last executing test programs: 24m10.076623687s ago: executing program 4 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f0000000000)={[0x40]}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0xd}}], 0x30, 0x8004}, 0x0) 24m3.02578812s ago: executing program 4 (id=385): setsockopt(0xffffffffffffffff, 0x101, 0x2000005, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000080)={0x1, 0x9}, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) 24m1.170342408s ago: executing program 4 (id=390): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x2000, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 23m54.901994699s ago: executing program 4 (id=399): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000600)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000003c0)=""/82) r4 = msgget$private(0x0, 0x4a0) msgsnd(r4, 0x0, 0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0xc7e031e7f31e4965) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfd14) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 23m53.51940403s ago: executing program 4 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x4000086e, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$nl_route(0x10, 0x3, 0x0) rt_sigtimedwait(&(0x7f0000000080)={[0x3]}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 23m52.033820862s ago: executing program 4 (id=407): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000200)='./file1\x00', 0xa04840, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x0, 0x6aa, &(0x7f0000000900)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat$ttynull(0xffffffffffffff9c, 0x0, 0x654201, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x38011, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 23m50.623490272s ago: executing program 32 (id=407): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000200)='./file1\x00', 0xa04840, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x0, 0x6aa, &(0x7f0000000900)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat$ttynull(0xffffffffffffff9c, 0x0, 0x654201, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x38011, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 6m43.595849843s ago: executing program 2 (id=2129): mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$admmidi(&(0x7f0000000080), 0xfffffffffffffffd, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045730, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) getpgrp(r0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) r6 = open(0x0, 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002"], 0x51b402) 6m41.04089688s ago: executing program 2 (id=2135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) flistxattr(0xffffffffffffffff, &(0x7f0000000d40)=""/184, 0xb8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r8 = accept$alg(r7, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000004180), 0xff77) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xffffffe9}, {{&(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000340)=""/69, 0x45}, {0x0}, {0x0}], 0x5}, 0xb}, {{&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x3, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090) 6m39.526095563s ago: executing program 2 (id=2138): r0 = syz_io_uring_setup(0x6937, 0x0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)={0x1, 0x9}, 0x1) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) 6m37.088375669s ago: executing program 2 (id=2144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) readv(r0, &(0x7f0000003f00)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=iso8859-2,umask=00000000000000000000000,iocharset=cp1255,gid=', @ANYRES8, @ANYRESDEC], 0x1, 0x286, &(0x7f0000000200)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) 6m34.912110381s ago: executing program 2 (id=2149): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000440)='memory.pressure\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000840)=[{0x0}], 0x1, 0x4, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) ioprio_set$pid(0x3, 0x0, 0x0) r9 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0x559af05a10134899, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xbff, 0x1}}, {0x0, 0x10}}}, 0xa0) sendfile(r9, r9, &(0x7f0000000080)=0x2, 0x7f03) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x100080d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="1f0d04d8858626b242e381e708f38e036ccecea771e4f8446147458236e3c36478fbcaf674d0fa6700d4f4a84cdb29f2716429474a14fa14ce679d17bfc359686057e006df88fd3693dc63144b1800a24a33f5167359534a677c6b705766f11e57747beaa2c1fbc10f56cea22e63fa6d2c5ed4f140572694ed8fa45119c9194ce8eed7e76a", @ANYRESOCT, @ANYRES64=r3, @ANYRES8, @ANYRES8], 0xff, 0x1f0, &(0x7f0000000900)="$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") 6m32.333030999s ago: executing program 2 (id=2155): epoll_create1(0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x844) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x80108907, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80602, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x2, 0x141581) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 6m16.686902898s ago: executing program 33 (id=2155): epoll_create1(0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x844) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x80108907, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80602, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x2, 0x141581) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 5m17.253106701s ago: executing program 3 (id=2282): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000bc0)={0x2, 0x0, [{0x8000000, 0x7b, &(0x7f00000001c0)=""/123}, {0x0, 0x3, &(0x7f0000000800)=""/3}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r7 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000000)=0x4) ioctl$BLKRRPART(r7, 0x125f, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000080)={0xffff, 0x400, 0x9, 0x6}) 5m16.968893175s ago: executing program 3 (id=2284): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1800) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x40) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) unlink(0x0) mount(&(0x7f0000000040)=@md0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1000010, 0x0) sendfile(r0, r0, 0x0, 0x200000) 5m15.112030282s ago: executing program 3 (id=2287): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000bc0)={0x2, 0x0, [{0x8000000, 0x7b, &(0x7f00000001c0)=""/123}, {0x0, 0x3, &(0x7f0000000800)=""/3}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) openat$random(0xffffffffffffff9c, &(0x7f0000001880), 0x40101, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r7 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000000)=0x4) ioctl$BLKRRPART(r7, 0x125f, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000080)={0xffff, 0x400, 0x9, 0x6}) 5m14.331656214s ago: executing program 3 (id=2291): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4040040) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0/../file0\x00', 0x800000, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRES64], 0x1, 0xf04, &(0x7f0000000f40)="$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") socket(0xb, 0x80000, 0xfffffffc) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4004804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_settime(0xcd1f6467c1540c16, &(0x7f00000000c0)) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x8cff) rmdir(&(0x7f0000000380)='./file0/../file0\x00') capset(0x0, &(0x7f0000000080)) socket$nl_audit(0x10, 0x3, 0x9) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) 5m10.452459031s ago: executing program 3 (id=2299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000000)={0xce, 0x0, r7}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80045510, &(0x7f0000000000)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000080)={[0x7, 0x6, 0x7fffffffffffffff, 0x2, 0x9, 0x1, 0x3, 0x49da, 0x7, 0x2, 0x3, 0x3, 0x6, 0x9, 0x0, 0x1ff], 0xdddd0000, 0x10400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) capset(&(0x7f0000000100)={0x20071026, 0xffffffffffffffff}, 0x0) 5m7.909947328s ago: executing program 3 (id=2303): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x0, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) epoll_create1(0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}}, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5], 0xc8) accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@null, @remote, @netrom, @bcast, @null, @remote, @remote, @default]}, &(0x7f0000000300)=0x48, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendto(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 4m52.585375443s ago: executing program 34 (id=2303): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x0, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) epoll_create1(0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}}, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5], 0xc8) accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@null, @remote, @netrom, @bcast, @null, @remote, @remote, @default]}, &(0x7f0000000300)=0x48, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendto(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 2m3.25875394s ago: executing program 0 (id=2588): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000440)='memory.pressure\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000840)=[{0x0}], 0x1, 0x4, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) ioprio_set$pid(0x3, 0x0, 0x0) r9 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0x559af05a10134899, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xbff, 0x1}}, {0x0, 0x10}}}, 0xa0) sendfile(r9, r9, &(0x7f0000000080)=0x2, 0x7f03) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x100080d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="1f0d04d8858626b242e381e708f38e036ccecea771e4f8446147458236e3c36478fbcaf674d0fa6700d4f4a84cdb29f2716429474a14fa14ce679d17bfc359686057e006df88fd3693dc63144b1800a24a33f5167359534a677c6b705766f11e57747beaa2c1fbc10f56cea22e63fa6d2c5ed4f140572694ed8fa45119c9194ce8eed7e76a", @ANYRESOCT, @ANYRES64=r3, @ANYRES8, @ANYRES8], 0xff, 0x1f0, &(0x7f0000000900)="$eJzsmb2LE0EYxp+Z3cuehwg2FjYWHniit19RueaKE8RKEE5Ry2A2IbhJJFkhCYgEGxtLEcHWf8DCIpWFnZ2tFioIFqYULISRmR03k8QNCRYJ5P1BJs/7ztc7Q/JssSAIYm35+uXn56eX926cB3AU23B0/rs1GsOBLPr04sG5Z/tXXr7++Opd49jDweR6mwCEmH9/ufDbAwuJioQQj8b7t2XzfDx3Exxntb4FBjeVv4UiDSIw3FHKBjINNI9oEUfu3WZcrtTiyJdNIJtQNkVzLzl72GcoZ2cTghn97W7vXimOo9ak2BB/95nqWlTMuj9V3wHHvo5lfRzA7SeP+zLWdwMfPL1LAAE4Aq2LYDjUeg8OXNcdXYlx/pP2aH1rnvMvS7Bf6c9AZo7vLr+etRHCWYky5hBsMiP/0FnmxHDwfnrWt1UpPl8w5DiOMi4AWeaqHvNhK46v/cemBb3jdJdl+hOzgTOGP9mwM//wkvp9r93t7dbqpWpUjRphWLzkX/D9i6FXqTnwPWVHM/xvU/nTlrH+hjnAeKAUWAGdUpK0gg6QtIIsDtPWcNzDN80fag5X/sexczpdQ16yOrbz73qY/nD1LdWOlVs8QRAEQRAEQRAEQRAEQRDEQpwCQ/oKRL2oEjmE19XoPwEAAP//j3Zt3A==") 2m0.808956826s ago: executing program 0 (id=2594): setgroups(0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x40000041, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3800744, &(0x7f0000000280)={[{@nomblk_io_submit}, {@mb_optimize_scan}, {@usrquota}, {@jqfmt_vfsv1}, {@delalloc}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xffffff80, 0x178, 0x168, 0x178, 0x230, 0x230, 0x258, 0x168, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x128, 0x168, 0x12, {0x959f1400}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@private1}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) shutdown(r0, 0x1) mkdirat(0xffffffffffffffff, 0x0, 0x196) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m50.600904376s ago: executing program 0 (id=2612): syz_emit_ethernet(0x7e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007000000000000190780a010102ac1414aa0500907801000000450000000000000000110000ac141413e000000244040101443c0001e0000001000000006401010200000000ac14140000000000000000000000000e00000000fffffffdac1e000100000000ac14140000000000"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r8, &(0x7f0000001b00)=[{{&(0x7f00000003c0)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000940)="1a", 0x1}], 0x1}}], 0x1, 0x20040814) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x5, 0xc, 0x8001, 0x0, 0x9}) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) openat(r9, 0x0, 0x8000, 0x8d) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000002400)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m48.845971551s ago: executing program 0 (id=2615): setgroups(0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x40000041, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3800744, &(0x7f0000000280)={[{@nomblk_io_submit}, {@mb_optimize_scan}, {@usrquota}, {@jqfmt_vfsv1}, {@delalloc}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xffffff80, 0x178, 0x168, 0x178, 0x230, 0x230, 0x258, 0x168, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x128, 0x168, 0x12, {0x959f1400}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@private1}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) shutdown(r0, 0x1) mkdirat(0xffffffffffffffff, 0x0, 0x196) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m47.149874616s ago: executing program 0 (id=2617): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x101800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) clock_gettime(0x7, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0x703f, 0x100, 0x2082, 0x3b6, 0x0, r0}, &(0x7f0000000280), &(0x7f0000000240)) syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x80400, 0x89) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) geteuid() 1m45.333819303s ago: executing program 0 (id=2619): socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) unlink(0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mknod$loop(0x0, 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x1060c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCGUSAGES(r5, 0x40305829, &(0x7f0000008340)={{0x1, 0x3, 0x7f, 0x7, 0x1000, 0x40}, 0x2bf, [0xb704, 0x3ff, 0x6, 0x2, 0xfba9, 0x80000001, 0x1c, 0x8, 0x2, 0x80000000, 0x8, 0x8001, 0xffff, 0x1, 0x248b56bb, 0xf734, 0x46a93a47, 0x51e1, 0x6, 0x6, 0xff, 0xffffffff, 0x8, 0x4, 0x4, 0x6, 0xeb09, 0x101, 0x5, 0x6, 0x8, 0x4, 0x3, 0x88, 0x0, 0x0, 0x1000, 0xfb81, 0x8, 0x40, 0x7, 0xf, 0x3ff, 0x401, 0x5, 0x10, 0xfffffffd, 0x1, 0xc6f8, 0x2, 0x80, 0x2, 0x7, 0xa1a, 0x9, 0x6, 0x1, 0x2, 0x0, 0x6, 0x5, 0x8000, 0x6, 0x2, 0x5819, 0x7, 0x6, 0x4f4, 0x3, 0x80000, 0x1000, 0x2, 0xb, 0x4, 0x7, 0x5, 0x1, 0x2, 0x80000000, 0x0, 0x5, 0x2, 0x8, 0x1, 0x0, 0x6, 0xd985, 0x51, 0x1, 0x5, 0x9, 0x6, 0xfffffffe, 0x79, 0x2, 0x8, 0xffe00, 0xfffffffb, 0x71172ab, 0x3, 0x6, 0x6, 0x1, 0xe96, 0x4, 0xa09, 0x2, 0x4, 0x3, 0xa80c, 0x80000001, 0x9, 0xe7, 0x3e, 0x3, 0x0, 0x4, 0x2cdf, 0x1000, 0x3, 0x5, 0xff, 0x0, 0x4, 0x101, 0xff, 0x1400000, 0xfffffff7, 0x8, 0x8, 0x4, 0xffff, 0x2, 0x9, 0xfff, 0xfd93, 0x0, 0x5, 0x21, 0x4, 0x80000001, 0x401, 0x5, 0xfffffffb, 0x48cd, 0x1, 0x7fff, 0x8000, 0xfffffffe, 0x9, 0x1, 0x6, 0x6, 0xf8, 0xfffffffd, 0xa, 0x6, 0x2, 0xfb2, 0x100, 0x10001, 0x1, 0x40, 0x7, 0x8, 0x3e3, 0x0, 0x6, 0x0, 0x9, 0x0, 0x49, 0x3ff, 0x5, 0x1ff, 0x3, 0xbd, 0xfffffff8, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, 0x38, 0xd, 0x6, 0xfffffffa, 0x6, 0xf, 0x25, 0x2, 0x0, 0x4, 0x9, 0x2896, 0x4, 0x3, 0x3, 0x7, 0x0, 0xb, 0x9, 0xa9, 0x400, 0x8001, 0x8, 0x2, 0xc6ab, 0x18, 0x8, 0x2, 0x0, 0x7, 0x1, 0x6, 0x5, 0x400, 0x3, 0x3, 0x4, 0x1, 0x2, 0x2, 0x7, 0x8, 0x0, 0x7, 0x7, 0x0, 0xffffff64, 0x5, 0x2, 0x6, 0x3, 0x5, 0xc7, 0x7, 0x212, 0x7, 0x5, 0xe19b, 0x7, 0x5, 0x67, 0xa, 0xf60b, 0x1, 0x1, 0x4, 0x98a, 0x6, 0x10, 0x2eb, 0x2f7e, 0x0, 0x4, 0x1d21, 0x9, 0x80, 0xb, 0x1ff, 0xfffffff9, 0x0, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0x20000000, 0x8, 0xa, 0x3ff, 0x0, 0x7, 0x68b32c17, 0x339, 0x2, 0xc, 0x5, 0x40, 0x2d, 0x1ff, 0x91, 0x7f, 0x4, 0x7, 0x1, 0x2, 0x3b1, 0x3, 0x2, 0x3, 0x8001, 0x7, 0xfffffffc, 0x8, 0x0, 0x401c, 0x7, 0x200, 0x8, 0x5, 0xab83, 0x73, 0x8001, 0x1, 0x2, 0x8, 0x7, 0x3, 0x4, 0x8, 0x1, 0x74e, 0x88, 0x198, 0x20, 0x2, 0x328, 0xe5, 0x7, 0x9, 0x86a, 0x3, 0x1, 0x2b, 0xfffffffb, 0x6, 0xa, 0xd2e, 0x80000000, 0x7, 0xfffffff8, 0x0, 0x8, 0x569, 0xa, 0x100, 0xac3, 0x5, 0x6, 0xff, 0xe, 0x81, 0xca, 0xfffffffe, 0x7, 0x8, 0x0, 0x7, 0x5, 0x5, 0x4, 0xe, 0x5, 0x9, 0x7fffffff, 0xfffffffe, 0x1, 0x3de, 0x2, 0x1, 0xfb, 0x2, 0xfffffff8, 0x3ff, 0x8, 0x3, 0x8, 0x31eb, 0x7, 0x5, 0x8, 0x4a0000, 0x0, 0x2, 0xb0, 0x4, 0x8000, 0x80, 0xd05, 0x9, 0x5, 0x8, 0x80, 0x2, 0x5, 0xb, 0x7, 0x0, 0x5, 0x6af, 0x4, 0x8, 0x3, 0x580, 0x7, 0x9, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7ff, 0x4, 0xfffffff8, 0x9, 0x2, 0x3, 0x77ae, 0x1, 0x91c, 0x5, 0x6, 0x3, 0x0, 0x80000000, 0x21000000, 0xfffffffa, 0x3ff, 0xb3, 0x4f8c, 0x4, 0x127, 0x1, 0x2bfe1798, 0x10000, 0x1, 0x44c, 0x0, 0x4, 0x895, 0x8, 0xff9, 0xfffffff7, 0x3, 0x2c, 0x3ff, 0x6, 0x8, 0x7, 0x1, 0x1000, 0xc530, 0x5, 0x8f, 0x0, 0x6, 0x8000, 0x400, 0x7, 0x6, 0x9, 0x1, 0x5f66, 0x10001, 0x1, 0x9, 0x8000, 0x5, 0x80000001, 0x81, 0x6, 0x8, 0x75f, 0xab8, 0x4, 0x4, 0xe0b0, 0xffff, 0xf, 0x2, 0x4, 0x9, 0xffffd40a, 0x2, 0x9, 0x6, 0x2, 0xfffffa86, 0x8, 0x6, 0x101, 0x3, 0xa000000, 0x8, 0x7fffffff, 0x2, 0x6, 0x4, 0x101, 0x1, 0x200, 0x800, 0x9, 0x2, 0x3, 0xf5, 0xb30, 0x9, 0x2, 0x1, 0xd, 0x7fffffff, 0x7, 0x8, 0x0, 0x5, 0x4, 0x1, 0x462, 0x80000001, 0x5, 0x7, 0x3e2b, 0x4, 0x7ff, 0x2, 0x9, 0x3ff, 0x9, 0x8, 0x6, 0x2, 0x1, 0x100, 0xa, 0x5, 0x800, 0x80000000, 0x40, 0x1, 0x10000, 0xffffcd67, 0x5af, 0x3, 0x8, 0x7, 0x0, 0x227, 0x0, 0x8, 0x0, 0x1c18, 0x6, 0x7, 0x0, 0x9, 0xff, 0x6, 0x101, 0x7fff, 0x1, 0x101, 0xd7b, 0x2, 0x6, 