last executing test programs: 11m10.866576843s ago: executing program 1 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x7ffc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregs(0xc, r2, 0x1, 0x0) waitid(0x0, r4, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r4, 0x0, 0x4, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303034363032362c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d63703733372c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030363734352c00eedf227ab115e52b6bbf04b219b8c41485c3cd5eb13c86f761360530e373e289e07a73c8f8081b155bd313bf07fbf28d1fa54cb03990a77bbbcea814d9acaa995fc2a2a454793e855c11c116ac76d4a74cb5d771aa17"], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0xac, 0x109040) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f00000008c0)=ANY=[@ANYBLOB="6fea0000100000008386890e"]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0) 11m9.82549193s ago: executing program 1 (id=47): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x10) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") socket$inet(0x2, 0x5, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) close(0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}]}, 0x4c}, 0x2, 0x34005}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300), 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 11m3.759139311s ago: executing program 1 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r4, &(0x7f0000002800)=[{0x0}, {0x0}], 0x2, 0x7, 0x7fff) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="3c5ca6db", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x800) 11m2.372248384s ago: executing program 1 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@allocspi={0x11c, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x8000000}, 0x0, 0xfdffff00}, [@lifetime_val={0x24, 0x9, {0x7, 0x40002, 0x6, 0x9}}]}, 0x11c}}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003a00)={0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) timer_settime(0x0, 0x1, &(0x7f0000000540)={{}, {0x0, 0x9}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x20000002, 0x1) socket$netlink(0x10, 0x3, 0x0) 10m58.123862544s ago: executing program 1 (id=66): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f00000000c0)={0x3}, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2fb71da98128d4bd, 0x0) ioctl$KVM_GET_MP_STATE(r10, 0x8004ae98, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000280)) 10m53.152836297s ago: executing program 1 (id=72): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 10m37.636551745s ago: executing program 32 (id=72): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 3m49.479614693s ago: executing program 2 (id=736): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = fsopen(&(0x7f0000000280)='tracefs\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, 0x0, &(0x7f00000001c0)=0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7f, 0x4}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x11, 0x0, 0x0) write$input_event(r0, &(0x7f0000000400)={{0x0, 0xea60}, 0x11, 0x8, 0x4}, 0x18) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0xae001) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x3, 0x5, 0x9, 0x10000}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000180)={r11, 0xdb4, {0x0, 0x0, 0x0, 0x8000000000000000, 0x3, 0x0, 0x9, 0x3, 0x0, "8b5305cb465790dcbc316feb7c2cd0a4b025b3e61b808646ab2efc01bf1d1b6c1737ad640db310cfef3c507d8f8f2000a23c798f9989ece2f0bc5bd73d2bfe6f", "e9c4445645f1e7aea823e0d28579969813ee3464ffce793c155efd2273d843699127c939b562ef3867a912d1d69a5fb9f62d90cdd69de46769a06c04ad9f82e5", "7ee6becd70000a03ad49958119b8f31a8be8c2802e99f20e7b5b4ead6add9534", [0xffffffffffffffff, 0x5]}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 3m45.674143336s ago: executing program 2 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) getgroups(0x27, &(0x7f0000002540)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet6(0xa, 0x1, 0x0) shutdown(r4, 0x1) listen(r3, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) 3m35.915768838s ago: executing program 2 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) getgroups(0x27, &(0x7f0000002540)) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) listen(r3, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) 3m34.790165936s ago: executing program 2 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40040) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname(r6, 0x0, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) 3m33.035037875s ago: executing program 2 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@allocspi={0x11c, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x8000000}, 0x0, 0xfdffff00}, [@lifetime_val={0x24, 0x9, {0x7, 0x40002, 0x6, 0x9}}]}, 0x11c}}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003a00)={0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) timer_settime(0x0, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x20000002, 0x1) socket$netlink(0x10, 0x3, 0x0) 3m31.908239594s ago: executing program 2 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r4, 0x1) listen(r3, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) 3m16.564649098s ago: executing program 33 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r4, 0x1) listen(r3, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) 2m52.974832438s ago: executing program 3 (id=814): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) write(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = syz_io_uring_setup(0x22f, 0x0, 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000180)) 2m51.579945591s ago: executing program 3 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) getgroups(0x27, &(0x7f0000002540)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r4, 0x1) listen(r3, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) 2m50.555050278s ago: executing program 3 (id=819): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) write(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = syz_io_uring_setup(0x22f, 0x0, 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000180)) 2m44.746873385s ago: executing program 3 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) getgroups(0x27, &(0x7f0000002540)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r4, 0x1) listen(r3, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) 2m42.860334366s ago: executing program 3 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@allocspi={0x11c, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x8000000}, 0x0, 0xfdffff00}, [@lifetime_val={0x24, 0x9, {0x7, 0x40002, 0x6, 0x9}}]}, 0x11c}}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003a00)={0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) timer_settime(0x0, 0x1, &(0x7f0000000540)={{}, {0x0, 0x9}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) r7 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x20000002, 0x1) socket$netlink(0x10, 0x3, 0x0) 2m39.276968205s ago: executing program 3 (id=834): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0x4, 0xfffd}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1493cf2c54a75087, 0xac}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r9], 0x0) 2m32.407168268s ago: executing program 5 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@allocspi={0x11c, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x8000000}, 0x0, 0xfdffff00}, [@lifetime_val={0x24, 0x9, {0x7, 0x40002, 0x6, 0x9}}]}, 0x11c}}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003a00)={0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) timer_settime(0x0, 0x1, &(0x7f0000000540)={{}, {0x0, 0x9}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) r7 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x20000002, 0x1) socket$netlink(0x10, 0x3, 0x0) 2m31.14540315s ago: executing program 5 (id=845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f000081c000/0x1000)=nil, 0x1000, 0x8, 0x1010, 0xffffffffffffffff, 0xab880000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setreuid(0xee01, 0xee01) fcntl$setstatus(r4, 0x4, 0x42800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x1ff, 0x12) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001ac0)={0x1f, 0x0, 0x1}, 0x6) 2m28.548387862s ago: executing program 5 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) getgroups(0x27, &(0x7f0000002540)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r4, 0x1) listen(r3, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) 2m27.432603671s ago: executing program 5 (id=852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r4, &(0x7f0000002800)=[{0x0}], 0x1, 0x7, 0x7fff) r5 = socket$inet6(0xa, 0x6, 0x0) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="3c5ca6db", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x800) 2m26.386790838s ago: executing program 5 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) preadv(0xffffffffffffffff, &(0x7f0000002800)=[{0x0}, {0x0}], 0x2, 0x7, 0x7fff) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="3c5ca6db", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x800) 2m25.0787682s ago: executing program 5 (id=856): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000003213919a7e8dba9c837186dcf38be02c5d52421f457a1d89eb896c817061a7264584c2708792c703d8ff91b506452caa9e0e5fae3a5151ed4bc283fc00a1aa5600fc412460c84076cd1b7c0d52c84070cf7597e15294919e2f19af71657a1d7a8bd79e8b1fd3fc3678f3005246251a02c6803b1dd69042415d1fb74ff1d8d251a7ccfceac89e95ca9df4e484e778dadbaff610053c20cd0576f1a662c7e069dfefda9829ee63bb5b08e017a2b60591217c28d975247eea0b341a6760422b1355be", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x20000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 2m23.968631938s ago: executing program 34 (id=834): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0x4, 0xfffd}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1493cf2c54a75087, 0xac}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r9], 0x0) 2m9.748033963s ago: executing program 35 (id=856): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000003213919a7e8dba9c837186dcf38be02c5d52421f457a1d89eb896c817061a7264584c2708792c703d8ff91b506452caa9e0e5fae3a5151ed4bc283fc00a1aa5600fc412460c84076cd1b7c0d52c84070cf7597e15294919e2f19af71657a1d7a8bd79e8b1fd3fc3678f3005246251a02c6803b1dd69042415d1fb74ff1d8d251a7ccfceac89e95ca9df4e484e778dadbaff610053c20cd0576f1a662c7e069dfefda9829ee63bb5b08e017a2b60591217c28d975247eea0b341a6760422b1355be", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x20000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 1m14.669339125s ago: executing program 8 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) getgroups(0x27, &(0x7f0000002540)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r4, 0x1) listen(r3, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) 1m12.099404587s ago: executing program 8 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) getgroups(0x27, &(0x7f0000002540)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r4, 0x1) listen(r3, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) 1m11.048144135s ago: executing program 8 (id=946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) getgroups(0x27, &(0x7f0000002540)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r4, 0x1) listen(r3, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) 55.864391336s ago: executing program 36 (id=946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) getgroups(0x27, &(0x7f0000002540)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r4, 0x1) listen(r3, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) 19.161816303s ago: executing program 4 (id=1014): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000fc0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x200520) getresgid(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x3f, 0x1, 0x3, "1c13ebdaf2f20d55806ba018e8edb1439bfcc113000600000000000000fd0800", 0x494e4f4b}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0xec, r5, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r7}], 0x1, 0x83a4) fcntl$setpipe(r7, 0x407, 0x3ff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r9, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x4044890) read$char_usb(r6, &(0x7f0000000100)=""/124, 0x7c) write$char_usb(r7, &(0x7f0000000440)="93", 0x1) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f00000010c0)={[{@nostrict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@anchor={'anchor', 0x3d, 0x3ff}}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@bs={'bs', 0x3d, 0x9}}, {@uid_forget}, {@umask={'umask', 0x3d, 0x2000005}}]}, 0x1, 0xc57, &(0x7f0000000300)="$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") prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x10000008, 0x8}, 0x0) 16.786183182s ago: executing program 4 (id=1016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5840, 0xba86a709a3045747) write$binfmt_elf64(r1, &(0x7f0000000f00)=ANY=[], 0x78) close(r1) statx(r1, &(0x7f00000002c0)='./file1\x00', 0x1800, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs(&(0x7f0000000080)='rpc_pipefs\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x1000000, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={r0, r2}, 0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) prlimit64(r3, 0xe, &(0x7f0000000380)={0x59, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x48, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x9, 0x36, 0x4, 0x16, 0x13f7052cdc62f7eb, 0x30, 0x36, 0x6c, 0x36, 0x36, 0xb, 0x4, 0x5]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xff}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @acl_policy]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x440080d0) bind$alg(r5, 0x0, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f00000001c0)=0x8, 0x4) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r9 = dup(r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) gettid() r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 15.323802856s ago: executing program 4 (id=1018): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$inet(r7, &(0x7f0000001340)={&(0x7f0000001140)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001280)=[{&(0x7f00000011c0)='z', 0x1}], 0x1}, 0x18840) sendto$inet6(r7, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}, 0x1c) shutdown(r7, 0x1) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x30, 0x30]}}, &(0x7f0000000200)=""/47, 0x2e, 0x2f, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, 0x0}, 0xe07e872420dfefca) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @loopback}], 0x41) 14.250788815s ago: executing program 7 (id=1020): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r6, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r5) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ptrace(0x10, r4) ptrace$ARCH_MAP_VDSO_X32(0x1e, r4, 0x1000200000000, 0x2001) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001200010000000000000000000a000000400100"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a9ffa2619a1201d0ef88a44e5ed535a8a52b15"], 0x4c}}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000cc0)={{0xffffffffffffffff, 0x3, 0x3, 0x2, 0x9}}) 14.233016335s ago: executing program 4 (id=1021): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/130, &(0x7f0000695ffc)=0x82) mbind(&(0x7f000054c000/0xd000)=nil, 0xd000, 0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) syz_emit_ethernet(0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 13.171273213s ago: executing program 0 (id=1022): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x4, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0xfffffffe, [0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x3, 0x0, 0xfffffffa, 0x711, 0x0, 0x80000001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6e3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xee, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe1b, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0xe, 0x6, 0x58565559, 0x7, 0x5f7, 0xfffffffe, 0x6, 0x0, 0x0, 0x6, 0x2, 0x2}}) connect$inet6(r1, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r7, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) 12.821976448s ago: executing program 7 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) timer_settime(0x0, 0x1, &(0x7f0000000540)={{}, {0x0, 0x9}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x5, 0x20000002, 0x1) socket$netlink(0x10, 0x3, 0x0) 10.983347459s ago: executing program 7 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) getgroups(0x27, &(0x7f0000002540)) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r3, 0x1) listen(r2, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) 9.361980265s ago: executing program 7 (id=1027): prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) fstat(r1, &(0x7f0000000040)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x9e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x700}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="43abe9248ccdb7abdc59a200074506ad", 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00'}, 0x10) 9.260837267s ago: executing program 0 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) getgroups(0x27, &(0x7f0000002540)) 9.150811829s ago: executing program 6 (id=1029): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x14002, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000002fc0)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') rt_sigqueueinfo(r0, 0x1025, &(0x7f0000000400)={0x28, 0x0, 0x1}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {0x4, 0x6}, @control={0x9, 0x0, 0xb}}, {0x0, 0x0, 0x0, 0x4, @tick=0x5, {0x6, 0x4}, {}, @result={0x5, 0x4}}], 0x38) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x23, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r8}, 0x18) 7.167968521s ago: executing program 0 (id=1030): r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, r0, 0x7, 0x0, @void}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x2e, 0x0, 0xde, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@netkit={@void, @value=r5, @void, @void, r6}}, 0x1c) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r8, 