0 [ 1235.695563][T15273] cifs_readv_from_socket+0x7c4/0x8b0 [ 1235.700982][T15273] cifs_demultiplex_thread+0x53b/0x35b0 [ 1235.706567][T15273] ? cifs_resolve_server+0x110/0x110 [ 1235.711879][T15273] ? finish_lock_switch+0x12d/0x290 [ 1235.717092][T15273] ? lockdep_hardirqs_on+0x94/0x140 [ 1235.722387][T15273] ? finish_lock_switch+0x12d/0x290 [ 1235.727607][T15273] ? finish_task_switch+0x12f/0x650 [ 1235.732836][T15273] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1235.738867][T15273] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1235.744780][T15273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1235.750688][T15273] ? _raw_spin_unlock+0x40/0x40 [ 1235.755559][T15273] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1235.761477][T15273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1235.767395][T15273] ? __kthread_parkme+0x14e/0x1b0 [ 1235.772467][T15273] kthread+0x42e/0x520 [ 1235.776554][T15273] ? cifs_resolve_server+0x110/0x110 [ 1235.781861][T15273] ? kthread_blkcg+0xd0/0xd0 [ 1235.786471][T15273] ret_from_fork+0x1f/0x30 [ 1235.790922][T15273] [ 1235.793964][T15273] [ 1235.796297][T15273] Allocated by task 15271: [ 1235.800725][T15273] __kasan_kmalloc+0xaf/0xe0 [ 1235.805336][T15273] kstrdup+0x32/0x70 [ 1235.809262][T15273] cifs_get_tcp_session+0xde/0x18f0 [ 1235.814483][T15273] mount_get_conns+0xc3/0xe00 [ 1235.819174][T15273] cifs_mount+0x162/0x1380 [ 1235.823608][T15273] cifs_smb3_do_mount+0x366/0x760 [ 1235.828659][T15273] smb3_get_tree+0x59a/0xa80 [ 1235.833263][T15273] vfs_get_tree+0x88/0x270 [ 1235.837714][T15273] do_new_mount+0x247/0xa40 [ 1235.842238][T15273] __se_sys_mount+0x2e3/0x3d0 [ 1235.846935][T15273] do_syscall_64+0x4c/0xa0 [ 1235.851374][T15273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1235.857285][T15273] [ 1235.859625][T15273] Freed by task 15271: [ 1235.863701][T15273] kasan_set_track+0x4b/0x70 [ 1235.868306][T15273] kasan_set_free_info+0x1f/0x40 [ 1235.873281][T15273] ____kasan_slab_free+0xd5/0x110 [ 1235.878326][T15273] slab_free_freelist_hook+0xec/0x170 [ 1235.883712][T15273] kfree+0xef/0x2a0 [ 1235.887532][T15273] cifs_put_tcp_session+0x2e1/0x3d0 [ 1235.892752][T15273] mount_put_conns+0xb0/0x270 [ 1235.897454][T15273] cifs_mount+0xbf5/0x1380 [ 1235.901888][T15273] cifs_smb3_do_mount+0x366/0x760 [ 1235.906956][T15273] smb3_get_tree+0x59a/0xa80 [ 1235.911561][T15273] vfs_get_tree+0x88/0x270 [ 1235.915997][T15273] do_new_mount+0x247/0xa40 [ 1235.920520][T15273] __se_sys_mount+0x2e3/0x3d0 [ 1235.925217][T15273] do_syscall_64+0x4c/0xa0 [ 1235.929678][T15273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1235.935592][T15273] [ 1235.937933][T15273] The buggy address belongs to the object at ffff88805b8f2f20 [ 1235.937933][T15273] which belongs to the cache kmalloc-16 of size 16 [ 1235.951835][T15273] The buggy address is located 0 bytes inside of [ 1235.951835][T15273] 16-byte region [ffff88805b8f2f20, ffff88805b8f2f30) [ 1235.964862][T15273] The buggy address belongs to the page: [ 1235.970593][T15273] page:ffffea00016e3c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805b8f2b40 pfn:0x5b8f2 [ 1235.982060][T15273] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1235.989644][T15273] raw: 00fff00000000200 ffffea00006f7e40 0000000b0000000b ffff888016c413c0 [ 1235.998248][T15273] raw: ffff88805b8f2b40 000000008080007e 00000001ffffffff 0000000000000000 [ 1236.006838][T15273] page dumped because: kasan: bad access detected [ 1236.013276][T15273] page_owner tracks the page as allocated [ 1236.019014][T15273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4323, ts 75545263334, free_ts 75539242232 [ 1236.035017][T15273] get_page_from_freelist+0x24f6/0x2670 [ 1236.040585][T15273] __alloc_pages+0x1ee/0x480 [ 1236.045218][T15273] new_slab+0xb6/0x4b0 [ 1236.049301][T15273] ___slab_alloc+0x807/0xdd0 [ 1236.053907][T15273] __kmalloc_node+0x142/0x3a0 [ 1236.058607][T15273] kvmalloc_node+0x84/0x130 [ 1236.063124][T15273] xt_replace_table+0x160/0x750 [ 1236.067990][T15273] xt_register_table+0x151/0x450 [ 1236.072943][T15273] arpt_register_table+0x170/0x690 [ 1236.078074][T15273] arptable_filter_table_init+0x3d/0x60 [ 1236.083640][T15273] xt_find_table_lock+0x220/0x360 [ 1236.088704][T15273] do_arpt_get_ctl+0x5c4/0x1010 [ 1236.093578][T15273] nf_getsockopt+0x25e/0x280 [ 1236.098180][T15273] ip_getsockopt+0x1219/0x1660 [ 1236.102963][T15273] __sys_getsockopt+0x1b0/0x230 [ 1236.107832][T15273] __x64_sys_getsockopt+0xb1/0xc0 [ 1236.112876][T15273] page last free stack trace: [ 1236.117591][T15273] free_unref_page_prepare+0x637/0x6c0 [ 1236.123072][T15273] free_unref_page_list+0x119/0x830 [ 1236.128293][T15273] release_pages+0x185f/0x1bd0 [ 1236.133068][T15273] tlb_finish_mmu+0x1b4/0x370 [ 1236.137766][T15273] exit_mmap+0x3d0/0x640 [ 1236.142049][T15273] __mmput+0x115/0x390 [ 1236.146133][T15273] exit_mm+0x632/0x7b0 [ 1236.150219][T15273] do_exit+0x5b8/0x2110 [ 1236.154389][T15273] do_group_exit+0x12c/0x2f0 [ 1236.158993][T15273] __x64_sys_exit_group+0x3b/0x40 [ 1236.164037][T15273] do_syscall_64+0x4c/0xa0 [ 1236.168476][T15273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1236.174388][T15273] [ 1236.176727][T15273] Memory state around the buggy address: [ 1236.182368][T15273] ffff88805b8f2e00: 00 03 fc fc 00 05 fc fc 00 01 fc fc 00 07 fc fc [ 1236.190450][T15273] ffff88805b8f2e80: 00 00 fc fc 00 05 fc fc fa fb fc fc fa fb fc fc [ 1236.198529][T15273] >ffff88805b8f2f00: fa fb fc fc fa fb fc fc fa fb fc fc 00 05 fc fc [ 1236.206642][T15273] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1236.211773][T15273] ffff88805b8f2f80: fa fb fc fc 00 06 fc fc 00 00 fc fc fa fb fc fc [ 1236.219942][T15273] ffff88805b8f3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1236.228018][T15273] ================================================================== [ 1236.236085][T15273] Disabling lock debugging due to kernel taint [ 1236.706674][T15273] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1236.713943][T15273] CPU: 0 PID: 15273 Comm: cifsd Tainted: G B syzkaller #0 [ 1236.722386][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1236.732476][T15273] Call Trace: [ 1236.735781][T15273] [ 1236.738737][T15273] dump_stack_lvl+0x188/0x250 [ 1236.743465][T15273] ? show_regs_print_info+0x20/0x20 [ 1236.748698][T15273] ? load_image+0x410/0x410 [ 1236.753241][T15273] panic+0x2f8/0x850 [ 1236.757255][T15273] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1236.763523][T15273] ? bpf_jit_dump+0xd0/0xd0 [ 1236.768061][T15273] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1236.774073][T15273] ? _raw_spin_unlock+0x40/0x40 [ 1236.778950][T15273] ? string+0x204/0x290 [ 1236.783132][T15273] check_panic_on_warn+0x80/0xa0 [ 1236.788099][T15273] ? string+0x204/0x290 [ 1236.792275][T15273] end_report+0x6d/0xf0 [ 1236.796444][T15273] kasan_report+0x102/0x130 [ 1236.800963][T15273] ? string+0x204/0x290 [ 1236.805164][T15273] string+0x204/0x290 [ 1236.809172][T15273] vsnprintf+0x10db/0x1c20 [ 1236.813605][T15273] scnprintf+0xe5/0x180 [ 1236.817787][T15273] ? snprintf+0x140/0x140 [ 1236.822161][T15273] reconn_set_ipaddr_from_hostname+0x112/0x580 [ 1236.828331][T15273] ? cifs_mark_tcp_ses_conns_for_reconnect+0x13a0/0x13a0 [ 1236.835378][T15273] ? cifs_tree_connect+0x4f0/0x4f0 [ 1236.840512][T15273] ? tcp_recvmsg+0x28a/0x760 [ 1236.845120][T15273] ? do_raw_spin_unlock+0x11d/0x230 [ 1236.850343][T15273] cifs_reconnect+0x470/0x1350 [ 1236.855167][T15273] ? inet_recvmsg+0x18b/0x200 [ 1236.859867][T15273] ? cifs_mount_params_proc_show+0x1a0/0x1a0 [ 1236.865866][T15273] ? inet_sendpage+0x2e0/0x2e0 [ 1236.870644][T15273] ? security_socket_recvmsg+0x85/0xb0 [ 1236.876120][T15273] ? sock_recvmsg+0x6f/0xf0 [ 1236.880644][T15273] cifs_readv_from_socket+0x7c4/0x8b0 [ 1236.886041][T15273] cifs_demultiplex_thread+0x53b/0x35b0 [ 1236.891616][T15273] ? cifs_resolve_server+0x110/0x110 [ 1236.896916][T15273] ? finish_lock_switch+0x12d/0x290 [ 1236.902129][T15273] ? lockdep_hardirqs_on+0x94/0x140 [ 1236.907345][T15273] ? finish_lock_switch+0x12d/0x290 [ 1236.912575][T15273] ? finish_task_switch+0x12f/0x650 [ 1236.917798][T15273] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1236.923806][T15273] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1236.929714][T15273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1236.935648][T15273] ? _raw_spin_unlock+0x40/0x40 [ 1236.940517][T15273] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1236.946429][T15273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1236.952357][T15273] ? __kthread_parkme+0x14e/0x1b0 [ 1236.957404][T15273] kthread+0x42e/0x520 [ 1236.961487][T15273] ? cifs_resolve_server+0x110/0x110 [ 1236.966786][T15273] ? kthread_blkcg+0xd0/0xd0 [ 1236.971398][T15273] ret_from_fork+0x1f/0x30 [ 1236.975836][T15273] [ 1236.979186][T15273] Kernel Offset: disabled [ 1236.983539][T15273] Rebooting in 86400 seconds..