0x81, 0x1, 0x10001, 0x3, 0x2, 0x2, 0xbfc8, 0x1, 0x101, 0x23b8, 0x7f, 0x8, 0xad9, 0x8, 0x4, 0xd31, 0x3a64ec4a, 0xffffffcf, 0x81, 0x7, 0x0, 0x2, 0x3, 0x0, 0x9, 0x4af7e4bc, 0x7, 0x4, 0x2, 0x2f8, 0x4, 0x4, 0x1, 0x1ff, 0x1c7, 0x80000000, 0xd, 0x8, 0x0, 0x7, 0x1, 0x3, 0x6, 0x10000, 0x89e7, 0xa, 0x6d, 0x4, 0x9, 0x6, 0xf, 0x4, 0x706, 0x800, 0xfffffff2, 0x7, 0x7, 0x5, 0x6, 0x1, 0x91, 0x1f, 0x0, 0xb, 0x3, 0x8, 0x42, 0xd3, 0x0, 0x0, 0xfffffff4, 0x1, 0x3e, 0x7923, 0x7, 0x7, 0x101, 0x7, 0x9a0, 0x9, 0xbff, 0xf26, 0x800, 0xe00000, 0x7, 0x171, 0x5, 0xa7, 0x23, 0x400, 0x5, 0x3, 0x5, 0x5, 0x0, 0x0, 0x5, 0x10, 0x6, 0x7, 0x5, 0x4, 0x1, 0x2, 0x0, 0x3, 0x75, 0x3, 0x5, 0xdec3, 0x7, 0x4, 0xfffffff9, 0x3, 0x6, 0x74b, 0xb126, 0xffffffff, 0xbe25, 0x7, 0x9, 0x9a, 0x6, 0x1800000, 0x76f, 0x4, 0x2, 0x4, 0x1, 0x3, 0xfffffff5, 0x7, 0x6, 0xc, 0x1ff, 0x6a, 0xe3, 0x390e, 0x1, 0x8, 0x7fffffff, 0x47, 0x3, 0x24dc, 0x80000001, 0x3ff, 0xfc, 0x0, 0xfffffffa, 0x4, 0xba, 0x3, 0x3, 0x3ff, 0x3, 0x5, 0xf72, 0x5, 0x8, 0x1258dd22, 0x1, 0x4, 0x88, 0xb5e, 0x4, 0x0, 0x3, 0x9, 0x101, 0xff, 0x3, 0x4, 0x39aa, 0xfffffffd, 0x408, 0x9fb0, 0x400, 0x3, 0xfffffff9, 0x7, 0x8, 0x4, 0xafdb, 0x8001, 0x9, 0x0, 0x2a, 0x40, 0x2e77, 0x0, 0x8, 0x7, 0x6, 0x1, 0x81, 0x10, 0x40, 0x1, 0xef, 0x1, 0x9, 0xc, 0xdd5a, 0x0, 0xffff, 0x2, 0x1000, 0x3, 0x1000, 0x3, 0x4, 0x800, 0xfffffffa, 0x800, 0x7, 0x4, 0xfffffffe, 0xfffffff8, 0x81, 0x3ff, 0x7f, 0x4, 0x7, 0xffffffff, 0x0, 0x401, 0xa, 0x468, 0x1, 0xfffffff9, 0x5, 0x7, 0x8000, 0x0, 0x8, 0x5, 0x6, 0x5, 0x2, 0x2, 0x0, 0x1, 0xae9, 0xb07b, 0x13d2, 0x4, 0xfffffffe, 0xa1ef, 0x9c76, 0xf, 0x2, 0x6865e652, 0x10001, 0xfffffff8, 0xcb93, 0x1, 0x2df8, 0x2, 0x3, 0x8, 0x7f, 0x43c2, 0x9, 0x24, 0x2, 0x7, 0x3ff, 0x0, 0x5, 0xa000, 0x964, 0x1, 0x8001, 0x1, 0x7f, 0x6, 0x4, 0x0, 0x0, 0x8000, 0x1, 0x100, 0x800, 0x7, 0x2d0f, 0x6ea, 0x1, 0x34cd, 0x8, 0x8, 0x9, 0x10000, 0x7, 0x9, 0x5, 0xfffffffa, 0x9, 0x81, 0x11, 0x2, 0x10000, 0x18, 0xffffffff, 0x6, 0x200, 0x8000, 0xad, 0x9, 0x7fffffff, 0xa5, 0x101, 0x0, 0x7, 0x10, 0xa3, 0x7fffffff, 0x5, 0x2, 0x200, 0x8001, 0x0, 0x3, 0x4, 0xfffffffc, 0x4, 0x7, 0x78e7df4e, 0x5, 0x0, 0x3, 0x0, 0x1, 0x1, 0xa, 0x0, 0x0, 0x75, 0x101, 0x69cba428, 0xfff, 0x9, 0x9, 0xfffffc00, 0x1, 0x2, 0xf, 0x6, 0x8, 0x4, 0xc, 0x2, 0x37e, 0x14000, 0x3, 0x8000, 0x0, 0x0, 0x77ef, 0x800, 0x8, 0xffffffb2, 0xc74, 0x2, 0xc, 0x9, 0xfffff000, 0x7fffffff, 0xffffffff, 0x5, 0x1, 0x1000, 0x1000, 0x10, 0x9, 0x9, 0x1ff, 0x7, 0xfffffff9, 0x3, 0x80000000, 0x7, 0x40, 0x9, 0x1, 0x7, 0x0, 0x352, 0x0, 0xa, 0x3ff, 0x7, 0x2, 0x200001, 0x10001, 0xfffffff7, 0x0, 0x7, 0x8, 0x4, 0x9, 0x1, 0xe3, 0x5e48, 0x7, 0xffffffff, 0x8001, 0x805, 0xfffffff7, 0x9, 0x5, 0x3, 0x9c, 0x1, 0x2c, 0x3, 0x9, 0x7f, 0x35, 0x8d, 0x0, 0xffff, 0x6, 0x81, 0xdae, 0x8, 0x0, 0x8, 0x9, 0x0, 0x7, 0xed9a, 0x800, 0x8, 0x8, 0x8, 0xecc, 0x4622, 0xffffffc0, 0x1, 0x1, 0x1000, 0x101, 0x6, 0x6, 0xfff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x9, 0xf, 0x2, 0x5, 0x0, 0xc, 0x1cd30080, 0x9, 0xf, 0xf5b, 0x9, 0x54, 0xfffffffe, 0x3, 0xbc, 0xe]}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 1m30.025733128s ago: executing program 35 (id=2619): socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) unlink(0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mknod$loop(0x0, 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x1060c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCGUSAGES(r5, 0x40305829, &(0x7f0000008340)={{0x1, 0x3, 0x7f, 0x7, 0x1000, 0x40}, 0x2bf, [0xb704, 0x3ff, 0x6, 0x2, 0xfba9, 0x80000001, 0x1c, 0x8, 0x2, 0x80000000, 0x8, 0x8001, 0xffff, 0x1, 0x248b56bb, 0xf734, 0x46a93a47, 0x51e1, 0x6, 0x6, 0xff, 0xffffffff, 0x8, 0x4, 0x4, 0x6, 0xeb09, 0x101, 0x5, 0x6, 0x8, 0x4, 0x3, 0x88, 0x0, 0x0, 0x1000, 0xfb81, 0x8, 0x40, 0x7, 0xf, 0x3ff, 0x401, 0x5, 0x10, 0xfffffffd, 0x1, 0xc6f8, 0x2, 0x80, 0x2, 0x7, 0xa1a, 0x9, 0x6, 0x1, 0x2, 0x0, 0x6, 0x5, 0x8000, 0x6, 0x2, 0x5819, 0x7, 0x6, 0x4f4, 0x3, 0x80000, 0x1000, 0x2, 0xb, 0x4, 0x7, 0x5, 0x1, 0x2, 0x80000000, 0x0, 0x5, 0x2, 0x8, 0x1, 0x0, 0x6, 0xd985, 0x51, 0x1, 0x5, 0x9, 0x6, 0xfffffffe, 0x79, 0x2, 0x8, 0xffe00, 0xfffffffb, 0x71172ab, 0x3, 0x6, 0x6, 0x1, 0xe96, 0x4, 0xa09, 0x2, 0x4, 0x3, 0xa80c, 0x80000001, 0x9, 0xe7, 0x3e, 0x3, 0x0, 0x4, 0x2cdf, 0x1000, 0x3, 0x5, 0xff, 0x0, 0x4, 0x101, 0xff, 0x1400000, 0xfffffff7, 0x8, 0x8, 0x4, 0xffff, 0x2, 0x9, 0xfff, 0xfd93, 0x0, 0x5, 0x21, 0x4, 0x80000001, 0x401, 0x5, 0xfffffffb, 0x48cd, 0x1, 0x7fff, 0x8000, 0xfffffffe, 0x9, 0x1, 0x6, 0x6, 0xf8, 0xfffffffd, 0xa, 0x6, 0x2, 0xfb2, 0x100, 0x10001, 0x1, 0x40, 0x7, 0x8, 0x3e3, 0x0, 0x6, 0x0, 0x9, 0x0, 0x49, 0x3ff, 0x5, 0x1ff, 0x3, 0xbd, 0xfffffff8, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, 0x38, 0xd, 0x6, 0xfffffffa, 0x6, 0xf, 0x25, 0x2, 0x0, 0x4, 0x9, 0x2896, 0x4, 0x3, 0x3, 0x7, 0x0, 0xb, 0x9, 0xa9, 0x400, 0x8001, 0x8, 0x2, 0xc6ab, 0x18, 0x8, 0x2, 0x0, 0x7, 0x1, 0x6, 0x5, 0x400, 0x3, 0x3, 0x4, 0x1, 0x2, 0x2, 0x7, 0x8, 0x0, 0x7, 0x7, 0x0, 0xffffff64, 0x5, 0x2, 0x6, 0x3, 0x5, 0xc7, 0x7, 0x212, 0x7, 0x5, 0xe19b, 0x7, 0x5, 0x67, 0xa, 0xf60b, 0x1, 0x1, 0x4, 0x98a, 0x6, 0x10, 0x2eb, 0x2f7e, 0x0, 0x4, 0x1d21, 0x9, 0x80, 0xb, 0x1ff, 0xfffffff9, 0x0, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0x20000000, 0x8, 0xa, 0x3ff, 0x0, 0x7, 0x68b32c17, 0x339, 0x2, 0xc, 0x5, 0x40, 0x2d, 0x1ff, 0x91, 0x7f, 0x4, 0x7, 0x1, 0x2, 0x3b1, 0x3, 0x2, 0x3, 0x8001, 0x7, 0xfffffffc, 0x8, 0x0, 0x401c, 0x7, 0x200, 0x8, 0x5, 0xab83, 0x73, 0x8001, 0x1, 0x2, 0x8, 0x7, 0x3, 0x4, 0x8, 0x1, 0x74e, 0x88, 0x198, 0x20, 0x2, 0x328, 0xe5, 0x7, 0x9, 0x86a, 0x3, 0x1, 0x2b, 0xfffffffb, 0x6, 0xa, 0xd2e, 0x80000000, 0x7, 0xfffffff8, 0x0, 0x8, 0x569, 0xa, 0x100, 0xac3, 0x5, 0x6, 0xff, 0xe, 0x81, 0xca, 0xfffffffe, 0x7, 0x8, 0x0, 0x7, 0x5, 0x5, 0x4, 0xe, 0x5, 0x9, 0x7fffffff, 0xfffffffe, 0x1, 0x3de, 0x2, 0x1, 0xfb, 0x2, 0xfffffff8, 0x3ff, 0x8, 0x3, 0x8, 0x31eb, 0x7, 0x5, 0x8, 0x4a0000, 0x0, 0x2, 0xb0, 0x4, 0x8000, 0x80, 0xd05, 0x9, 0x5, 0x8, 0x80, 0x2, 0x5, 0xb, 0x7, 0x0, 0x5, 0x6af, 0x4, 0x8, 0x3, 0x580, 0x7, 0x9, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7ff, 0x4, 0xfffffff8, 0x9, 0x2, 0x3, 0x77ae, 0x1, 0x91c, 0x5, 0x6, 0x3, 0x0, 0x80000000, 0x21000000, 0xfffffffa, 0x3ff, 0xb3, 0x4f8c, 0x4, 0x127, 0x1, 0x2bfe1798, 0x10000, 0x1, 0x44c, 0x0, 0x4, 0x895, 0x8, 0xff9, 0xfffffff7, 0x3, 0x2c, 0x3ff, 0x6, 0x8, 0x7, 0x1, 0x1000, 0xc530, 0x5, 0x8f, 0x0, 0x6, 0x8000, 0x400, 0x7, 0x6, 0x9, 0x1, 0x5f66, 0x10001, 0x1, 0x9, 0x8000, 0x5, 0x80000001, 0x81, 0x6, 0x8, 0x75f, 0xab8, 0x4, 0x4, 0xe0b0, 0xffff, 0xf, 0x2, 0x4, 0x9, 0xffffd40a, 0x2, 0x9, 0x6, 0x2, 0xfffffa86, 0x8, 0x6, 0x101, 0x3, 0xa000000, 0x8, 0x7fffffff, 0x2, 0x6, 0x4, 0x101, 0x1, 0x200, 0x800, 0x9, 0x2, 0x3, 0xf5, 0xb30, 0x9, 0x2, 0x1, 0xd, 0x7fffffff, 0x7, 0x8, 0x0, 0x5, 0x4, 0x1, 0x462, 0x80000001, 0x5, 0x7, 0x3e2b, 0x4, 0x7ff, 0x2, 0x9, 0x3ff, 0x9, 0x8, 0x6, 0x2, 0x1, 0x100, 0xa, 0x5, 0x800, 0x80000000, 0x40, 0x1, 0x10000, 0xffffcd67, 0x5af, 0x3, 0x8, 0x7, 0x0, 0x227, 0x0, 0x8, 0x0, 0x1c18, 0x6, 0x7, 0x0, 0x9, 0xff, 0x6, 0x101, 0x7fff, 0x1, 0x101, 0xd7b, 0x2, 0x6, 0x81, 0x1, 0x10001, 0x3, 0x2, 0x2, 0xbfc8, 0x1, 0x101, 0x23b8, 0x7f, 0x8, 0xad9, 0x8, 0x4, 0xd31, 0x3a64ec4a, 0xffffffcf, 0x81, 0x7, 0x0, 0x2, 0x3, 0x0, 0x9, 0x4af7e4bc, 0x7, 0x4, 0x2, 0x2f8, 0x4, 0x4, 0x1, 0x1ff, 0x1c7, 0x80000000, 0xd, 0x8, 0x0, 0x7, 0x1, 0x3, 0x6, 0x10000, 0x89e7, 0xa, 0x6d, 0x4, 0x9, 0x6, 0xf, 0x4, 0x706, 0x800, 0xfffffff2, 0x7, 0x7, 0x5, 0x6, 0x1, 0x91, 0x1f, 0x0, 0xb, 0x3, 0x8, 0x42, 0xd3, 0x0, 0x0, 0xfffffff4, 0x1, 0x3e, 0x7923, 0x7, 0x7, 0x101, 0x7, 0x9a0, 0x9, 0xbff, 0xf26, 0x800, 0xe00000, 0x7, 0x171, 0x5, 0xa7, 0x23, 0x400, 0x5, 0x3, 0x5, 0x5, 0x0, 0x0, 0x5, 0x10, 0x6, 0x7, 0x5, 0x4, 0x1, 0x2, 0x0, 0x3, 0x75, 0x3, 0x5, 0xdec3, 0x7, 0x4, 0xfffffff9, 0x3, 0x6, 0x74b, 0xb126, 0xffffffff, 0xbe25, 0x7, 0x9, 0x9a, 0x6, 0x1800000, 0x76f, 0x4, 0x2, 0x4, 0x1, 0x3, 0xfffffff5, 0x7, 0x6, 0xc, 0x1ff, 0x6a, 0xe3, 0x390e, 0x1, 0x8, 0x7fffffff, 0x47, 0x3, 0x24dc, 0x80000001, 0x3ff, 0xfc, 0x0, 0xfffffffa, 0x4, 0xba, 0x3, 0x3, 0x3ff, 0x3, 0x5, 0xf72, 0x5, 0x8, 0x1258dd22, 0x1, 0x4, 0x88, 0xb5e, 0x4, 0x0, 0x3, 0x9, 0x101, 0xff, 0x3, 0x4, 0x39aa, 0xfffffffd, 0x408, 0x9fb0, 0x400, 0x3, 0xfffffff9, 0x7, 0x8, 0x4, 0xafdb, 0x8001, 0x9, 0x0, 0x2a, 0x40, 0x2e77, 0x0, 0x8, 0x7, 0x6, 0x1, 0x81, 0x10, 0x40, 0x1, 0xef, 0x1, 0x9, 0xc, 0xdd5a, 0x0, 0xffff, 0x2, 0x1000, 0x3, 0x1000, 0x3, 0x4, 0x800, 0xfffffffa, 0x800, 0x7, 0x4, 0xfffffffe, 0xfffffff8, 0x81, 0x3ff, 0x7f, 0x4, 0x7, 0xffffffff, 0x0, 0x401, 0xa, 0x468, 0x1, 0xfffffff9, 0x5, 0x7, 0x8000, 0x0, 0x8, 0x5, 0x6, 0x5, 0x2, 0x2, 0x0, 0x1, 0xae9, 0xb07b, 0x13d2, 0x4, 0xfffffffe, 0xa1ef, 0x9c76, 0xf, 0x2, 0x6865e652, 0x10001, 0xfffffff8, 0xcb93, 0x1, 0x2df8, 0x2, 0x3, 0x8, 0x7f, 0x43c2, 0x9, 0x24, 0x2, 0x7, 0x3ff, 0x0, 0x5, 0xa000, 0x964, 0x1, 0x8001, 0x1, 0x7f, 0x6, 0x4, 0x0, 0x0, 0x8000, 0x1, 