0x4008af10, &(0x7f0000000000)={0x1, 0x400}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) openat(r5, &(0x7f0000004280)='./file0\x00', 0x410000, 0x100) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.167465632s ago: executing program 6 (id=1031): socket(0x28, 0x5, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x1, 0x676, &(0x7f0000000800)="$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") r0 = open(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88000}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0x200) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 6.173881598s ago: executing program 6 (id=1032): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x67fd, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) clock_gettime(0xb, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xac3, @void, @value}, 0x94) 4.027814534s ago: executing program 4 (id=1033): syz_emit_ethernet(0xbd, &(0x7f0000000780)=ANY=[@ANYBLOB="aa0900000000000000f05c87da36f745691ee174f2042d66000455ab650000000011af36daa3be1ac1cac79e3db43fcfd0ddaa8c66b328487f6991c2aefe18042b9900cc829b8989e4a53b7d6c99e7abda47fce13eac03f6deb286f841602504edd10c91"], 0x0) syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x1, 0x206, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x8a, &(0x7f0000000500)={@broadcast, @local, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "008080", 0x4c, 0x2f, 0x0, @private0, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) io_setup(0x5, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@gid}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@gid}, {@umask={'umask', 0x3d, 0x3}}, {@namecase}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x400000}}]}, 0x1, 0x152c, &(0x7f0000000b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) inotify_init() ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x38, 0x13, {0xffff945a, 0x1}, 0x3, 0xed}}) syz_emit_ethernet(0x56, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0x2a, 0x0, 0x0, 0x0, "1469fff8d93b1e93650a078a7a40217d8db36d9cb1fd95f63248afa8482d0385952d9b4faacbc18a8f2feeed7f79566c59cf5e779d5ccdcd9cd8d1d8e675b20c"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0x703, 0xe49, 0xabe, 0x9d8]}) connect$tipc(r0, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x1}}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) open_tree(r4, &(0x7f0000000140)='./file0\x00', 0x80000) 4.026145604s ago: executing program 0 (id=1042): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x800000, &(0x7f0000001dc0)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$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") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mount$binderfs(&(0x7f00000001c0), 0x0, 0x0, 0x100000, &(0x7f0000000440)) open(0x0, 0x1612c2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="0000000a010000001800120008000100736974000c000200080003"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e20000080004000006000008001b"], 0x30}}, 0x0) rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') socket(0x10, 0x2, 0x0) 4.025425614s ago: executing program 6 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) timer_settime(0x0, 0x1, &(0x7f0000000540)={{}, {0x0, 0x9}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x5, 0x20000002, 0x1) socket$netlink(0x10, 0x3, 0x0) 3.951546755s ago: executing program 7 (id=1035): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) write(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = syz_io_uring_setup(0x22f, 0x0, 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000180)) 1.674900072s ago: executing program 6 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f8d9807ffaae3d0634a12e3d45b922cedca99380d2820db7f31d2ba0a81f9b4bed37e5c8812ca97a3bcfd797f6c9120f9c73c3462eb50c0651ab396c180dd66d556c241d1168ad5db065e518c92d3f77a5fa7d1cd2aa112f53ff6bc8ba7ef0c3dffd4abe8d483adcb2cd4c99cc95390daf75bb947941647d98c9c9064c8b5f803f5f9f26293b20fc8cf91e168a737bd8cd4f8297b51d66ede8b037c11d28fb80eb1237091c909483673e95482eb2b2e19d307e89b821288d9c0a4c87fab9af14e0131c9617d1c63083dc2cea7716a915cdc08449232ca138af3af3e4e78e55151d2551f3db409cdc5e18", 0xea, 0x2000c851, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xffefffff}, 0x1c) getgroups(0x27, &(0x7f0000002540)) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r3, 0x1) listen(r2, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) 1.382820518s ago: executing program 0 (id=1037): pipe2$watch_queue(0x0, 0x80) syz_io_uring_setup(0x4ee6, &(0x7f0000000180)={0x0, 0xd294, 0x20, 0x3, 0x314}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x2, 0xdaac) tkill(0x0, 0x12) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xc0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x1d, 0x0, 0x1}, {0x4}]}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ptrace(0x10, r3) r5 = syz_open_procfs(r3, &(0x7f0000000040)='status\x00') preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000400)=""/121, 0x79}], 0x1, 0xffffffff, 0x1) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) 1.124042992s ago: executing program 7 (id=1038): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x7, 0xa, 0x20, 0x80}, {0x1000000003ff, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x1}, {{@in6=@mcast2, 0x4d6, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x7, 0x78}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000004c0), 0x80) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r5, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=""/21, 0x15}, 0x80000001}], 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) 280.919615ms ago: executing program 6 (id=1039): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x118, 0x118, 0x208, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xf0, 0x118, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="7c533121ba56b5b1000000000000", 0x0, 0xf000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 243.330666ms ago: executing program 0 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f0000000180)=ANY=[], 0x1, 0x1d3, &(0x7f0000000400)="$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") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getresgid(&(0x7f0000005600), &(0x7f0000005640), &(0x7f0000005680)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000056c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_DO_IT(r5, 0xab03) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005e40), &(0x7f0000005e80)=0xc) openat$vcsa(0xffffffffffffff9c, &(0x7f0000005ec0), 0x8000, 0x0) 0s ago: executing program 4 (id=1041): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000005c0)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4e7, &(0x7f0000000480)={0x0, 0xf34c, 0x80, 0x0, 0x8, 0x0, r2}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x5, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8001000, 0x0, 0xa000, 0x10000, 0x0, 0x0, 0x738}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) poll(&(0x7f00000001c0)=[{r8, 0x120c}], 0x1, 0x8001) r9 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x10101, 0x1, 0x4008b}, &(0x7f0000000040), &(0x7f0000000200)) io_uring_enter(r9, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000500)=""/172, 0xac}], 0x3, 0x86, 0x65fce0f6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r11, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x2000c0c0) r12 = socket(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x20000, {0x0, 0x0, 0x0, r14, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffd91, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x3, 0x92, 0x8}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xff, 0x8001}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000}) r15 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r15, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): eady [ 151.986943][ T4814] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.96: Failed to acquire dquot type 0 [ 152.126153][ T4814] EXT4-fs (loop4): 1 orphan inode deleted [ 152.167226][ T4813] device bridge_slave_0 left promiscuous mode [ 152.201138][ T4814] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.310878][ T4814] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.328228][ T4813] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.435274][ T4813] device bridge_slave_1 left promiscuous mode [ 152.495128][ T4813] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.584147][ T4813] bond0: (slave bond_slave_0): Releasing backup interface [ 152.694025][ T4252] Bluetooth: hci5: command 0x041b tx timeout [ 153.038796][ T4813] bond0: (slave bond_slave_1): Releasing backup interface [ 153.142039][ T4813] team0: Port device team_slave_0 removed [ 153.198873][ T4813] team0: Port device team_slave_1 removed [ 153.242149][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.263858][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.277369][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 153.286180][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.294301][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.368822][ T4357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.455093][ T4810] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 153.512501][ T4810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.556550][ T4810] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 153.606209][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 153.624571][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 153.647503][ T4789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.078460][ T4789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.534423][ T4789] team0: Port device team_slave_0 added [ 154.564580][ T4789] team0: Port device team_slave_1 added [ 154.773870][ T4252] Bluetooth: hci5: command 0x040f tx timeout [ 156.448676][ T4851] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 156.863567][ T4266] Bluetooth: hci5: command 0x0419 tx timeout [ 157.835217][ T4862] loop2: detected capacity change from 0 to 1024 [ 158.635565][ T57] hfsplus: b-tree write err: -5, ino 4 [ 158.669592][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.676764][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.704253][ T4789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.719276][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.726535][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.757070][ T4789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.609696][ T4878] mmap: syz.2.107 (4878) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.857630][ T4789] device hsr_slave_0 entered promiscuous mode [ 159.875886][ T4789] device hsr_slave_1 entered promiscuous mode [ 160.754822][ T4789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.762435][ T4789] Cannot create hsr debugfs directory [ 163.147780][ T4789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.466953][ T4789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.498704][ T4789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.516087][ T4906] loop0: detected capacity change from 0 to 1024 [ 163.630046][ T4789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.213842][ T4914] loop2: detected capacity change from 0 to 512 [ 164.225401][ T4914] EXT4-fs: Ignoring removed i_version option [ 164.646205][ T4914] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 164.659990][ T33] hfsplus: b-tree write err: -5, ino 4 [ 164.744361][ T4914] EXT4-fs (loop2): orphan cleanup on readonly fs [ 164.751217][ T4914] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.110: bg 0: block 131: padding at end of block bitmap is not set [ 164.773118][ T4914] EXT4-fs (loop2): Remounting filesystem read-only [ 164.779811][ T4914] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 164.790450][ T4914] EXT4-fs (loop2): Remounting filesystem read-only [ 164.798633][ T4914] EXT4-fs (loop2): 1 truncate cleaned up [ 164.804457][ T4914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.974992][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 165.033179][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 168.263729][ T4921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.324489][ T4921] bond0: (slave rose0): Enslaving as an active interface with an up link [ 168.406386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 168.710436][ T4938] loop0: detected capacity change from 0 to 1024 [ 169.271180][ T4357] device hsr_slave_0 left promiscuous mode [ 169.296662][ T4535] hfsplus: b-tree write err: -5, ino 4 [ 169.313783][ T4357] device hsr_slave_1 left promiscuous mode [ 169.411487][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.429770][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.515385][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.522848][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.562644][ T4357] device bridge_slave_1 left promiscuous mode [ 169.591701][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.618020][ T4357] device bridge_slave_0 left promiscuous mode [ 169.641669][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.678248][ T4945] loop3: detected capacity change from 0 to 128 [ 170.087912][ T4357] device veth1_macvtap left promiscuous mode [ 170.119363][ T4357] device veth0_macvtap left promiscuous mode [ 170.208327][ T4357] device veth1_vlan left promiscuous mode [ 170.260635][ T4357] device veth0_vlan left promiscuous mode [ 173.010058][ T4984] loop2: detected capacity change from 0 to 1024 [ 173.673541][ T4991] block nbd4: Device being setup by another task [ 174.447687][ T5003] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 174.765316][ T4252] block nbd4: Receive control failed (result -32) [ 174.774555][ T4266] block nbd4: Receive control failed (result -32) [ 174.786666][ T4986] block nbd4: shutting down sockets [ 175.142822][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 175.187710][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 175.504893][ T5009] loop4: detected capacity change from 0 to 1024 [ 175.909130][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.959872][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.357951][ T4357] bond0 (unregistering): Released all slaves [ 176.526870][ T4789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.676232][ T4789] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.735279][ T11] hfsplus: b-tree write err: -5, ino 4 [ 176.744057][ T4436] hfsplus: b-tree write err: -5, ino 4 [ 176.751172][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.760715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.900728][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.971621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.182937][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.190175][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.134116][ T5026] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 178.195415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.261770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.277384][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.284651][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.300117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.309635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.085337][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.199141][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.301562][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.337976][ T5037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 179.404871][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.424174][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.435827][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.624612][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.684511][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.738998][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.800768][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.824309][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.294747][ T5053] loop4: detected capacity change from 0 to 1024 [ 181.186038][ T5062] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 181.810099][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.877526][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.907418][ T4789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.926886][ T5077] loop2: detected capacity change from 0 to 1024 [ 183.478969][ T5085] loop3: detected capacity change from 0 to 1024 [ 184.011162][ T4535] hfsplus: b-tree write err: -5, ino 4 [ 185.307047][ T5100] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 186.118436][ T4252] Bluetooth: hci1: unknown advertising packet type: 0x63 [ 186.119036][ T4252] Bluetooth: hci1: Dropping invalid advertising data [ 186.136129][ T4252] Bluetooth: hci1: Malformed LE Event: 0x02 [ 186.296702][ T5110] device veth1_macvtap left promiscuous mode [ 186.302780][ T5110] device macsec0 entered promiscuous mode [ 186.547619][ T4436] hfsplus: b-tree write err: -5, ino 4 [ 188.119930][ T4340] hfsplus: b-tree write err: -5, ino 4 [ 189.259290][ T5128] ipt_REJECT: TCP_RESET invalid for non-tcp [ 189.270410][ T5128] loop0: detected capacity change from 0 to 128 [ 189.498333][ T5128] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.515817][ T5128] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.589524][ T5126] EXT4-fs warning (device loop0): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 189.860830][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 189.894832][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.956168][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.069034][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.086767][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.174368][ T5141] loop0: detected capacity change from 0 to 512 [ 190.904112][ T5151] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 191.125404][ T4789] device veth0_vlan entered promiscuous mode [ 191.212561][ T5141] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 191.234781][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.261199][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.365146][ T5141] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 191.378894][ T5141] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.150: Failed to acquire dquot type 0 [ 191.429430][ T5141] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 191.523607][ T5141] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 191.589233][ T5141] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.150: Failed to acquire dquot type 0 [ 191.596068][ T4789] device veth1_vlan entered promiscuous mode [ 191.680541][ T5141] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 191.787244][ T5141] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 191.851989][ T5141] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.150: Failed to acquire dquot type 0 [ 191.961505][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.995142][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.030408][ T5141] EXT4-fs (loop0): 1 orphan inode deleted [ 192.042696][ T5141] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 192.115580][ T4789] device veth0_macvtap entered promiscuous mode [ 192.160119][ T5141] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.449584][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.230040][ T4789] device veth1_macvtap entered promiscuous mode [ 193.305612][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.389071][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.434562][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.445129][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.454992][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.473470][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.497328][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.504560][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 193.575480][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.602788][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.641125][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.672318][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.702761][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.755189][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.803512][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.884101][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.895527][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.916729][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.008777][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.579214][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.585586][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.769855][ T4789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.814597][ T4789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.826648][ T14] libceph: connect (1)[c::]:6789 error -101 [ 194.854236][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 194.866118][ T14] libceph: connect (1)[c::]:6789 error -101 [ 194.872185][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 194.878479][ T5177] ceph: No mds server is up or the cluster is laggy [ 195.101481][ T4789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.273896][ T5089] libceph: connect (1)[c::]:6789 error -101 [ 196.460308][ T5089] libceph: mon0 (1)[c::]:6789 connect error [ 196.513522][ T4789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.701983][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.702695][ T4510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.779846][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.954167][ T5209] loop4: detected capacity change from 0 to 1024 [ 198.131770][ T4510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.198765][ T5204] loop2: detected capacity change from 0 to 1024 [ 198.219268][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.245646][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.531580][ T5212] loop0: detected capacity change from 0 to 40427 [ 198.545459][ T5212] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 198.558624][ T5212] F2FS-fs (loop0): invalid crc value [ 198.577760][ T5212] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.714712][ T5212] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.754019][ T4510] hfsplus: b-tree write err: -5, ino 4 [ 200.248655][ T5232] vivid-000: kernel_thread() failed [ 200.498215][ T4249] syz-executor: attempt to access beyond end of device [ 200.498215][ T4249] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.972850][ T5244] loop5: detected capacity change from 0 to 1024 [ 203.532057][ T5257] Bluetooth: MGMT ver 1.22 [ 203.566974][ T5257] device veth1_macvtap left promiscuous mode [ 204.582379][ T33] hfsplus: b-tree write err: -5, ino 4 [ 206.520044][ T33] hfsplus: b-tree write err: -5, ino 4 [ 206.632542][ T5276] loop0: detected capacity change from 0 to 1024 [ 207.259824][ T4378] hfsplus: b-tree write err: -5, ino 4 [ 207.546031][ T5291] loop3: detected capacity change from 0 to 1024 [ 208.792800][ T5297] loop0: detected capacity change from 0 to 512 [ 208.842231][ T4510] hfsplus: b-tree write err: -5, ino 4 [ 211.066726][ T5297] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.176: casefold flag without casefold feature [ 211.235600][ T5297] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.176: couldn't read orphan inode 15 (err -117) [ 211.434356][ T5297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 212.973607][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 219.517778][ T5365] loop4: detected capacity change from 0 to 1024 [ 224.780326][ T57] hfsplus: b-tree write err: -5, ino 4 [ 226.256717][ T5438] loop0: detected capacity change from 0 to 512 [ 226.596278][ T5438] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 226.728540][ T5438] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 226.850079][ T5438] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.199: Failed to acquire dquot type 0 [ 226.974786][ T5438] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 227.112357][ T5438] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 227.173687][ T5438] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.199: Failed to acquire dquot type 0 [ 227.195719][ T5438] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 227.216350][ T5438] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 227.237081][ T5438] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.199: Failed to acquire dquot type 0 [ 227.303004][ T5438] EXT4-fs (loop0): 1 orphan inode deleted [ 227.328379][ T5438] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 227.349575][ T5438] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.230553][ T5462] loop4: detected capacity change from 0 to 512 [ 229.237704][ T5462] EXT4-fs: Ignoring removed i_version option [ 229.604800][ T5462] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 229.622795][ T5462] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 229.630627][ T5462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 229.751074][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 229.858532][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 230.274363][ T5475] netlink: 'syz.2.201': attribute type 13 has an invalid length. [ 232.736007][ T5501] netlink: 256 bytes leftover after parsing attributes in process `syz.0.208'. [ 235.397409][ T5531] loop3: detected capacity change from 0 to 512 [ 236.424122][ T5531] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 236.473820][ T5531] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 236.487760][ T5541] loop4: detected capacity change from 0 to 512 [ 236.492854][ T5531] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.214: Failed to acquire dquot type 0 [ 236.587723][ T5531] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 237.239972][ T5531] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 237.249661][ T5531] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.214: Failed to acquire dquot type 0 [ 237.274686][ T5531] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 237.285331][ T5531] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 237.295803][ T5531] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.214: Failed to acquire dquot type 0 [ 237.308088][ T5531] EXT4-fs (loop3): 1 orphan inode deleted [ 237.320047][ T5531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 237.385343][ T5541] EXT4-fs (loop4): 1 orphan inode deleted [ 237.397952][ T5531] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.435646][ T4407] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 237.448001][ T5541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 237.479593][ T5541] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.523684][ T4407] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:12: Failed to release dquot type 1 [ 237.639327][ T5562] loop2: detected capacity change from 0 to 8 [ 238.739887][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 238.923069][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 239.543063][ T5579] loop4: detected capacity change from 0 to 2048 [ 239.580342][ T5579] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 240.746158][ T5585] loop5: detected capacity change from 0 to 512 [ 240.753237][ T5585] EXT4-fs: Ignoring removed i_version option [ 240.797182][ T5579] UDF-fs: Scanning with blocksize 512 failed [ 240.993698][ T5585] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 241.036973][ T5585] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 241.044611][ T5585] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 241.053966][ T5579] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.335345][ T4789] EXT4-fs (loop5): unmounting filesystem. [ 245.128925][ T5613] device veth1_macvtap left promiscuous mode [ 245.135266][ T5613] device macsec0 entered promiscuous mode [ 248.741380][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.222'. [ 249.099882][ T5653] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 250.094169][ T5657] loop2: detected capacity change from 0 to 128 [ 251.243838][ T26] audit: type=1800 audit(1744945356.490:6): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.234" name="file1" dev="loop2" ino=1048618 res=0 errno=0 [ 251.396675][ T26] audit: type=1800 audit(1744945356.490:7): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.234" name="file2" dev="loop2" ino=1048619 res=0 errno=0 [ 251.922794][ T5675] loop2: detected capacity change from 0 to 512 [ 252.323059][ T5675] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.236: casefold flag without casefold feature [ 252.473553][ T5675] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.236: couldn't read orphan inode 15 (err -117) [ 252.493582][ T5675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 253.506252][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 255.621277][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.627660][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.380538][ T5716] (syz.3.242,5716,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 256.389438][ T5716] (syz.3.242,5716,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 256.766757][ T5715] loop3: detected capacity change from 0 to 32768 [ 256.963252][ T5720] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 258.187804][ T5724] loop4: detected capacity change from 0 to 128 [ 258.316281][ T3622] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.351884][ T3622] Buffer I/O error on dev loop3, logical block 0, async page read [ 258.410304][ T3622] ldm_validate_partition_table(): Disk read failed. [ 258.538860][ T3622] Dev loop3: unable to read RDB block 0 [ 258.544638][ T3622] loop3: unable to read partition table [ 258.550645][ T3622] loop3: partition table beyond EOD, truncated [ 261.207646][ T5745] loop4: detected capacity change from 0 to 40427 [ 261.265216][ T5745] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 261.276132][ T5745] F2FS-fs (loop4): invalid crc value [ 261.316091][ T5745] F2FS-fs (loop4): Found nat_bits in checkpoint [ 261.429949][ T5745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 261.451302][ T5756] loop5: detected capacity change from 0 to 1024 [ 262.257849][ T4535] hfsplus: b-tree write err: -5, ino 4 [ 262.590195][ T5759] vivid-003: kernel_thread() failed [ 262.789865][ T4256] syz-executor: attempt to access beyond end of device [ 262.789865][ T4256] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 263.136987][ T5770] loop3: detected capacity change from 0 to 8 [ 263.352109][ T5770] SQUASHFS error: lzo decompression failed, data probably corrupt [ 263.360543][ T5770] SQUASHFS error: Failed to read block 0x71: -5 [ 263.376014][ T5770] SQUASHFS error: lzo decompression failed, data probably corrupt [ 263.384211][ T5770] SQUASHFS error: Failed to read block 0x71: -5 [ 263.395212][ T26] audit: type=1800 audit(1744945368.720:8): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.249" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 263.939721][ T5775] loop3: detected capacity change from 0 to 512 [ 264.061158][ T5775] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 264.078076][ T5775] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 264.113497][ T5775] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.257: Failed to acquire dquot type 0 [ 264.138497][ T5775] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 264.178873][ T5775] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 264.216380][ T5775] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.257: Failed to acquire dquot type 0 [ 264.258916][ T5775] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 264.292677][ T5775] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 264.314363][ T5775] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.257: Failed to acquire dquot type 0 [ 264.349521][ T5775] EXT4-fs (loop3): 1 orphan inode deleted [ 264.355793][ T5775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 264.396110][ T5775] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.189941][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 268.044229][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 269.686166][ T5819] loop0: detected capacity change from 0 to 128 [ 270.826883][ T26] audit: type=1800 audit(1744945376.160:9): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.262" name="file2" dev="loop0" ino=1048623 res=0 errno=0 [ 271.416904][ T5835] loop2: detected capacity change from 0 to 1024 [ 271.476190][ T26] audit: type=1800 audit(1744945376.160:10): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.262" name="file1" dev="loop0" ino=1048622 res=0 errno=0 [ 273.733763][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 273.739834][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 273.768709][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 273.778494][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 273.911319][ T5851] ceph: No mds server is up or the cluster is laggy [ 274.053963][ T5091] libceph: connect (1)[c::]:6789 error -101 [ 274.060078][ T5091] libceph: mon0 (1)[c::]:6789 connect error [ 274.127345][ T9] hfsplus: b-tree write err: -5, ino 4 [ 274.592864][ T5868] loop0: detected capacity change from 0 to 1024 [ 276.055486][ T9] hfsplus: b-tree write err: -5, ino 4 [ 289.105623][ T5996] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 290.180999][ T6007] loop4: detected capacity change from 0 to 8 [ 292.970229][ T6040] loop2: detected capacity change from 0 to 8 [ 295.384952][ T6043] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 295.433610][ T6043] netlink: 'syz.3.299': attribute type 4 has an invalid length. [ 295.499014][ T6043] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.299'. [ 296.487688][ T6066] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 296.738183][ T6045] capability: warning: `syz.3.299' uses deprecated v2 capabilities in a way that may be insecure [ 298.366813][ T6087] netlink: 14 bytes leftover after parsing attributes in process `syz.0.307'. [ 298.743488][ T6087] device hsr_slave_0 left promiscuous mode [ 298.744265][ T6087] device hsr_slave_1 left promiscuous mode [ 300.342329][ T6106] loop3: detected capacity change from 0 to 128 [ 300.370370][ T6106] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 303.293990][ T6134] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 303.425976][ T6135] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 304.739329][ T6145] loop5: detected capacity change from 0 to 256 [ 306.194564][ T6147] Invalid ELF header magic: != ELF [ 308.493018][ T6173] loop5: detected capacity change from 0 to 512 [ 308.594368][ T6173] EXT4-fs: Ignoring removed orlov option [ 308.663577][ T6173] ext4: Unknown parameter 'uid>00000000000000000000' [ 308.952032][ T5011] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.988834][ T6173] syz.5.327 uses obsolete (PF_INET,SOCK_PACKET) [ 309.276187][ T6173] loop5: detected capacity change from 0 to 1024 [ 309.545438][ T6190] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 310.755738][ T6200] loop0: detected capacity change from 0 to 16 [ 317.063870][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.070222][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.719069][ T6260] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 323.267325][ T6301] loop4: detected capacity change from 0 to 256 [ 324.103740][ T6311] Invalid ELF header magic: != ELF [ 325.829652][ T6317] loop2: detected capacity change from 0 to 512 [ 325.861291][ T6317] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 325.898870][ T6331] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 325.996966][ T6317] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 326.018942][ T6317] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.136461][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 336.631924][ T6412] loop2: detected capacity change from 0 to 512 [ 336.639019][ T6412] EXT4-fs: Ignoring removed orlov option [ 336.645187][ T6412] ext4: Unknown parameter 'uid>00000000000000000000' [ 341.133842][ T6445] device veth1_macvtap left promiscuous mode [ 341.140632][ T6445] device macsec0 entered