0x100, 0x800, 0x7, 0x2d0f, 0x6ea, 0x1, 0x34cd, 0x8, 0x8, 0x9, 0x10000, 0x7, 0x9, 0x5, 0xfffffffa, 0x9, 0x81, 0x11, 0x2, 0x10000, 0x18, 0xffffffff, 0x6, 0x200, 0x8000, 0xad, 0x9, 0x7fffffff, 0xa5, 0x101, 0x0, 0x7, 0x10, 0xa3, 0x7fffffff, 0x5, 0x2, 0x200, 0x8001, 0x0, 0x3, 0x4, 0xfffffffc, 0x4, 0x7, 0x78e7df4e, 0x5, 0x0, 0x3, 0x0, 0x1, 0x1, 0xa, 0x0, 0x0, 0x75, 0x101, 0x69cba428, 0xfff, 0x9, 0x9, 0xfffffc00, 0x1, 0x2, 0xf, 0x6, 0x8, 0x4, 0xc, 0x2, 0x37e, 0x14000, 0x3, 0x8000, 0x0, 0x0, 0x77ef, 0x800, 0x8, 0xffffffb2, 0xc74, 0x2, 0xc, 0x9, 0xfffff000, 0x7fffffff, 0xffffffff, 0x5, 0x1, 0x1000, 0x1000, 0x10, 0x9, 0x9, 0x1ff, 0x7, 0xfffffff9, 0x3, 0x80000000, 0x7, 0x40, 0x9, 0x1, 0x7, 0x0, 0x352, 0x0, 0xa, 0x3ff, 0x7, 0x2, 0x200001, 0x10001, 0xfffffff7, 0x0, 0x7, 0x8, 0x4, 0x9, 0x1, 0xe3, 0x5e48, 0x7, 0xffffffff, 0x8001, 0x805, 0xfffffff7, 0x9, 0x5, 0x3, 0x9c, 0x1, 0x2c, 0x3, 0x9, 0x7f, 0x35, 0x8d, 0x0, 0xffff, 0x6, 0x81, 0xdae, 0x8, 0x0, 0x8, 0x9, 0x0, 0x7, 0xed9a, 0x800, 0x8, 0x8, 0x8, 0xecc, 0x4622, 0xffffffc0, 0x1, 0x1, 0x1000, 0x101, 0x6, 0x6, 0xfff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x9, 0xf, 0x2, 0x5, 0x0, 0xc, 0x1cd30080, 0x9, 0xf, 0xf5b, 0x9, 0x54, 0xfffffffe, 0x3, 0xbc, 0xe]}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 1m25.904929728s ago: executing program 1 (id=2647): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x7, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) dup3(r2, r0, 0x0) 1m24.777784145s ago: executing program 1 (id=2648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 1m23.76895675s ago: executing program 1 (id=2650): openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = io_uring_setup(0x2471, &(0x7f0000000280)={0x0, 0x4170, 0x1000, 0x0, 0x2e6}) io_uring_setup(0x2a5a, &(0x7f0000000600)={0x0, 0x52c4, 0x4000, 0xffffffff, 0x51}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x980914, 0xffffff7c}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10) r7 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x70f3}], 0x1, 0x40000160, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000002757d4c6390c8c888a255b10c40d5927f25582ca3e29d452d78c6111d1586db294e380b76135f7c98ae1d6408339e89a2acbefb8bd4a3112c762fdf646827fc3da49d8d5ceedb56dae263991082cbadc27e31284de6a7700f637ed37b5298ac5f1f8076c39fb59e265113b3902af3d566c"], 0x8, 0x800) sendfile(r1, 0xffffffffffffffff, 0x0, 0xb) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f00000006c0)=0xd) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0) write$khugepaged_scan(r0, &(0x7f00000000c0), 0x8) 1m20.634499466s ago: executing program 1 (id=2655): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', 0x1c0) open(0x0, 0x0, 0x4f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/../file0\x00', 0xa0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 1m18.453831628s ago: executing program 1 (id=2658): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000440)='memory.pressure\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000840)=[{0x0}], 0x1, 0x4, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) ioprio_set$pid(0x3, 0x0, 0x0) r9 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0x559af05a10134899, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xbff, 0x1}}, {0x0, 0x10}}}, 0xa0) sendfile(r9, r9, &(0x7f0000000080)=0x2, 0x7f03) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x100080d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="1f0d04d8858626b242e381e708f38e036ccecea771e4f8446147458236e3c36478fbcaf674d0fa6700d4f4a84cdb29f2716429474a14fa14ce679d17bfc359686057e006df88fd3693dc63144b1800a24a33f5167359534a677c6b705766f11e57747beaa2c1fbc10f56cea22e63fa6d2c5ed4f140572694ed8fa45119c9194ce8eed7e76a", @ANYRESOCT, @ANYRES64=r3, @ANYRES8, @ANYRES8], 0xff, 0x1f0, &(0x7f0000000900)="$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") 1m14.571833665s ago: executing program 1 (id=2663): r0 = epoll_create1(0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x41) close(r1) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fgetxattr(r2, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000540)=ANY=[@ANYBLOB='shortname=lower,shortname=winnt,shortname=win95,iocharset=macinuit,shortname=mixed,codepage=1255,nocase,check=strict,rodir,shortname=winnt,iocharset=cp1251,uid=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x29f, &(0x7f0000000180)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002e80)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x4030582a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0xb, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x7a, 0x220, &(0x7f0000000d00)="$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") 1m12.715029372s ago: executing program 36 (id=2663): r0 = epoll_create1(0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x41) close(r1) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fgetxattr(r2, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000540)=ANY=[@ANYBLOB='shortname=lower,shortname=winnt,shortname=win95,iocharset=macinuit,shortname=mixed,codepage=1255,nocase,check=strict,rodir,shortname=winnt,iocharset=cp1251,uid=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x29f, &(0x7f0000000180)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002e80)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x4030582a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0xb, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x7a, 0x220, &(0x7f0000000d00)="$eJzs3E1PE0EAxvGn3WopGl8OvsQTicZ4sVUgIb3JxZtfwMRDAyshLIpdLzQmypfw7tWTH8Ev4dmrB0j0polxzO5M03Zb2uliX2L/vwQ6nZ2HmQWms8OmCMDCepR+Luice26Mebsi6ekTScWZDg3AhBn3+McAWDwBUx9YUCebQbr+fy5IX3+82Tp2H0ue1w8nm3aTkOwfjrvyldMCzzL5o0L6eKvUm1+WdKEvXOq/fvlg83cz/V/0Hb/rfzmTL3vn7fnfu92bvyTpsqQrkq4m4ww6mWtyB7r63870f9MePvIcBgAAAAAAQyW7z2r7ie+mP5uv+rR8MLA22T0/343CwUc9FG3+oVfj/hM87/pfzdl9O7+WGdNgvztFd8O17PLVrZfRds4xAHkVu+f/aH0TyH/+a+Cfs4Izzv9Smn+fMw0stviwtdeIorA5tYI0bipZKvN3WmkXvo1s/DEp6Ke9MzL570b7xTSpWfFJFVzjqf28NKTNL2NM2IzfDWuz14gqasZmRJuZFF49tldvE+giWZS6a1pn/ILf79hflE5NqWcSfbKHv9gaE8QH/+C81HvXKpj+axOAyaq93j+oxYet+7v7jZ1wJ3yxvlGvb6yvrdZryWX5Urr05t6cA5hnnUV/1iMBAAAAAAAAAAAAAAB5XZd0Y/zYqf/eAwAAAMD8Gv+NQeWx304063MEAAAAAAAAAAAAAOB/9zcAAP//SpE/iA==") 28.812166507s ago: executing program 5 (id=2723): syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[], 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8943, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c462402fab7ff7f00000000000002000300fffeffffdf0200000000000040000000000000000303000000000000000000000a0038000100040004000d0003000000008000000000000000000000070000000000000008000000000040ecc25eeb00000000"], 0x78) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="00ea5bd69d713e222cd60cd11db90800000000000000ea4152adefefb2fcccba61cbfd569fa19db9f8c2d61957d809"], 0x1, 0x221, &(0x7f0000000000)="$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") ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x4000) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x242) syz_io_uring_submit(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 25.029896773s ago: executing program 5 (id=2727): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, 0x0) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x41, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lstat(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x2) getdents(r3, 0x0, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001080)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x0, 0x0, 0xffffffff, 0x110, 0x110, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x250}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x3, "d596aeacb7ccdc0169c1d865b82ad7084d1c88c6b7cec8c99cc89cb57cda"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 13.300984835s ago: executing program 5 (id=2742): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, 0x0, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@private1, 0x1, r6}) r8 = socket(0xa, 0x1, 0x0) ioctl(r8, 0x8936, &(0x7f0000000000)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)=""/179, 0xb3}], 0x1) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010600)='./file0\x00', 0x208000, &(0x7f0000003940)={[{@quota}, {@jqfmt_vfsv0}, {@usrjquota={'usrjquota', 0x3d, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8f\x81\xb0\xceyBt\xee%\xed\xe3$\x04\xf9\b\xd7\xa4\x7fw\x89\x95\xef\xc4\b\x00\x00\x00\x95r|\x90h(*d\x1b\xecPL\x1fZ^X\x03%\x0fr\x9d\xc7\v\x05\xc3\x14\xcdV\xe8y \xc75\x9f\xda\x95TU\xb7\xb4|^No\xba\"\xf9\xfc D\x89\x17H\x93\x154Ct64\xb9\xc1\x184\xf6\x1d\xe4T!\x88r\x97\x13\x1c_\x06M4I\x81\b&\xbe\xc5o\xd6\xa34V\xb7w.P2l\xb0a\xe3\xfa*\xf4\x98\rT]\x9b<\xec\xde0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20040600) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x0, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'lo\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "77c8"}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x800, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 8.603338644s ago: executing program 7 (id=2744): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x0, 0x5, 0x2, 0xd, 'syz0\x00', 0x3}, 0x3, 0x0, 0x9, r1, 0x8, 0x8, 'syz1\x00', &(0x7f0000000280)=['\x00', '$\x00', '@/!\x00', 'syz', 'erofs\x00', 'keyring\x00', 'm\x00', '%\']%\x00'], 0x1f}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000840)="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", 0x17c, r4) r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r5, r6}, &(0x7f0000000700)=""/259, 0x103, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/121, 0x79}, 0x800}], 0x1, 0xb, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") rename(&(0x7f0000000780)='./file1\x00', &(0x7f00000002c0)='./file0/file0\x00') write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) fallocate(r7, 0x10, 0x2, 0x2) 8.558088864s ago: executing program 5 (id=2745): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000440)='memory.pressure\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) ioprio_set$pid(0x3, 0x0, 0x0) r9 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0x559af05a10134899, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xbff, 0x1}}, {0x0, 0x10}}}, 0xa0) sendfile(r9, r9, &(0x7f0000000080)=0x2, 0x7f03) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x100080d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32, @ANYRESOCT, @ANYBLOB="215aa15bf29ed2ff6f9241ff60693d298a3d41143bfc9091146111b4930c37eddcf542d641b821af229e7d8780d50b6f47fa3e5928555eb4d6d507d92b87b0b01c19c789895e02891afc082bb85a47087f168a6aa2c2bc51a3f3a404a4a1e6e2fbad00d592df65bd2a593f488bf41dbc7ea43fe2554fbe34e4bd7f606f35e445aff55aaa19f7ffffffffffffff19bd4739c80c9e6681229c48e0c6de634c35c029c4eb3b43412c95089416a3d63f08577a303758410658a4ec52e5b778eda9cd1bd8834e145c111690b0da927087e805000000000000008fd8b9bdfbdaa777db54127463a589eed325c34b6459505702f3a45f285c53c1b25bab2eef6324d67ad8d7e247317d80ff3ad9120b4e2294e67de9adaab76fa991571a187cd8f7fbc49bf45d6f8dbf69ef0d765a02ad98e802b1688148a8c017e3af238f82c49bbd8ba542fbfec5693d82158e3216b95656986f9d7eec7244a27dfaf8623fc76943bf142a61d9d6c622dbcac3d324d07be5a5cc88f85a857ff9d45924d5d82a04424d3453c96fafa37d952940f3147d5af234b39c3ff742a2e5300e10ee692a32f5c3321d01eadaa8c44bf9d534b52fe758082299e04f839e529a6d0293bf12770ac948730a0c367e117137c6fd930b1f306138163b7180e111d6926255a71bd227b1d27f2897721e3bda884b0792a81134d8fbc9aafc732b15aee5c9e0a835ac17b457efa36ce1095a3196d278207846ea81172826d49b87aac6e662bb824f16b0b65fc6989395ba022bd6af2f1830375c311bdf55f15d9830564e65dc76e5b7c9a91e857dbcef3909cfd628649337de6ff04a398f4325a430467aee51d7fa12ef61bc0b67d1e18e62754d8a2b65fb", @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="1f0d04d8858626b242e381e708f38e036ccecea771e4f8446147458236e3c36478fbcaf674d0fa6700d4f4a84cdb29f2716429474a14fa14ce679d17bfc359686057e006df88fd3693dc63144b1800a24a33f5167359534a677c6b705766f11e57747beaa2c1fbc10f56cea22e63fa6d2c5ed4f140572694ed8fa45119c9194ce8eed7e76a", @ANYRESOCT, @ANYRES64=r3, @ANYRES8, @ANYRES8], 0xff, 0x1f0, &(0x7f0000000900)="$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") 7.162880685s ago: executing program 6 (id=2746): socket$kcm(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x7], [0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x1]}) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x17) 6.862309849s ago: executing program 5 (id=2747): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2080000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000180)=""/9, 0x2}, 0x20) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) io_setup(0x5, &(0x7f0000000000)=0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x27cc, "040000239b080000860000000000000000ddff000000000000000600", 0xffffffffffffffff}) io_submit(r3, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") 6.500040915s ago: executing program 7 (id=2748): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) shutdown(r5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r10 = epoll_create1(0x80000) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x40}, {r3, 0x610}, {r11, 0x20}, {r10, 0x5480}], 0x4, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) 3.657959166s ago: executing program 7 (id=2749): socket$inet6_tcp(0xa, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x4976a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x2da9, &(0x7f0000000300)={0x0, 0x7ffffffc, 0x2, 0x3}, &(0x7f0000000100), &(0x7f00000001c0)) syz_open_dev$vim2m(&(0x7f0000000300), 0x8000000011d, 0x2) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) keyctl$session_to_parent(0x12) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r5, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000700500"]) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) accept4$unix(r5, 0x0, 0x0, 0x800) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0}]}, 0x3}, 0x1) 3.606232867s ago: executing program 6 (id=2757): r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x200000, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xffffffffffffffff}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./mnt\x00', 0x11) chdir(&(0x7f00000000c0)='./file0\x00') sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa29e19c628076e6a}, 0x4040004) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x564) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) setreuid(0xee00, 0x0) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000340)={'binder0\x00'}) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_open_dev$sg(0x0, 0x6, 0x10000) 3.594546537s ago: executing program 5 (id=2750): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x20000000005, 0x21}, 0xd8) r5 = accept4$unix(r2, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e, 0x80000) connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x109}], {0x14}}, 0x3c}}, 0x0) mmap(&(0x7f00008a9000/0x4000)=nil, 0x4000, 0xf, 0x4008032, 0xffffffffffffffff, 0x4477000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.479424333s ago: executing program 7 (id=2751): sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xac) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2a, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x24003, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.440872454s ago: executing program 6 (id=2752): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004480)={&(0x7f0000004400)={0x20, 0x6, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) getsockopt$rose(r0, 0x104, 0x0, 0x0, 0x0) 2.123870959s ago: executing program 7 (id=2753): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x21d}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x147042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x1, 0x3f, 0x40, 0x22e6a, 0xffffffffffffffff, 0x733, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x34, 0x12, 0xdbf44c00c5896d57, 0x10000010, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000001a40), 0x1003, r2}, 0x38) chdir(&(0x7f0000000080)='./file0\x00') 1.248600162s ago: executing program 6 (id=2754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a75"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20040600) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x0, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'lo\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "77c8"}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x800, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 140.619178ms ago: executing program 7 (id=2755): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000440)='memory.pressure\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) ioprio_set$pid(0x3, 0x0, 0x0) r9 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0x559af05a10134899, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xbff, 0x1}}, {0x0, 0x10}}}, 0xa0) sendfile(r9, r9, &(0x7f0000000080)=0x2, 0x7f03) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x100080d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="1f0d04d8858626b242e381e708f38e036ccecea771e4f8446147458236e3c36478fbcaf674d0fa6700d4f4a84cdb29f2716429474a14fa14ce679d17bfc359686057e006df88fd3693dc63144b1800a24a33f5167359534a677c6b705766f11e57747beaa2c1fbc10f56cea22e63fa6d2c5ed4f140572694ed8fa45119c9194ce8eed7e76a", @ANYRESOCT, @ANYRES64=r3, @ANYRES8, @ANYRES8], 0xff, 0x1f0, &(0x7f0000000900)="$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") 0s ago: executing program 6 (id=2756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r0, &(0x7f0000000040)='smaps\x00') r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) dup(r3) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, 