promiscuous mode [ 342.333506][ T6447] device veth1_macvtap entered promiscuous mode [ 342.373760][ T6447] device macsec0 left promiscuous mode [ 343.520744][ T6461] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 344.019052][ T6476] loop4: detected capacity change from 0 to 16 [ 350.390190][ T6517] loop4: detected capacity change from 0 to 512 [ 350.661026][ T6517] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 351.060445][ T6517] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 351.268377][ T6517] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.394: Failed to acquire dquot type 0 [ 351.497944][ T6517] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 352.253488][ T6517] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 352.263063][ T6517] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.394: Failed to acquire dquot type 0 [ 352.277040][ T6517] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 352.443464][ T6517] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 352.452934][ T6517] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.394: Failed to acquire dquot type 0 [ 352.527491][ T6517] EXT4-fs (loop4): 1 orphan inode deleted [ 352.544033][ T6517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 352.558521][ T6525] device veth1_macvtap left promiscuous mode [ 352.574977][ T6525] device macsec0 entered promiscuous mode [ 352.589017][ T6517] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.522849][ T6525] device veth1_macvtap entered promiscuous mode [ 353.560215][ T6525] device macsec0 left promiscuous mode [ 353.605947][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.689962][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 353.719782][ T6542] loop2: detected capacity change from 0 to 512 [ 353.800417][ T6542] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.398: casefold flag without casefold feature [ 353.857867][ T6542] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.398: couldn't read orphan inode 15 (err -117) [ 353.902777][ T6542] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 353.930997][ T26] audit: type=1326 audit(1744945459.260:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c278e169 code=0x7ffc0000 [ 354.633627][ T6555] loop5: detected capacity change from 0 to 16 [ 354.882578][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 360.588973][ T6594] device veth1_macvtap entered promiscuous mode [ 360.596086][ T6594] device macsec0 left promiscuous mode [ 360.606421][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 362.601898][ T6601] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 365.219305][ T6622] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 365.485817][ T6618] loop4: detected capacity change from 0 to 1024 [ 365.663806][ T6627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.958398][ T6662] device veth1_macvtap left promiscuous mode [ 369.964856][ T6662] device macsec0 entered promiscuous mode [ 369.982481][ T6662] device veth1_macvtap entered promiscuous mode [ 369.989937][ T6662] device macsec0 left promiscuous mode [ 370.262784][ T6668] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 372.479072][ T6677] delete_channel: no stack [ 376.332270][ T6726] netlink: 248 bytes leftover after parsing attributes in process `syz.5.438'. [ 376.343706][ T6726] unsupported nlmsg_type 40 [ 377.884272][ T6736] device veth1_macvtap entered promiscuous mode [ 377.891253][ T6736] device macsec0 left promiscuous mode [ 377.902637][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 378.465251][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.471954][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.833205][ T6758] Cannot find set identified by id 632 to match [ 385.968195][ T6794] device veth1_macvtap left promiscuous mode [ 385.974319][ T6794] device macsec0 entered promiscuous mode [ 385.992203][ T6794] device veth1_macvtap entered promiscuous mode [ 385.999217][ T6794] device macsec0 left promiscuous mode [ 387.527418][ T6805] loop2: detected capacity change from 0 to 1024 [ 388.195234][ T6804] delete_channel: no stack [ 389.143013][ T6828] loop4: detected capacity change from 0 to 1024 [ 391.255949][ T46] hfsplus: b-tree write err: -5, ino 4 [ 392.547356][ T6843] sd 0:0:1:0: device reset [ 393.562140][ T6843] loop4: detected capacity change from 0 to 32768 [ 393.844990][ T6843] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 397.219272][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 398.192417][ T6870] kernel profiling enabled (shift: 7) [ 399.627445][ T4256] ocfs2: Unmounting device (7,4) on (node local) [ 400.015359][ T4298] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 401.847867][ T6877] loop2: detected capacity change from 0 to 64 [ 401.958587][ T6899] loop5: detected capacity change from 0 to 8 [ 404.163635][ T6877] hfs: unable to change codepage [ 404.168874][ T6877] hfs: unable to parse mount options [ 404.233573][ T4298] usb 3-1: unable to get BOS descriptor or descriptor too short [ 404.308680][ T4298] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 404.319311][ T6898] SQUASHFS error: lzo decompression failed, data probably corrupt [ 404.323463][ T4298] usb 3-1: can't read configurations, error -71 [ 404.327560][ T6898] SQUASHFS error: Failed to read block 0x71: -5 [ 404.353729][ T6898] SQUASHFS error: lzo decompression failed, data probably corrupt [ 404.361632][ T6898] SQUASHFS error: Failed to read block 0x71: -5 [ 404.368199][ T26] audit: type=1800 audit(1744945509.700:12): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.477" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 406.018139][ T6914] loop5: detected capacity change from 0 to 2048 [ 406.245549][ T6920] netlink: 248 bytes leftover after parsing attributes in process `syz.4.481'. [ 406.692236][ T6914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.954695][ T4297] hid-generic 0933:0000:0002.0001: item fetching failed at offset 0/2 [ 407.019369][ T4297] hid-generic: probe of 0933:0000:0002.0001 failed with error -22 [ 410.334413][ T6942] loop4: detected capacity change from 0 to 1024 [ 411.941910][ T6954] loop3: detected capacity change from 0 to 512 [ 411.993123][ T6954] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.489: casefold flag without casefold feature [ 412.006295][ T6954] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.489: couldn't read orphan inode 15 (err -117) [ 412.025284][ T6954] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 412.044106][ T4378] hfsplus: b-tree write err: -5, ino 4 [ 414.594879][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 419.830258][ T6986] loop4: detected capacity change from 0 to 256 [ 420.957993][ T6997] sd 0:0:1:0: device reset [ 421.952063][ T7002] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 422.995336][ T6997] loop3: detected capacity change from 0 to 32768 [ 423.633779][ T6997] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 424.172462][ T7019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'. [ 424.283737][ T7018] netlink: 'syz.4.505': attribute type 10 has an invalid length. [ 424.315812][ T7018] device syz_tun entered promiscuous mode [ 424.339785][ T7014] loop5: detected capacity change from 0 to 1024 [ 424.348696][ T7018] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 424.555631][ T4250] ocfs2: Unmounting device (7,3) on (node local) [ 425.142676][ T126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 425.186224][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 425.373548][ T126] usb 5-1: device descriptor read/64, error -32 [ 425.703781][ T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 426.263422][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 426.270493][ T126] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 426.283361][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.305972][ T126] usb 5-1: config 0 has no interfaces? [ 426.317904][ T126] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 426.337465][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.439567][ T126] usb 5-1: Product: syz [ 426.457601][ T126] usb 5-1: Manufacturer: syz [ 426.542819][ T126] usb 5-1: SerialNumber: syz [ 426.864838][ T126] usb 5-1: config 0 descriptor?? [ 427.479571][ T126] usb 5-1: can't set config #0, error -71 [ 427.507992][ T126] usb 5-1: USB disconnect, device number 3 [ 430.100590][ T6136] hfsplus: b-tree write err: -5, ino 4 [ 431.753875][ T7096] sd 0:0:1:0: device reset [ 431.911048][ T7099] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 439.698773][ T7128] loop4: detected capacity change from 0 to 1024 [ 439.896273][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.902638][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.151397][ T7138] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 441.387454][ T7150] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 441.470091][ T7151] device veth1_macvtap left promiscuous mode [ 441.476429][ T7151] device macsec0 entered promiscuous mode [ 441.844780][ T7153] device veth1_macvtap entered promiscuous mode [ 441.852223][ T7153] device macsec0 left promiscuous mode [ 446.846046][ T11] hfsplus: b-tree write err: -5, ino 4 [ 449.888907][ T7204] device veth1_macvtap left promiscuous mode [ 450.766953][ T7204] device macsec0 entered promiscuous mode [ 450.810609][ T7213] device veth1_macvtap entered promiscuous mode [ 450.828698][ T7213] device macsec0 left promiscuous mode [ 450.870273][ T7228] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 456.020835][ T7266] sd 0:0:1:0: device reset [ 457.565224][ T7266] loop5: detected capacity change from 0 to 32768 [ 460.287125][ T7266] (syz.5.559,7266,1):ocfs2_initialize_super:2283 ERROR: status = -12 [ 462.535256][ T7266] (syz.5.559,7266,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 462.887262][ T7307] tipc: Started in network mode [ 462.892292][ T7307] tipc: Node identity 7, cluster identity 4711 [ 462.898552][ T7307] tipc: Node number set to 7 [ 464.677987][ T7317] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 464.794823][ T7323] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 471.233413][ T4302] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 471.410660][ T7388] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 471.458895][ T4302] usb 5-1: Using ep0 maxpacket: 16 [ 471.472303][ T4302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.551335][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 471.641058][ T4302] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 472.261693][ T4302] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 472.316140][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.351336][ T4302] usb 5-1: Product: syz [ 472.369594][ T4302] usb 5-1: Manufacturer: syz [ 472.377937][ T4302] usb 5-1: SerialNumber: syz [ 472.397753][ T4302] usb 5-1: config 0 descriptor?? [ 473.065192][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 473.375846][ T4302] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 475.173529][ T4302] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -8) [ 475.491863][ T7415] loop2: detected capacity change from 0 to 512 [ 475.612914][ T7415] EXT4-fs (loop2): 1 orphan inode deleted [ 475.623534][ T7415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 475.637774][ T46] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 476.344572][ T7415] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.520827][ T4302] peak_usb: probe of 5-1:0.0 failed with error -8 [ 476.544029][ T4302] usb 5-1: USB disconnect, device number 4 [ 476.574389][ T46] EXT4-fs error (device loop2): ext4_release_dquot:6825: comm kworker/u4:3: Failed to release dquot type 1 [ 477.466159][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 478.103850][ T7444] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 478.269287][ T26] audit: type=1326 audit(1744945583.600:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 478.297344][ T7436] binder: 7435:7436 ioctl c0306201 200000000280 returned -14 [ 478.466332][ T26] audit: type=1326 audit(1744945583.640:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 478.488341][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.789043][ T26] audit: type=1326 audit(1744945583.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 479.343396][ T26] audit: type=1326 audit(1744945583.640:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 480.550465][ T26] audit: type=1326 audit(1744945583.650:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 480.572668][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.622927][ T26] audit: type=1326 audit(1744945583.650:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 481.598335][ T26] audit: type=1326 audit(1744945583.650:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 481.620442][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.690658][ T7471] program syz.3.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.391759][ T26] audit: type=1326 audit(1744945583.650:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 482.597333][ T26] audit: type=1326 audit(1744945583.660:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 482.903460][ T26] audit: type=1326 audit(1744945583.840:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 483.695087][ T26] audit: type=1326 audit(1744945583.840:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 483.857612][ T26] audit: type=1326 audit(1744945583.840:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 483.885882][ T26] audit: type=1326 audit(1744945583.840:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 485.003427][ T26] audit: type=1326 audit(1744945583.840:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 485.223662][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.587644][ T7521] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 489.621106][ T7498] device veth1_macvtap left promiscuous mode [ 489.642820][ T7498] device macsec0 entered promiscuous mode [ 490.473679][ T7505] device veth1_macvtap entered promiscuous mode [ 490.493101][ T7505] device macsec0 left promiscuous mode [ 491.150728][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 493.718524][ T7551] loop2: detected capacity change from 0 to 64 [ 496.992075][ T7584] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 498.357302][ T7594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.632'. [ 501.426562][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.432932][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.817369][ T7637] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 503.243137][ T7646] loop4: detected capacity change from 0 to 16 [ 503.857113][ T7650] tipc: Started in network mode [ 503.862067][ T7650] tipc: Node identity 7, cluster identity 4711 [ 503.868551][ T7650] tipc: Node number set to 7 [ 504.163810][ T7656] loop4: detected capacity change from 0 to 512 [ 504.535197][ T7656] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #17: comm syz.4.647: iget: bogus i_mode (0) [ 504.547197][ T7656] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.647: couldn't read orphan inode 17 (err -117) [ 504.559413][ T7656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 504.617502][ T7646] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.647: bg 0: block 7: invalid block bitmap [ 504.864076][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 505.396152][ T7671] loop3: detected capacity change from 0 to 256 [ 505.403439][ T7671] FAT-fs (loop3): Unrecognized mount option "nonuóЉmtail=0" or missing value [ 509.423857][ T7697] loop4: detected capacity change from 0 to 40427 [ 509.435122][ T7697] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 509.447156][ T7697] F2FS-fs (loop4): invalid crc value [ 509.459176][ T7697] F2FS-fs (loop4): Found nat_bits in checkpoint [ 509.508831][ T7697] F2FS-fs (loop4): Start checkpoint disabled! [ 509.572085][ T7701] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 509.596059][ T7697] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 510.351940][ T7713] tipc: Started in network mode [ 510.357056][ T7713] tipc: Node identity 7, cluster identity 4711 [ 510.363410][ T7713] tipc: Node number set to 7 [ 510.729919][ T7716] F2FS-fs (loop4) : inject no more block in inc_valid_block_count of __allocate_data_block+0x48d/0xb50 [ 512.946189][ T6759] kworker/u4:20: attempt to access beyond end of device [ 512.946189][ T6759] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 515.319237][ T7738] input: syz1 as /devices/virtual/input/input8 [ 519.749721][ T7778] tipc: Started in network mode [ 519.754722][ T7778] tipc: Node identity 7, cluster identity 4711 [ 519.760897][ T7778] tipc: Node number set to 7 [ 524.518513][ T5091] libceph: connect (1)[c::]:6789 error -101 [ 524.524963][ T5091] libceph: mon0 (1)[c::]:6789 connect error [ 524.609717][ T7799] ceph: No mds server is up or the cluster is laggy [ 524.785169][ T4298] libceph: connect (1)[c::]:6789 error -101 [ 524.920987][ T4298] libceph: mon0 (1)[c::]:6789 connect error [ 525.502637][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 525.745161][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 525.847783][ T7826] loop4: detected capacity change from 0 to 128 [ 527.665646][ T7845] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 528.095480][ T7848] device veth1_macvtap left promiscuous mode [ 528.102106][ T7848] device macsec0 entered promiscuous mode [ 528.118494][ T7843] device veth1_macvtap entered promiscuous mode [ 528.198660][ T7843] device macsec0 left promiscuous mode [ 532.743896][ T4297] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 533.376723][ T7897] NILFS (nullb0): couldn't find nilfs on the device [ 534.035388][ T4297] usb 6-1: Using ep0 maxpacket: 32 [ 534.074548][ T4297] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 534.083125][ T4297] usb 6-1: config 0 has an invalid interface number: 98 but max is 1 [ 534.101608][ T4297] usb 6-1: config 0 has no interface number 0 [ 534.113348][ T4297] usb 6-1: config 0 has no interface number 1 [ 534.244167][ T4297] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 535.104427][ T4297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.135219][ T4297] usb 6-1: config 0 descriptor?? [ 535.143690][ T4297] usb 6-1: can't set config #0, error -71 [ 535.164164][ T4297] usb 6-1: USB disconnect, device number 2 [ 535.746317][ T7913] tipc: Started in network mode [ 535.751273][ T7913] tipc: Node identity 7, cluster identity 4711 [ 535.757574][ T7913] tipc: Node number set to 7 [ 537.686899][ T7921] loop5: detected capacity change from 0 to 256 [ 537.949126][ T7921] MINIX-fs: mounting file system with errors, running fsck is recommended [ 538.617163][ T7943] syz.5.707: attempt to access beyond end of device [ 538.617163][ T7943] loop5: rw=0, sector=917640, nr_sectors = 2 limit=256 [ 538.631092][ T7943] Buffer I/O error on dev loop5, logical block 458820, async page read [ 539.284043][ T26] audit: type=1326 audit(1744945644.620:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 539.337496][ T26] audit: type=1326 audit(1744945644.650:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 539.370205][ T7953] netlink: 'syz.2.716': attribute type 13 has an invalid length. [ 540.679983][ T26] audit: type=1326 audit(1744945644.650:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 540.701997][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.722588][ T26] audit: type=1326 audit(1744945644.650:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 540.805688][ T7960] sd 0:0:1:0: device reset [ 541.110863][ T26] audit: type=1326 audit(1744945644.650:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fad5298e169 code=0x7ffc0000 [ 542.922011][ T7960] loop4: detected capacity change from 0 to 32768 [ 543.040070][ T7960] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 543.651495][ T4256] ocfs2: Unmounting device (7,4) on (node local) [ 547.151021][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.158403][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.199028][ T8000] xt_hashlimit: Unknown mode mask F0030000, kernel too old? [ 547.349999][ T7953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.371355][ T7953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.565011][ T7953] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.580378][ T7953] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.589825][ T7953] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.613372][ T7953] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.108778][ T8028] vivid-000: ================= START STATUS ================= [ 548.116906][ T8028] vivid-000: Generate PTS: true [ 548.122348][ T8028] vivid-000: Generate SCR: true [ 548.127520][ T8028] tpg source WxH: 640x480 (Y'CbCr) [ 548.132692][ T8028] tpg field: 1 [ 548.136151][ T8028] tpg crop: 640x480@0x0 [ 548.140365][ T8028] tpg compose: 640x480@0x0 [ 548.144970][ T8028] tpg colorspace: 8 [ 548.148815][ T8028] tpg transfer function: 0/0 [ 548.153487][ T8028] tpg Y'CbCr encoding: 0/0 [ 548.157968][ T8028] tpg quantization: 0/0 [ 548.170026][ T8028] tpg RGB range: 0/2 [ 548.174037][ T8028] vivid-000: ================== END STATUS ================== [ 552.230877][ T8052] loop3: detected capacity change from 0 to 1024 [ 552.396382][ T8052] hfsplus: unable to change nls mapping [ 552.429260][ T8056] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 552.436182][ T8056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.445816][ T8056] vhci_hcd vhci_hcd.0: Device attached [ 552.526705][ T8052] hfsplus: unable to parse mount options [ 552.727612][ T8007] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 553.195168][ T8057] vhci_hcd: connection closed [ 553.737512][ T4386] vhci_hcd: stop threads [ 554.863982][ T4386] vhci_hcd: release socket [ 554.883688][ T4386] vhci_hcd: disconnect device [ 555.738593][ T8076] input: syz0 as /devices/virtual/input/input9 [ 557.120877][ T8082] device veth1_macvtap left promiscuous mode [ 557.134636][ T8082] device macsec0 entered promiscuous mode [ 557.188769][ T8087] device veth1_macvtap entered promiscuous mode [ 558.084528][ T8087] device macsec0 left promiscuous mode [ 559.733815][ T8007] vhci_hcd: vhci_device speed not set [ 562.923919][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.930282][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.137913][ T8174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 569.164378][ T8174] netlink: 'syz.3.756': attribute type 10 has an invalid length. [ 573.024768][ T8206] input: syz0 as /devices/virtual/input/input10 [ 577.851951][ T8233] loop3: detected capacity change from 0 to 512 [ 577.910139][ T8235] netlink: 56 bytes leftover after parsing attributes in process `syz.5.771'. [ 577.993358][ T8233] EXT4-fs: Ignoring removed mblk_io_submit option [ 579.110302][ T8233] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 579.591571][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 582.157667][ T8261] device veth1_macvtap left promiscuous mode [ 582.163947][ T8261] device macsec0 entered promiscuous mode [ 582.181322][ T8261] device veth1_macvtap entered promiscuous mode [ 582.189455][ T8261] device macsec0 left promiscuous mode [ 582.204816][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 583.885812][ T8277] loop4: detected capacity change from 0 to 2048 [ 583.899601][ T8277] UDF-fs: bad mount option "bs=00000000000000000009" or missing value [ 587.522895][ T8296] device veth1_macvtap left promiscuous mode [ 587.529048][ T8296] device macsec0 entered promiscuous mode [ 587.550784][ T8296] device veth1_macvtap entered promiscuous mode [ 587.558240][ T8296] device macsec0 left promiscuous mode [ 594.004891][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 594.018283][ T8339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 594.256346][ T8339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 594.284150][ T8339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 594.305997][ T8339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 594.319723][ T8339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 594.473619][ T4252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 594.490569][ T4252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 594.517393][ T4252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 594.600158][ T4252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 594.637025][ T4252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 594.658031][ T4252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 596.783468][ T8339] Bluetooth: hci3: command 0x0409 tx timeout [ 597.783109][ T8351] device veth1_macvtap left promiscuous mode [ 597.808228][ T8351] device macsec0 entered promiscuous mode [ 597.841416][ T8352] device veth1_macvtap entered promiscuous mode [ 597.865247][ T8352] device macsec0 left promiscuous mode [ 598.864898][ T8339] Bluetooth: hci3: command 0x041b tx timeout [ 599.507937][ T4279] tipc: Left network mode [ 601.126912][ T8339] Bluetooth: hci3: command 0x040f tx timeout [ 601.219897][ T8375] loop3: detected capacity change from 0 to 4096 [ 601.227094][ T8337] chnl_net:caif_netlink_parms(): no params data found [ 601.271367][ T8375] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 602.175673][ T8392] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 602.490297][ T8375] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 602.533738][ T8375] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 602.642154][ T8375] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 603.866537][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 603.910536][ T8375] ntfs: (device loop3): map_mft_record(): Failed with error code 4. [ 604.443336][ T8375] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -4. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 604.543557][ T8375] ntfs: (device loop3): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 604.601530][ T8375] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 605.303861][ T8422] overlayfs: missing 'lowerdir' [ 605.975846][ T8339] Bluetooth: hci3: command 0x0405 tx timeout [ 606.095770][ T8420] lo speed is unknown, defaulting to 1000 [ 606.119897][ T8420] lo speed is unknown, defaulting to 1000 [ 606.141059][ T8420] lo speed is unknown, defaulting to 1000 [ 606.502835][ T8420] infiniband sz1: set active [ 606.507989][ T8420] infiniband sz1: added lo [ 606.515128][ T8420] rdma_rxe: unable to create cq [ 606.520604][ T8420] infiniband sz1: Couldn't create ib_mad CQ [ 606.527109][ T8420] infiniband sz1: Couldn't open port 1 [ 606.576770][ T8425] device veth1_macvtap left promiscuous mode [ 606.587670][ T8425] device macsec0 entered promiscuous mode [ 606.603644][ T8420] RDS/IB: sz1: added [ 606.608506][ T8420] smc: adding ib device sz1 with port count 1 [ 606.615097][ T8420] smc: ib device sz1 port 1 has pnetid [ 606.918586][ T8426] device veth1_macvtap entered promiscuous mode [ 607.696795][ T8426] device macsec0 left promiscuous mode [ 607.732390][ T8011] lo speed is unknown, defaulting to 1000 [ 607.960053][ T8420] lo speed is unknown, defaulting to 1000 [ 607.985398][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.953381][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.961642][ T8337] device bridge_slave_0 entered promiscuous mode [ 608.997823][ T8007] lo speed is unknown, defaulting to 1000 [ 609.054247][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.061438][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.084581][ T8337] device bridge_slave_1 entered promiscuous mode [ 609.092237][ T8420] lo speed is unknown, defaulting to 1000 [ 609.200611][ T8420] lo speed is unknown, defaulting to 1000 [ 610.938356][ T8420] lo speed is unknown, defaulting to 1000 [ 612.307721][ T8420] lo speed is unknown, defaulting to 1000 [ 612.406854][ T8337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.436853][ T8420] lo speed is unknown, defaulting to 1000 [ 612.457129][ T8337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.889956][ T8337] team0: Port device team_slave_0 added [ 615.934457][ T8337] team0: Port device team_slave_1 added [ 616.146187][ T8496] 9pnet_virtio: no channels available for device syz [ 617.196690][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.222733][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.248724][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.980444][ T8337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.364114][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.371706][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.393968][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.415060][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.553775][ T8337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.165083][ T8568] loop3: detected capacity change from 0 to 2048 [ 627.253020][ T8337] device hsr_slave_0 entered promiscuous mode [ 627.295812][ T8337] device hsr_slave_1 entered promiscuous mode [ 627.569036][ T8568] loop3: p1 < > p4 [ 627.847967][ T8568] loop3: p4 size 8388608 extends beyond EOD, truncated [ 627.883366][ T8007] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 628.133534][ T8007] usb 4-1: Using ep0 maxpacket: 16 [ 628.151357][ T8007] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.189091][ T8007] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.222522][ T8007] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.272784][ T8007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.292167][ T8007] usb 4-1: Product: syz [ 628.332740][ T8007] usb 4-1: Manufacturer: syz [ 628.342994][ T8007] usb 4-1: SerialNumber: syz [ 628.391927][ T4279] device hsr_slave_0 left promiscuous mode [ 628.407279][ T4279] device hsr_slave_1 left promiscuous mode [ 628.509021][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.526350][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.005285][ T4279] device bridge_slave_1 left promiscuous mode [ 629.200755][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.430830][ T4279] device bridge_slave_0 left promiscuous mode [ 629.465228][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.527883][ T4279] bond1 (unregistering): Released all slaves [ 633.523755][ T8613] Bluetooth: MGMT ver 1.22 [ 634.425470][ T8007] usb 4-1: 0:2 : does not exist [ 634.476247][ T8007] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 636.428381][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 637.598074][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 637.869007][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.981761][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.133359][ T8008] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 638.796665][ T8008] usb 5-1: Using ep0 maxpacket: 8 [ 638.859728][ T8008] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 638.875377][ T8008] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 638.893750][ T8008] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 638.925732][ T8008] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.050874][ T8008] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.096172][ T8008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.296848][ T8008] usb 5-1: usb_control_msg returned -71 [ 641.302690][ T8008] usbtmc 5-1:16.0: can't read capabilities [ 641.440423][ T8008] usb 5-1: USB disconnect, device number 5 [ 642.401630][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 642.416184][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 642.426562][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 642.436810][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 642.444890][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 642.458046][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 642.745018][ T4279] bond0 (unregistering): Released all slaves [ 643.033994][ T8576] qfq: no options [ 644.277026][ T8671] lo speed is unknown, defaulting to 1000 [ 644.302956][ T8011] usb 4-1: USB disconnect, device number 2 [ 644.534939][ T8339] Bluetooth: hci4: command 0x0409 tx timeout [ 645.399735][ T8337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 645.476092][ T8701] tmpfs: Unknown parameter 'usrquota' [ 645.629536][ T8337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 646.007322][ T8337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 646.067185][ T8337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 646.623505][ T8339] Bluetooth: hci4: command 0x041b tx timeout [ 647.540329][ T8337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.839099][ T4279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.948564][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 647.962526][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 647.986307][ T8337] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.078346][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 648.094857][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 648.105491][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.112661][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.256256][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 648.266157][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 648.275369][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 648.284242][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.291447][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.313772][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 648.407434][ T8671] chnl_net:caif_netlink_parms(): no params data found [ 648.422735][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 648.440790][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 648.489052][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 648.510119][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 648.546283][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 648.694882][ T8339] Bluetooth: hci4: command 0x040f tx timeout [ 648.887144][ T4279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.105097][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 649.565582][ T4279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.765571][ T4279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.908233][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.943711][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.952096][ T8671] device bridge_slave_0 entered promiscuous mode [ 650.067455][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.083639][ T8671] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.092077][ T8671] device bridge_slave_1 entered promiscuous mode [ 650.204139][ T4252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 650.215224][ T4252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 650.224751][ T4252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 650.270066][ T4252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 650.281600][ T4252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 650.294696][ T4252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 650.353851][ T8671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.445339][ T8671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.477972][ T8749] lo speed is unknown, defaulting to 1000 [ 650.594727][ T8671] team0: Port device team_slave_0 added [ 650.601322][ T4279] tipc: Left network mode [ 650.637262][ T8671] team0: Port device team_slave_1 added [ 650.773559][ T8339] Bluetooth: hci4: command 0x0419 tx timeout [ 650.902636][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.923765][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.013641][ T8671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.045394][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.052393][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.123949][ T8671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.306753][ T8671] device hsr_slave_0 entered promiscuous mode [ 651.354683][ T8671] device hsr_slave_1 entered promiscuous mode [ 651.383471][ T8671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.409977][ T8671] Cannot create hsr debugfs directory [ 652.383843][ T8339] Bluetooth: hci1: command 0x0409 tx timeout [ 652.853437][ T4252] Bluetooth: hci4: command 0x0405 tx timeout [ 