0x0) process_vm_writev(r0, &(0x7f0000003500), 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='omfs\x00', 0x50000, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x810000, &(0x7f0000001100)=ANY=[@ANYRES32=0x0, @ANYBLOB="9be85263ed40a6f921f127b669d2720653cc920c2356a71ac5d524404987a170159a8500cd6a5dc705874c797d77b79a23f5812beb4a8d713ff8af85a2909859d83e2db8ee3af2a95a2f295bb1114b45a99dd2b325a870ab19570e2c185e39d887f75ed2457c72abf586e07337b03ff17f6ed3e12309f36e0be01d820d716a1997ebfa63b50be1cf2e11dab7e3d39f1dac980c3f80e9ef3e16e356d60c1bc70175609f7b20ff702a02c5efa50922d04d86e989f087679b06f795eeb0adcda5f2593d59d2a968ea22b6b7dfdf9f60515416fbf0c1833a917c5d4c30c1f4e6bb310e27", @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC], 0x1, 0x150c, &(0x7f0000002840)="$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") mkdir(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x81, 0x0) getdents64(r4, 0x0, 0x22) msync(&(0x7f0000a7c000/0x14000)=nil, 0x14000, 0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x60aa, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000500)={0xa, 0x4e24, 0x792, @loopback, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"], 0x18}}], 0x1, 0x24040000) readv(r5, &(0x7f0000006480)=[{0x0}], 0x1) kernel console output (not intermixed with test programs): [ T5564] vhci_hcd: stop threads [ 1393.093278][ T5564] vhci_hcd: release socket [ 1393.115776][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1393.183820][ T4301] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1393.250451][ T5564] vhci_hcd: disconnect device [ 1393.265748][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1393.294244][ T7] vhci_hcd: vhci_device speed not set [ 1393.421833][T15275] overlayfs: failed to clone lowerpath [ 1393.764232][ T4301] usb 6-1: device not accepting address 8, error -71 [ 1393.937653][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1394.014119][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1394.023585][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1394.118289][T14970] device veth0_vlan entered promiscuous mode [ 1394.135485][ T5564] Bluetooth: hci5: Frame reassembly failed (-84) [ 1394.166889][ T9773] Bluetooth: hci5: Frame reassembly failed (-84) [ 1394.256512][T15280] UBIFS error (pid: 15280): cannot open "./file0", error -22 [ 1394.362284][ T9773] Bluetooth: hci5: Frame reassembly failed (-84) [ 1394.462302][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1394.544938][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1394.568288][T14970] device veth1_vlan entered promiscuous mode [ 1394.882220][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1394.913056][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1394.935470][T14970] device veth0_macvtap entered promiscuous mode [ 1394.967728][T14970] device veth1_macvtap entered promiscuous mode [ 1394.990390][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.001159][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.011486][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.025498][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.035944][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.046516][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.057161][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.067927][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.077934][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.088573][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.108290][T14970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.117877][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1395.129940][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1395.149145][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1395.171587][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1395.193615][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.211379][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.222669][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.079024][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.089402][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.100926][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.111434][ T4264] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1396.114018][ T4268] Bluetooth: hci5: command 0x1003 tx timeout [ 1396.131282][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.155593][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.170100][T14970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.182381][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 1396.197621][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1396.206969][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1396.219430][T14970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.228767][T14970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.238061][T14970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.247053][T14970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.258522][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2249'. [ 1398.147723][ T5564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.193923][ T5564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.284748][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1398.338952][ T9764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.355511][ T9764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.522874][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1403.219109][T15293] Bluetooth: hci3: command 0x0405 tx timeout [ 1403.907655][T15333] loop6: detected capacity change from 0 to 512 [ 1405.426417][T15342] qrtr: Invalid version 48 [ 1406.201974][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 1406.225435][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 1406.479744][T15325] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1407.796320][T15364] loop5: detected capacity change from 0 to 16 [ 1407.903807][T15364] erofs: (device loop5): mounted with root inode @ nid 36. [ 1407.919488][T15363] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1407.965651][T15350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1408.130876][T15369] loop6: detected capacity change from 0 to 16 [ 1408.218228][T15369] erofs: (device loop6): mounted with root inode @ nid 36. [ 1409.099676][T15376] loop5: detected capacity change from 0 to 64 [ 1412.231506][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2273'. [ 1415.477398][T15420] qrtr: Invalid version 48 [ 1415.961052][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2273'. [ 1417.140467][T15398] team0 (unregistering): Port device team_slave_0 removed [ 1417.240714][T15398] team0 (unregistering): Port device team_slave_1 removed [ 1418.394164][T15452] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1418.471864][T15448] loop1: detected capacity change from 0 to 512 [ 1418.504236][T15448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1418.669122][T15448] EXT4-fs: Ignoring removed i_version option [ 1419.226241][T15448] EXT4-fs (loop1): 1 orphan inode deleted [ 1419.232047][T15448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1419.409423][T15462] loop5: detected capacity change from 0 to 16 [ 1419.434717][T15462] erofs: (device loop5): mounted with root inode @ nid 36. [ 1421.168451][T15470] loop6: detected capacity change from 0 to 512 [ 1421.193140][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1421.885445][T15476] hugetlbfs: syz.5.2294 (15476): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1421.936667][T15470] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1421.946290][T15470] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1422.519101][T14970] EXT4-fs (loop6): unmounting filesystem. [ 1422.931619][T15492] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1422.942695][T15492] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1425.005444][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2300'. [ 1425.023112][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2300'. [ 1426.113308][T15508] loop1: detected capacity change from 0 to 512 [ 1426.130953][T15508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1426.162920][T15508] EXT4-fs: Ignoring removed i_version option [ 1426.812239][T15517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.823946][T15517] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1426.841825][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1426.860224][T15508] EXT4-fs (loop1): 1 orphan inode deleted [ 1426.886357][T15508] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1427.823353][T15530] loop5: detected capacity change from 0 to 64 [ 