652.909552][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 653.063146][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.872'. [ 653.941367][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.964991][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.004046][ T8749] device bridge_slave_0 entered promiscuous mode [ 654.300964][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.455768][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 654.655679][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.752340][ T8749] device bridge_slave_1 entered promiscuous mode [ 655.261385][ T8671] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 656.474781][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.504256][ T8671] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 656.533594][ T4252] Bluetooth: hci1: command 0x040f tx timeout [ 656.564961][ T8671] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 656.625797][ T8339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 656.638803][ T8339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 656.647691][ T8339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 656.660594][ T8339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 656.670531][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.680893][ T8339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 656.690033][ T8339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 656.725095][ T8671] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 656.862322][ T8749] team0: Port device team_slave_0 added [ 656.905667][ T8749] team0: Port device team_slave_1 added [ 657.132276][ T4279] device hsr_slave_0 left promiscuous mode [ 657.151903][ T4279] device hsr_slave_1 left promiscuous mode [ 657.371102][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.411990][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.855755][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.882881][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.932687][ T4279] device bridge_slave_1 left promiscuous mode [ 657.954424][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.975112][ T4279] device bridge_slave_0 left promiscuous mode [ 657.981396][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.021519][ T4279] device veth1_macvtap left promiscuous mode [ 658.045704][ T4279] device veth0_macvtap left promiscuous mode [ 658.051896][ T4279] device veth1_vlan left promiscuous mode [ 658.077681][ T4279] device veth0_vlan left promiscuous mode [ 658.619372][ T8339] Bluetooth: hci1: command 0x0419 tx timeout [ 658.773390][ T8339] Bluetooth: hci3: command 0x0409 tx timeout [ 659.592073][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 659.737020][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 659.875414][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.171491][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.286341][ T8339] Bluetooth: hci3: command 0x041b tx timeout [ 663.413678][ T8339] Bluetooth: hci3: command 0x040f tx timeout [ 664.392666][ T4279] bond0 (unregistering): Released all slaves [ 664.772336][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.817830][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.848043][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.862269][ T8813] lo speed is unknown, defaulting to 1000 [ 664.865328][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.881777][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.915068][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.083119][ T8749] device hsr_slave_0 entered promiscuous mode [ 665.095952][ T8749] device hsr_slave_1 entered promiscuous mode [ 665.107279][ T8749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.121425][ T8749] Cannot create hsr debugfs directory [ 665.412743][ T8671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.493444][ T8339] Bluetooth: hci3: command 0x0419 tx timeout [ 665.582385][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 665.603023][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 665.634378][ T8671] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.729605][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 665.755632][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 665.813050][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.820277][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.573855][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 666.595146][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.614609][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.621841][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.676593][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.722581][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 666.761544][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 666.832369][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 666.851176][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 666.881332][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 670.209134][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 670.227391][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 670.237144][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 670.246205][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 670.270044][ T8671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.319879][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 670.588434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 670.607614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 670.652535][ T8918] device veth1_macvtap left promiscuous mode [ 670.675114][ T8918] device macsec0 entered promiscuous mode [ 670.707222][ T8923] device veth1_macvtap entered promiscuous mode [ 670.735918][ T8923] device macsec0 left promiscuous mode [ 670.832452][ T8813] chnl_net:caif_netlink_parms(): no params data found [ 671.231026][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.241937][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.255845][ T8813] device bridge_slave_0 entered promiscuous mode [ 671.726612][ T8937] loop4: detected capacity change from 0 to 512 [ 671.736976][ T8937] EXT4-fs: Ignoring removed mblk_io_submit option [ 672.098429][ T1243] block nbd5: Possible stuck request ffff888025c38000: control (read@0,512B). Runtime 30 seconds [ 672.133005][ T8937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 672.212239][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.243539][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.251957][ T8813] device bridge_slave_1 entered promiscuous mode [ 672.518226][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 672.926274][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.967169][ T8671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.000146][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.026971][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.039198][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.164819][ T8813] team0: Port device team_slave_0 added [ 673.184578][ T8813] team0: Port device team_slave_1 added [ 673.309177][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.322026][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.398762][ T8813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.484181][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.491210][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.623354][ T8813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.919078][ T8813] device hsr_slave_0 entered promiscuous mode [ 674.068732][ T8813] device hsr_slave_1 entered promiscuous mode [ 674.184520][ T8813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.278923][ T8813] Cannot create hsr debugfs directory [ 674.660975][ T8749] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 674.903933][ T8749] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 675.252310][ T8749] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 675.364098][ T8749] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 676.502429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 676.520828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 676.877213][ T4279] device hsr_slave_0 left promiscuous mode [ 676.909694][ T4279] device hsr_slave_1 left promiscuous mode [ 676.940127][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.986501][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.995115][ T4279] device bridge_slave_1 left promiscuous mode [ 677.001565][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.021519][ T4279] device bridge_slave_0 left promiscuous mode [ 677.028702][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.467351][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 677.536805][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 677.622819][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.432142][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.976001][ T4279] bond0 (unregistering): Released all slaves [ 679.142432][ T9007] device veth1_macvtap left promiscuous mode [ 679.148589][ T9007] device macsec0 entered promiscuous mode [ 679.169277][ T9008] device veth1_macvtap entered promiscuous mode [ 679.187588][ T9008] device macsec0 left promiscuous mode [ 679.264281][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 679.283897][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 679.297662][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 679.306221][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 679.340605][ T8671] device veth0_vlan entered promiscuous mode [ 680.065906][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.096205][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.192853][ T8749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 680.221783][ T8749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 681.116576][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.241839][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 681.293847][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 681.319134][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 681.334300][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.374102][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.381269][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.404180][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 681.414308][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.431720][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.438931][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.473701][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 681.504481][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 681.519211][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 681.545070][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 681.558159][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 681.576260][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 681.597516][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 681.614238][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 681.634616][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 681.664317][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 681.672942][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 681.689516][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 681.716071][ T8671] device veth1_vlan entered promiscuous mode [ 681.771399][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 681.805418][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 681.877570][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 681.922996][ T8813] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 681.973180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 681.992565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.029067][ T8813] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 682.074080][ T8813] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 682.107679][ T8671] device veth0_macvtap entered promiscuous mode [ 682.137015][ T8813] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 682.159206][ T8671] device veth1_macvtap entered promiscuous mode [ 682.256563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 682.280199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 682.321243][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.349826][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.393304][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.423460][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.455227][ T8671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.488443][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.513333][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.523729][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.553390][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.587016][ T8671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.612092][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 682.645083][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 682.674231][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 682.736093][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 682.784430][ T8671] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.793194][ T8671] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.849948][ T8671] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.860921][ T8671] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.971022][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 683.008162][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 683.082665][ T26] audit: type=1326 audit(1744945788.410:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.4.907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbe3d8e169 code=0x0 [ 683.108471][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 683.155160][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 683.206400][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 683.216460][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 683.234774][ T9066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.907'. [ 684.177480][ T8749] device veth0_vlan entered promiscuous mode [ 684.230039][ T8813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.284559][ T8749] device veth1_vlan entered promiscuous mode [ 684.363175][ T8813] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.523683][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.532094][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.622347][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.670583][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.697686][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 684.996398][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.093542][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.334064][ T8339] Bluetooth: hci3: command 0x0405 tx timeout [ 685.385333][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 685.402149][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.459943][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.467226][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.482014][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 685.491732][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.500694][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.507974][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.516521][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 685.524869][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 685.624960][ T8813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 685.657131][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.663768][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.715980][ T8813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.958030][ T9098] loop4: detected capacity change from 0 to 1024 [ 686.129382][ T8749] device veth0_macvtap entered promiscuous mode [ 686.527448][ T8749] device veth1_macvtap entered promiscuous mode [ 686.565141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 686.574928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 686.584103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 686.603417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 686.612476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 686.623846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 686.644475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 686.663547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 686.684219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 686.703978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 686.718767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 686.732521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 686.750602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 686.760710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 686.780924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 686.790508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 686.872509][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.953414][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.975905][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.004415][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.033508][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.058212][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.082501][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.085565][ T4407] hfsplus: b-tree write err: -5, ino 4 [ 687.114628][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 687.190233][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 687.244078][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.270298][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.298746][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.453094][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.490182][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.540217][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.390477][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.420165][ T9120] device veth1_macvtap left promiscuous mode [ 688.431976][ T9120] device macsec0 entered