1429.238437][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1429.268695][T15377] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1430.837866][T15536] netlink: 964 bytes leftover after parsing attributes in process `syz.6.2307'. [ 1432.338057][T15543] loop5: detected capacity change from 0 to 512 [ 1432.354676][T15377] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1432.388644][T15543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1432.593932][T15543] EXT4-fs: Ignoring removed i_version option [ 1433.000797][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.016016][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.223963][T15543] EXT4-fs (loop5): 1 orphan inode deleted [ 1433.229923][T15543] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1434.483975][T15569] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1435.723300][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1436.759471][T15584] netlink: 'syz.0.2321': attribute type 12 has an invalid length. [ 1436.791775][T15585] loop1: detected capacity change from 0 to 64 [ 1437.561903][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2321'. [ 1437.993913][T15599] loop5: detected capacity change from 0 to 512 [ 1438.001083][T15599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1438.007866][T15599] EXT4-fs: Ignoring removed i_version option [ 1438.145910][T15599] EXT4-fs (loop5): 1 orphan inode deleted [ 1438.151799][T15599] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1439.335230][T15612] netlink: 'syz.6.2323': attribute type 4 has an invalid length. [ 1440.295751][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1441.190188][T15624] loop1: detected capacity change from 0 to 16 [ 1441.209416][T15624] erofs: (device loop1): mounted with root inode @ nid 36. [ 1443.314918][T15293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1443.329278][T15293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1443.338232][T15293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1443.346305][T15293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1443.355681][T15293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1443.363041][T15293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1444.590872][T15348] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.888550][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 1446.832029][T15348] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.948218][T15634] lo speed is unknown, defaulting to 1000 [ 1447.137903][T15675] loop1: detected capacity change from 0 to 512 [ 1447.955239][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 1448.270468][T15675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1448.279941][T15675] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1448.585304][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1448.609093][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 1448.789073][T15348] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.024697][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 1450.079664][T15348] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.299431][T15634] lo speed is unknown, defaulting to 1000 [ 1450.331829][T15634] lo speed is unknown, defaulting to 1000 [ 1452.104784][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 1452.489503][T15709] syz.5.2345 (15709): drop_caches: 2 [ 1452.523117][T15709] syz.5.2345 (15709): drop_caches: 2 [ 1453.335579][T15348] tipc: Disabling bearer [ 1453.394171][T15348] tipc: Disabling bearer [ 1453.616187][T15348] tipc: Left network mode [ 1455.739095][T15738] loop6: detected capacity change from 0 to 64 [ 1456.148938][T15745] loop5: detected capacity change from 0 to 64 [ 1456.506605][T15325] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1458.474107][T15634] chnl_net:caif_netlink_parms(): no params data found [ 1458.535934][T15764] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1458.764426][T15751] loop1: detected capacity change from 0 to 4096 [ 1460.707701][ T4255] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 1460.722692][ T4255] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1460.817309][T15634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.832159][T15634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.875765][T15634] device bridge_slave_0 entered promiscuous mode [ 1460.909490][T15784] loop5: detected capacity change from 0 to 128 [ 1460.943522][T15784] FAT-fs (loop5): Unrecognized mount option "0x0000000000000006" or missing value [ 1461.187747][T15634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.209791][T15634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.269527][T15634] device bridge_slave_1 entered promiscuous mode [ 1462.263969][ T4269] Bluetooth: hci1: command 0x0405 tx timeout [ 1463.887535][T15634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.151508][T15808] netlink: 964 bytes leftover after parsing attributes in process `syz.1.2362'. [ 1464.265144][T15809] loop5: detected capacity change from 0 to 64 [ 1464.344435][T15325] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1464.475558][T15634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1465.579243][T15634] team0: Port device team_slave_0 added [ 1465.876804][T15634] team0: Port device team_slave_1 added [ 1466.556902][T15348] batman_adv: batadv0: Removing interface: wlan0 [ 1466.608718][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'. [ 1466.715966][T15634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.722962][T15634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.753908][T15634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.903759][T15829] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1467.509577][T15634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.654607][T15634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.905770][T15634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.099038][T15634] device hsr_slave_0 entered promiscuous mode [ 1468.244309][T15634] device hsr_slave_1 entered promiscuous mode [ 1468.321433][T15846] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1468.354418][T15634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1468.380364][T15634] Cannot create hsr debugfs directory [ 1468.473238][T15348] device hsr_slave_0 left promiscuous mode [ 1468.512978][T15348] device hsr_slave_1 left promiscuous mode [ 1468.552527][T15348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1468.596632][T15348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.648142][T15348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1468.759891][T15348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.882378][T15348] batman_adv: batadv0: Interface deactivated: macsec1 [ 1468.997448][T15348] batman_adv: batadv0: Removing interface: macsec1 [ 1469.045151][T15348] device bridge_slave_1 left promiscuous mode [ 1469.082477][T15348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.200924][T15348] device bridge_slave_0 left promiscuous mode [ 1469.243976][T15348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.346037][T15853] loop5: detected capacity change from 0 to 16 [ 1469.354709][T15853] erofs: (device loop5): mounted with root inode @ nid 36. [ 1469.403885][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 1469.491015][T15857] syz.6.2371 (15857): drop_caches: 2 [ 1469.758375][T15857] syz.6.2371 (15857): drop_caches: 2 [ 1470.456850][T15348] device bridge0 left promiscuous mode [ 1470.511751][T15348] device veth1_macvtap left promiscuous mode [ 1470.567251][T15348] device veth0_macvtap left promiscuous mode [ 1470.661776][T15867] loop5: detected capacity change from 0 to 2048 [ 1470.709988][T15867] Alternate GPT is invalid, using primary GPT. [ 1470.716720][T15867] loop5: p1 p2 p3 [ 1472.916410][T15325] udevd[15325]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1472.958827][T15377] udevd[15377]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1473.123032][T15645] udevd[15645]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1475.137934][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2382'. [ 1475.990237][T15348] team0 (unregistering): Port device team_slave_1 removed [ 1476.254878][T15348] team0 (unregistering): Port device team_slave_0 removed [ 1476.395422][T15348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.424708][T15913] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1476.553076][T15348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.835052][T15348] bond0 (unregistering): Released all slaves [ 1479.147035][T15849] netlink: 'syz.1.2370': attribute type 12 has an invalid length. [ 1479.155581][T15876] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2377'. [ 1479.186980][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2377'. [ 