promiscuous mode [ 689.401994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 689.422640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 689.444501][ T9124] device veth1_macvtap entered promiscuous mode [ 689.459125][ T9124] device macsec0 left promiscuous mode [ 689.471704][ T8749] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.506771][ T8749] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.543306][ T8749] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.572538][ T8749] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.893737][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 690.964556][ T8813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.144309][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 691.151935][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 692.182640][ T6717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.212834][ T6717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.621895][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.659162][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 692.668985][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.780726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 693.474675][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'. [ 693.491628][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'. [ 695.557317][ T9166] device veth1_macvtap left promiscuous mode [ 695.563547][ T9166] device macsec0 entered promiscuous mode [ 695.583560][ T9178] device veth1_macvtap entered promiscuous mode [ 696.224758][ T9178] device macsec0 left promiscuous mode [ 696.275305][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 696.494446][ T9185] device veth1_macvtap left promiscuous mode [ 696.500488][ T9185] device macsec0 entered promiscuous mode [ 696.514711][ T9185] device veth1_macvtap entered promiscuous mode [ 696.521129][ T9185] device macsec0 left promiscuous mode [ 696.528577][ T8339] Bluetooth: hci1: unknown advertising packet type: 0x63 [ 696.528646][ T8339] Bluetooth: hci1: Malformed LE Event: 0x02 [ 696.771830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 696.814293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 697.570708][ T9200] loop6: detected capacity change from 0 to 16 [ 697.585798][ T8813] device veth0_vlan entered promiscuous mode [ 697.710064][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 697.750580][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 698.030975][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 698.284868][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 698.385720][ T8813] device veth1_vlan entered promiscuous mode [ 698.521228][ T9203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.925'. [ 699.507168][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 699.594595][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 699.611836][ T8813] device veth0_macvtap entered promiscuous mode [ 699.936173][ T8813] device veth1_macvtap entered promiscuous mode [ 699.993591][ T9218] loop7: detected capacity change from 0 to 128 [ 700.080752][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.680246][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.889528][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.040425][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.083382][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.178492][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.922380][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.102253][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.274315][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.352709][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.410930][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.472146][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.533426][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.596609][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.643684][ T1243] block nbd5: Possible stuck request ffff888025c38000: control (read@0,512B). Runtime 60 seconds [ 702.655358][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.703464][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.736134][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.779646][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.809210][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 702.824017][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 702.864590][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 703.710969][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 703.756726][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 703.870352][ T8813] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.882828][ T8813] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.891654][ T8813] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.901033][ T8813] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.661896][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.889159][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.199380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 706.639766][ T9282] vivid-000: ================= START STATUS ================= [ 706.647590][ T9282] vivid-000: Generate PTS: true [ 706.652624][ T9282] vivid-000: Generate SCR: true [ 706.657704][ T9282] tpg source WxH: 640x480 (Y'CbCr) [ 706.662892][ T9282] tpg field: 1 [ 706.666371][ T9282] tpg crop: 640x480@0x0 [ 706.670600][ T9282] tpg compose: 640x480@0x0 [ 706.675127][ T9282] tpg colorspace: 8 [ 706.678998][ T9282] tpg transfer function: 0/0 [ 706.683695][ T9282] tpg Y'CbCr encoding: 0/0 [ 706.688186][ T9282] tpg quantization: 0/0 [ 706.701486][ T9282] tpg RGB range: 0/2 [ 706.705539][ T9282] vivid-000: ================== END STATUS ================== [ 706.913989][ T9284] vivid-000: kernel_thread() failed [ 706.981115][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.054845][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.219054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 711.393787][ T9317] NILFS (nullb0): couldn't find nilfs on the device [ 713.923505][ T9337] device veth1_macvtap left promiscuous mode [ 713.929623][ T9337] device macsec0 entered promiscuous mode [ 714.664181][ T9343] device veth1_macvtap entered promiscuous mode [ 714.674289][ T9343] device macsec0 left promiscuous mode [ 715.749253][ T9355] loop4: detected capacity change from 0 to 32768 [ 716.913656][ T8008] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 717.153627][ T8008] usb 8-1: Using ep0 maxpacket: 32 [ 717.211786][ T8008] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.362478][ T8008] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 717.499104][ T8008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.758324][ T8008] usb 8-1: config 0 descriptor?? [ 718.034403][ T8008] hub 8-1:0.0: bad descriptor, ignoring hub [ 718.145210][ T8008] hub: probe of 8-1:0.0 failed with error -5 [ 718.666129][ T9355] XFS (loop4): Mounting V5 Filesystem [ 718.701709][ T9355] XFS (loop4): log mount failed [ 720.948970][ T9382] input: syz1 as /devices/virtual/input/input11 [ 721.114437][ T8005] usb 8-1: USB disconnect, device number 2 [ 724.541116][ T9419] sctp: [Deprecated]: syz.6.960 (pid 9419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.541116][ T9419] Use struct sctp_sack_info instead [ 726.885385][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.960'. [ 728.568597][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.7.962'. [ 728.579057][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.7.962'. [ 732.012554][ T9437] netlink: 20 bytes leftover after parsing attributes in process `syz.6.963'. [ 733.881518][ T1243] block nbd5: Possible stuck request ffff888025c38000: control (read@0,512B). Runtime 90 seconds [ 733.950701][ T9458] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 733.957276][ T9458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 733.966973][ T9458] vhci_hcd vhci_hcd.0: Device attached [ 733.974162][ T9462] vhci_hcd: connection closed [ 733.976048][ T6136] vhci_hcd: stop threads [ 734.350629][ T6136] vhci_hcd: release socket [ 734.363316][ T8006] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 735.794778][ T6136] vhci_hcd: disconnect device [ 735.823303][ T8006] usb 45-1: enqueue for inactive port 0 [ 735.914564][ T8006] vhci_hcd: vhci_device speed not set [ 737.613979][ T4252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 737.634977][ T4252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 737.647206][ T4252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 737.658501][ T9480] device veth1_macvtap left promiscuous mode [ 737.815448][ T4252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 737.828319][ T4252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 737.904654][ T9480] device macsec0 entered promiscuous mode [ 737.943603][ T4252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 738.019775][ T8339] Bluetooth: hci4: unknown advertising packet type: 0x63 [ 738.019849][ T8339] Bluetooth: hci4: Malformed LE Event: 0x02 [ 738.075017][ T9486] device veth1_macvtap entered promiscuous mode [ 738.116791][ T9486] device macsec0 left promiscuous mode [ 738.213735][ T8339] Bluetooth: hci1: command 0x0405 tx timeout [ 738.370437][ T9280] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.497150][ T9497] lo speed is unknown, defaulting to 1000 [ 738.560069][ T9507] loop7: detected capacity change from 0 to 256 [ 738.580566][ T9280] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.668835][ T9507] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 738.758901][ T9280] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.066662][ T9517] fuse: Bad value for 'rootmode' [ 740.317992][ T8339] Bluetooth: hci3: command 0x0409 tx timeout [ 741.305542][ T9280] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.742686][ T9535] fuse: Bad value for 'user_id' [ 742.794046][ T8339] Bluetooth: hci3: command 0x041b tx timeout [ 744.457630][ T9497] chnl_net:caif_netlink_parms(): no params data found [ 744.647320][ T9553] loop7: detected capacity change from 0 to 16 [ 745.203836][ T9553] erofs: (device loop7): mounted with root inode @ nid 36. [ 745.433708][ T8339] Bluetooth: hci3: command 0x040f tx timeout [ 747.097934][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.233548][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.493332][ T8339] Bluetooth: hci3: command 0x0419 tx timeout [ 747.852413][ T9547] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 747.858832][ T9547] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 747.865359][ T9547] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 747.872845][ T9547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 747.878820][ T9547] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 747.884795][ T9547] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 747.893602][ T9547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 747.899553][ T9547] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 747.906933][ T9547] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 748.005726][ T9497] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.072891][ T4266] Bluetooth: hci1: unknown advertising packet type: 0x63 [ 748.072923][ T4266] Bluetooth: hci1: Malformed LE Event: 0x02 [ 748.088731][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.113525][ T9497] device bridge_slave_0 entered promiscuous mode [ 748.164358][ T9583] device veth1_macvtap left promiscuous mode [ 748.171078][ T9583] device macsec0 entered promiscuous mode [ 749.207860][ T9590] device veth1_macvtap entered promiscuous mode [ 749.224771][ T9590] device macsec0 left promiscuous mode [ 749.236300][ T9497] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.258353][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.299368][ T9497] device bridge_slave_1 entered promiscuous mode [ 749.492511][ T9602] loop7: detected capacity change from 0 to 512 [ 749.514273][ T9602] EXT4-fs: Ignoring removed mblk_io_submit option [ 749.663883][ T26] audit: type=1326 audit(1744945854.970:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.4.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe3d8e169 code=0x7ffc0000 [ 749.943763][ T4266] Bluetooth: hci4: command 0x0c1a tx timeout [ 750.053296][ T8339] Bluetooth: hci3: command 0x0c1a tx timeout [ 750.059538][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 750.132496][ T9602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 750.426895][ T9602] System zones: 1-12 [ 750.653259][ T26] audit: type=1326 audit(1744945854.970:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.4.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe3d8e169 code=0x7ffc0000 [ 750.688604][ T9602] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2186: inode #15: comm syz.7.991: corrupted in-inode xattr [ 750.762290][ T9602] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.991: couldn't read orphan inode 15 (err -117) [ 750.779506][ T26] audit: type=1326 audit(1744945854.970:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.4.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fbbe3d8e169 code=0x7ffc0000 [ 750.812776][ T26] audit: type=1326 audit(1744945854.970:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.4.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe3d8e169 code=0x7ffc0000 [ 750.836974][ T9602] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 750.875790][ T26] audit: type=1326 audit(1744945854.970:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.4.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe3d8e169 code=0x7ffc0000 [ 751.423039][ T26] audit: type=1326 audit(1744945854.970:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.4.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fbbe3d8e169 code=0x7ffc0000 [ 751.576957][ T26] audit: type=1326 audit(1744945854.970:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.4.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe3d8e169 code=0x7ffc0000 [ 751.613481][ T8003] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 751.671096][ T26] audit: type=1326 audit(1744945854.970:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.4.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe3d8e169 code=0x7ffc0000 [ 751.772911][ T9497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.790256][ T26] audit: type=1326 audit(1744945854.970:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.4.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbe3d8e169 code=0x7ffc0000 [ 751.812285][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.826837][ T8003] usb 7-1: Using ep0 maxpacket: 8 [ 751.848517][ T8003] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.851328][ T9497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.876160][ T8003] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 752.062720][ T9625] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 752.288740][ T8339] Bluetooth: hci4: command 0x0406 tx timeout [ 752.297751][ T8339] Bluetooth: hci3: command 0x0406 tx timeout [ 752.305055][ T8339] Bluetooth: hci1: command 0x0406 tx timeout [ 752.345919][ T8003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.354456][ T8003] usb 7-1: Product: syz [ 752.633408][ T8003] usb 7-1: Manufacturer: syz [ 752.641331][ T26] audit: type=1326 audit(1744945854.970:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.4.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe3d8e169 code=0x7ffc0000 [ 752.904364][ T8003] usb 7-1: SerialNumber: syz [ 752.916076][ T8003] usb 7-1: config 0 descriptor?? [ 752.926022][ T8003] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 752.933596][ T8003] usb 7-1: selecting invalid altsetting 1 [ 753.050121][ T9497] team0: Port device team_slave_0 added [ 753.124782][ T8003] gspca_stk014: reg_r err -71 [ 753.129593][ T8003] stk014: probe of 7-1:0.0 failed with error -71 [ 753.138176][ T8003] usb 7-1: USB disconnect, device number 2 [ 753.299088][ T9497] team0: Port device team_slave_1 added [ 753.403910][ T9636] loop4: detected capacity change from 0 to 32768 [ 753.407598][ T8671] EXT4-fs (loop7): unmounting filesystem. [ 754.955262][ T9642] read_mapping_page failed! [ 756.807656][ T9497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.823306][ T9497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.933855][ T9497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.034350][ T9497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.041356][ T9497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.137773][ T9497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.306959][ T4266] Bluetooth: hci1: unknown advertising packet type: 0x63 [ 757.307001][ T4266] Bluetooth: hci1: Malformed LE Event: 0x02 [ 757.378173][ T9655] input: syz1 as /devices/virtual/input/input12 [ 757.617039][ T9659] device veth1_macvtap left promiscuous mode [ 757.624363][ T9659] device macsec0 entered promiscuous mode [ 757.871888][ T9666] device veth1_macvtap entered promiscuous mode [ 757.884096][ T9666] device macsec0 left promiscuous mode [ 763.068021][ T8007] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 763.353481][ T8007] usb 8-1: Using ep0 maxpacket: 8 [ 763.496704][ T8007] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.634669][ T8007] usb 8-1: string descriptor 0 read error: -71 [ 763.648008][ T8007] usb 8-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 763.686714][ T8007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.732340][ T8007] usb 8-1: config 0 descriptor?? [ 763.764344][ T8007] usb 8-1: can't set config #0, error -71 [ 763.793682][ T8007] usb 8-1: USB disconnect, device number 3 [ 764.652740][ T1243] block nbd5: Possible stuck request ffff888025c38000: control (read@0,512B). Runtime 120 seconds [ 764.854012][ T9719] overlayfs: missing 'lowerdir' [ 764.911270][ T9497] device hsr_slave_0 entered promiscuous mode [ 765.217071][ T9723] loop4: detected capacity change from 0 to 2048 [ 765.224396][ T9723] UDF-fs: bad mount option "bs=00000000000000000009" or missing value [ 766.752064][ T9497] device hsr_slave_1 entered promiscuous mode [ 766.765227][ T9548] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 767.277483][ T9726] device veth1_macvtap left promiscuous mode [ 767.292802][ T9726] device macsec0 entered promiscuous mode [ 767.365130][ T9730] nfs: Unknown parameter '18446744073709551615' [ 767.373774][ T4266] Bluetooth: hci4: unknown advertising packet type: 0x63 [ 767.373813][ T4266] Bluetooth: hci4: Malformed LE Event: 0x02 [ 767.397071][ T9724] device veth1_macvtap entered promiscuous mode [ 767.430116][ T9724] device macsec0 left promiscuous mode [ 767.514640][ T9731] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 768.573928][ T9280] device hsr_slave_0 left promiscuous mode [ 769.327368][ T9742] fuse: Bad value for 'rootmode' [ 769.420626][ T9280] device hsr_slave_1 left promiscuous mode [ 769.428997][ T9280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.521308][ T9280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.548496][ T9280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.630093][ T9280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.653469][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 769.680771][ T9280] device bridge_slave_1 left promiscuous mode [ 769.700020][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.784795][ T9280] device bridge_slave_0 left promiscuous mode [ 769.966041][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.852890][ T9280] device veth1_macvtap left promiscuous mode [ 772.869430][ T9280] device veth0_macvtap left promiscuous mode [ 772.907558][ T9280] device veth1_vlan left promiscuous mode [ 772.915888][ T9280] device veth0_vlan left promiscuous mode [ 773.375237][ T8007] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 773.643947][ T8007] usb 1-1: Using ep0 maxpacket: 8 [ 773.695918][ T8007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.483645][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 774.497225][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 774.573536][ T8007] usb 1-1: string descriptor 0 read error: -71 [ 774.579854][ T8007] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 774.599313][ T8007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.621160][ T8007] usb 1-1: config 0 descriptor?? [ 774.630063][ T8007] usb 1-1: can't set config #0, error -71 [ 774.639811][ T8007] usb 1-1: USB disconnect, device number 2 [ 775.073480][ T8339] Bluetooth: hci1: command 0x0406 tx timeout [ 775.559001][ T8339] Bluetooth: hci4: unknown advertising packet type: 0x63 [ 775.559058][ T8339] Bluetooth: hci4: Malformed LE Event: 0x02 [ 777.461029][ T9817] fuse: Bad value for 'rootmode' [ 777.710311][ T9825] loop2: detected capacity change from 0 to 7 [ 777.724708][ T9825] Dev loop2: unable to read RDB block 7 [ 777.731517][ T9825] loop2: unable to read partition table [ 777.738270][ T9825] loop2: partition table beyond EOD, truncated [ 777.744886][ T9825] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 777.916637][ T9826] ubi31: attaching mtd0 [ 777.945566][ T9826] ubi31: scanning is finished [ 777.950393][ T9826] ubi31: empty MTD device detected [ 778.532995][ T9280] team0 (unregistering): Port device team_slave_1 removed [ 778.581558][ T9826] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 778.594855][ T9826] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 778.602315][ T9826] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 778.636938][ T9826] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 778.655479][ T9826] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 778.662698][ T9826] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 778.677549][ T9280] team0 (unregistering): Port device team_slave_0 removed [ 778.683888][ T9826] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1169414746 [ 778.722111][ T9826] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 778.745663][ T9829] ubi31: background thread "ubi_bgt31d" started, PID 9829 [ 778.758561][ T9280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.815914][ T9280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.459269][ T9280] bond0 (unregistering): Released all slaves [ 779.617870][ T9800] device veth1_macvtap left promiscuous mode [ 779.634202][ T9800] device macsec0 entered promiscuous mode [ 779.673462][ T9804] device veth1_macvtap entered promiscuous mode [ 779.688610][ T9804] device macsec0 left promiscuous mode [ 780.166292][ T9839] loop4: detected capacity change from 0 to 256 [ 782.121138][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 782.422346][ T9839] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 782.551401][ T9497] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 782.729261][ T9497] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 782.928036][ T9497] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 783.026750][ T9497] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 783.767497][ T9497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.788215][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 783.825778][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.973063][ T9497] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.706237][ T9878] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 786.870545][ T9877] mkiss: ax0: crc mode is auto. [ 787.021756][ T8339] Bluetooth: hci3: command 0x0405 tx timeout [ 788.215978][ T28] INFO: task syz.5.856:8659 blocked for more than 143 seconds. [ 788.237974][ T28] Not tainted 6.1.134-syzkaller #0 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 788.296688][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 788.367189][ T28] task:syz.5.856 state:D stack:25208 pid:8659 ppid:4789 flags:0x00004004 [ 788.484462][ T28] Call Trace: [ 788.487924][ T28] [ 788.490882][ T28] __schedule+0x143f/0x4570 [ 788.527782][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 788.583846][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 788.589929][ T28] schedule+0xbf/0x180 [ 788.620508][ T28] schedule_timeout+0xac/0x300 [ 788.664473][ T8903] block nbd4: shutting down sockets [ 788.803223][ T28] ? console_conditional_schedule+0x40/0x40 [ 788.809210][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 788.814977][ T28] ? wait_for_completion+0x2f9/0x610 [ 788.820313][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 788.833455][ T28] ? wait_for_completion+0x2f9/0x610 [ 788.838855][ T28] wait_for_completion+0x350/0x610 [ 788.863363][ T28] ? io_schedule+0x100/0x100 [ 788.868112][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 788.893243][ T28] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 788.898992][ T28] ? __xfs_buf_submit+0x428/0x830 [ 788.913223][ T28] xfs_buf_iowait+0xd2/0x510 [ 788.917901][ T28] __xfs_buf_submit+0x428/0x830 [ 788.922832][ T28] ? rcu_is_watching+0x11/0xb0 [ 788.958391][ T28] xfs_buf_read_uncached+0x1f7/0x2d0 [ 788.964596][ T28] ? xfs_buf_readahead_map+0xe0/0xe0 [ 788.970089][ T28] xfs_readsb+0x1a9/0x640 [ 788.993357][ T28] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 788.999107][ T28] ? xfs_sb_validate_fsb_count+0x80/0x80 [ 789.023237][ T28] ? pcpu_alloc+0x1072/0x18f0 [ 789.028015][ T28] xfs_fs_fill_super+0x601/0x13a0 [ 789.033084][ T28] ? pointer+0xac/0x1000 [ 789.043308][ T28] get_tree_bdev+0x3fe/0x620 [ 789.047977][ T28] ? xfs_fs_warn_deprecated+0x190/0x190 [ 789.087780][ T28] vfs_get_tree+0x88/0x270 [ 789.092289][ T28] do_new_mount+0x2ba/0xb40 [ 789.107723][ T28] ? ns_capable+0x85/0xe0 [ 789.112154][ T28] ? do_move_mount_old+0x160/0x160 [ 789.147688][ T28] __se_sys_mount+0x2d5/0x3c0 [ 789.152464][ T28] ? __x64_sys_mount+0xc0/0xc0 [ 789.173430][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 789.179529][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 789.193290][ T28] ? __x64_sys_mount+0x1c/0xc0 [ 789.198200][ T28] do_syscall_64+0x3b/0x80 [ 789.202653][ T28] ? clear_bhb_loop+0x45/0xa0 [ 789.226514][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.232507][ T28] RIP: 0033:0x7f79c278e169 [ 789.239962][ T28] RSP: 002b:00007f79c3601038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 789.258075][ T28] RAX: ffffffffffffffda RBX: 00007f79c29b6160 RCX: 00007f79c278e169 [ 789.271883][ T28] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000040 [ 789.282538][ T28] RBP: 00007f79c2810a68 R08: 0000000000000000 R09: 0000000000000000 [ 789.301318][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.312064][ T28] R13: 0000000000000000 R14: 00007f79c29b6160 R15: 00007ffc8b25c568 [ 789.327418][ T28] [ 789.358393][ T28] [ 789.358393][ T28] Showing all locks held in the system: [ 789.369460][ T28] 1 lock held by rcu_tasks_kthre/12: [ 789.380386][ T28] #0: ffffffff8d32e910 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 789.398068][ T28] 1 lock held by rcu_tasks_trace/13: [ 789.424069][ T28] #0: ffffffff8d32f110 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 789.480029][ T28] 3 locks held by kworker/0:1/14: [ 789.493413][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.533291][ T28] #1: ffffc90000137d20 (ser_release_work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.578936][ T28] #2: ffffffff8e550d68 (rtnl_mutex){+.+.}-{3:3}, at: ser_release+0x137/0x240 [ 789.588402][ T28] 1 lock held by khungtaskd/28: [ 789.594701][ T28] #0: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 789.610381][ T28] 1 lock held by dhcpcd/3917: [ 789.616531][ T28] #0: ffffffff8e550d68 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x29a/0x1ae0 [ 789.631637][ T28] 2 locks held by getty/4010: [ 789.639796][ T28] #0: ffff8880305f2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 789.649717][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 [ 789.659982][ T28] 2 locks held by kworker/0:7/4298: [ 789.665261][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.676296][ T28] #1: ffffc90004107d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.687865][ T28] 3 locks held by kworker/u4:18/6136: [ 789.693314][ T28] 3 locks held by kworker/0:5/8003: [ 789.698531][ T28] #0: ffff88814c769138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.709618][ T28] #1: ffffc9000f857d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.722130][ T28] #2: ffffffff8e550d68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16e0 [ 789.731662][ T28] 2 locks held by kworker/1:1/8005: [ 789.737027][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.747626][ T28] #1: ffffc9000f877d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.760287][ T28] 2 locks held by kworker/1:4/8006: [ 789.765597][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.776714][ T28] #1: ffffc9000f887d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.789301][ T28] 2 locks held by kworker/1:10/8007: [ 789.794663][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.805292][ T28] #1: ffffc9000f897d20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.815137][ T28] 3 locks held by kworker/1:13/8010: [ 789.820443][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.831089][ T28] #1: ffffc9000f8c7d20 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.840707][ T28] #2: ffffffff8d333d78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 789.851730][ T28] 1 lock held by syz.5.856/8659: [ 789.856740][ T28] #0: ffff8880438da0e0 (&type->s_umount_key#91/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930 [ 789.867189][ T28] 3 locks held by syz-executor/8749: [ 789.872509][ T28] #0: ffff8880440d10b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 789.883129][ T28] #1: ffff8880440d0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0xfc0 [ 789.892823][ T28] #2: ffffffff8e6b32c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 789.902952][ T28] 4 locks held by kworker/u4:7/9280: [ 789.908294][ T28] #0: ffff888017e16938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.918669][ T28] #1: ffffc90004a2fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 789.928661][ T28] #2: ffffffff8e544210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xd20 [ 789.938352][ T28] #3: ffffffff8e550d68 (rtnl_mutex){+.+.}-{3:3}, at: bareudp_exit_batch_net+0xb0/0x1f0 [ 789.948207][ T28] 1 lock held by syz-executor/9497: [ 789.953575][ T28] #0: ffffffff8e550d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7cb/0x1000 [ 789.963139][ T28] 1 lock held by syz.4.1013/9712: [ 789.968287][ T28] #0: ffffffff8e550d68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 789.977497][ T28] 4 locks held by syz.0.1040/9877: [ 789.983644][ T28] #0: ffff8880518401c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: __tty_hangup+0xc0/0x620 [ 789.993382][ T28] #1: ffff888051840098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x68/0xb0 [ 790.002830][ T28] #2: ffffffff8e550d68 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0x79/0x210 [ 790.012277][ T28] #3: ffffffff8d333d78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 790.023333][ T28] [ 790.027072][ T28] ============================================= [ 790.027072][ T28] [ 790.048386][ T28] NMI backtrace for cpu 0 [ 790.052775][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.134-syzkaller #0 [ 790.060697][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 790.070799][ T28] Call Trace: [ 790.074102][ T28] [ 790.077057][ T28] dump_stack_lvl+0x1e3/0x2cb [ 790.081776][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 790.087278][ T28] ? panic+0x764/0x764 [ 790.091378][ T28] ? vprintk_emit+0x622/0x740 [ 790.096095][ T28] ? printk_sprint+0x490/0x490 [ 790.100899][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 790.106051][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 790.111034][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 790.117220][ T28] ? _printk+0xd1/0x111 [ 790.121451][ T28] ? panic+0x764/0x764 [ 790.125553][ T28] ? __wake_up_klogd+0xcc/0x100 [ 790.130434][ T28] ? panic+0x764/0x764 [ 790.134535][ T28] ? nmi_trigger_cpumask_backtrace+0xfc/0x430 [ 790.140647][ T28] nmi_trigger_cpumask_backtrace+0x1ca/0x430 [ 790.146652][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 790.152763][ T28] watchdog+0xf88/0xfd0 [ 790.156955][ T28] ? watchdog+0x1f8/0xfd0 [ 790.161336][ T28] kthread+0x28d/0x320 [ 790.165440][ T28] ? hungtask_pm_notify+0x50/0x50 [ 790.170508][ T28] ? kthread_blkcg+0xd0/0xd0 [ 790.175128][ T28] ret_from_fork+0x1f/0x30 [ 790.179586][ T28] [ 790.183367][ T28] Sending NMI from CPU 0 to CPUs 1: [ 790.188846][ C1] NMI backtrace for cpu 1 [ 790.188857][ C1] CPU: 1 PID: 4510 Comm: kworker/u4:15 Not tainted 6.1.134-syzkaller #0 [ 790.188874][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 790.188885][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 790.188915][ C1] RIP: 0010:memset_erms+0x9/0x10 [ 790.188940][ C1] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 790.188955][ C1] RSP: 0018:ffffc90004787a30 EFLAGS: 00010246 [ 790.188968][ C1] RAX: ffff888027eb0000 RBX: 0000000000000000 RCX: 0000000000000540 [ 790.188979][ C1] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffff888027eb0ac0 [ 790.188990][ C1] RBP: 0000000000000001 R08: ffffc90004787ab0 R09: ffff888027eb0000 [ 790.189007][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 790.189018][ C1] R13: 0000000000082a20 R14: 0000000000000001 R15: ffffc90004787ab0 [ 790.189029][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 790.189043][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.189054][ C1] CR2: 00007fb23e176440 CR3: 000000002fe3d000 CR4: 00000000003506e0 [ 790.189068][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 790.189078][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 790.189088][ C1] Call Trace: [ 790.189093][ C1] [ 790.189097][ C1] slab_post_alloc_hook+0x71/0x3a0 [ 790.189120][ C1] ? __kasan_slab_alloc+0x65/0x70 [ 790.189146][ C1] __kmem_cache_alloc_node+0x137/0x260 [ 790.189164][ C1] ? nsim_dev_trap_report_work+0x24c/0xab0 [ 790.189191][ C1] ? nsim_dev_trap_report_work+0x24c/0xab0 [ 790.189215][ C1] __kmalloc_node_track_caller+0xa0/0x220 [ 790.189235][ C1] ? nsim_dev_trap_report_work+0x24c/0xab0 [ 790.189260][ C1] __alloc_skb+0x12a/0x2c0 [ 790.189282][ C1] nsim_dev_trap_report_work+0x24c/0xab0 [ 790.189308][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 790.189337][ C1] ? process_one_work+0x806/0x1260 [ 790.189354][ C1] process_one_work+0x917/0x1260 [ 790.189379][ C1] ? worker_detach_from_pool+0x260/0x260 [ 790.189398][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 790.189418][ C1] ? kthread_data+0x4e/0xc0 [ 790.189442][ C1] ? wq_worker_running+0x97/0x190 [ 790.189467][ C1] worker_thread+0xa47/0x1200 [ 790.189489][ C1] ? _raw_spin_unlock+0x40/0x40 [ 790.189515][ C1] kthread+0x28d/0x320 [ 790.189537][ C1] ? worker_clr_flags+0x190/0x190 [ 790.189554][ C1] ? kthread_blkcg+0xd0/0xd0 [ 790.189577][ C1] ret_from_fork+0x1f/0x30 [ 790.189606][ C1] [ 790.264642][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 790.264660][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.134-syzkaller #0 [ 790.264684][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 790.264698][ T28] Call Trace: [ 790.264706][ T28] [ 790.264714][ T28] dump_stack_lvl+0x1e3/0x2cb [ 790.264753][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 790.264783][ T28] ? panic+0x764/0x764 [ 790.264815][ T28] ? llist_add_batch+0x160/0x1d0 [ 790.264850][ T28] ? vscnprintf+0x59/0x80 [ 790.264887][ T28] panic+0x318/0x764 [ 790.264921][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 790.264952][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 790.264985][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 790.265019][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 790.265048][ T28] ? nmi_trigger_cpumask_backtrace+0x358/0x430 [ 790.265079][ T28] ? nmi_trigger_cpumask_backtrace+0x35d/0x430 [ 790.265108][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 790.265161][ T28] watchdog+0xfc7/0xfd0 [ 790.265194][ T28] ? watchdog+0x1f8/0xfd0 [ 790.265250][ T28] kthread+0x28d/0x320 [ 790.265284][ T28] ? hungtask_pm_notify+0x50/0x50 [ 790.265309][ T28] ? kthread_blkcg+0xd0/0xd0 [ 790.265344][ T28] ret_from_fork+0x1f/0x30 [ 790.265388][ T28] [ 790.269629][ T28] Kernel Offset: disabled [ 790.588368][ T28] Rebooting in 86400 seconds..