1479.220765][ T4334] lo speed is unknown, defaulting to 1000 [ 1480.450543][T15928] loop1: detected capacity change from 0 to 4096 [ 1481.008902][T15936] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1481.054479][ T27] audit: type=1800 audit(2000000413.800:588): pid=15928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2388" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1482.430736][T15942] overlayfs: failed to clone lowerpath [ 1483.347022][T15634] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1483.583408][T15948] loop5: detected capacity change from 0 to 64 [ 1483.657795][T15634] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1483.704153][T15325] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1483.738088][T15634] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1483.875738][T15634] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1484.324680][T15634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.356507][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1484.471604][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1484.593344][T15634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.639110][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1484.685510][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1484.756101][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.763289][ T9764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.184484][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1485.229069][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1485.356325][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1485.374257][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.381383][ T9764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.276520][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1486.294940][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1486.340810][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1486.403008][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1486.467093][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1486.536966][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1486.585257][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1486.646860][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1486.705373][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1486.724117][T15978] device veth0 entered promiscuous mode [ 1486.965789][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1486.979260][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1487.508139][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2397'. [ 1487.946263][T15986] loop6: detected capacity change from 0 to 512 [ 1487.964530][T15989] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2399'. [ 1488.006632][T15986] EXT4-fs: Ignoring removed nobh option [ 1488.032205][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2399'. [ 1488.047230][T15992] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1488.149632][T15986] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2398: invalid indirect mapped block 256 (level 2) [ 1488.896061][T15986] EXT4-fs (loop6): 2 truncates cleaned up [ 1488.902065][T15986] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1490.875162][T14970] EXT4-fs (loop6): unmounting filesystem. [ 1491.669006][T16020] loop6: detected capacity change from 0 to 512 [ 1491.727353][T16020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1491.763960][T16020] EXT4-fs: Ignoring removed i_version option [ 1491.837558][T16020] EXT4-fs (loop6): 1 orphan inode deleted [ 1491.861011][T16020] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1491.896025][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1491.904738][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1491.917220][T15634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.763072][T14970] EXT4-fs (loop6): unmounting filesystem. [ 1494.348536][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.355901][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.388625][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2405'. [ 1495.366167][T16057] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1496.103554][T16064] serio: Serial port ptm0 [ 1497.070141][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1497.106589][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1498.044024][T16069] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2410'. [ 1498.084913][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2410'. [ 1498.206914][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1498.217357][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1498.228153][T15634] device veth0_vlan entered promiscuous mode [ 1498.247369][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1498.317581][T16078] loop5: detected capacity change from 0 to 128 [ 1498.331052][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1498.361625][T15634] device veth1_vlan entered promiscuous mode [ 1499.586112][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1499.611884][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1499.720244][T15634] device veth0_macvtap entered promiscuous mode [ 1499.799904][T16089] ceph: No mds server is up or the cluster is laggy [ 1499.925404][T15634] device veth1_macvtap entered promiscuous mode [ 1500.021998][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.037748][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.048487][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.059285][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.069935][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.080755][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.091260][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.112468][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.143133][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.164386][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.191029][T15634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.201751][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1500.211098][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1500.222922][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1500.232062][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1500.246385][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.273168][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.345565][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.359542][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.369490][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.384456][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.397154][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.409356][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.422859][T15634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.442495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1500.461406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1500.475255][T15634] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.528860][T15634] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.543960][T15634] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.552706][T15634] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.044122][T15293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1501.066369][T15293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1501.079008][T15293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1501.088071][T15293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1501.095836][T15293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1501.103186][T15293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1501.179401][T16109] lo speed is unknown, defaulting to 1000 [ 1501.368578][ T46] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.393067][T16109] lo speed is unknown, defaulting to 1000 [ 1501.511663][ T46] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.632631][ T46] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.751554][ T46] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.773411][T16109] chnl_net:caif_netlink_parms(): no params data found [ 1501.862687][T16109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.871094][T16109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.886135][T16109] device bridge_slave_0 entered promiscuous mode [ 1501.902142][T16109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.911789][T16109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.927107][T16109] device bridge_slave_1 entered promiscuous mode [ 1502.042800][T16109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.080752][T16109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.236753][T16109] team0: Port device team_slave_0 added [ 1502.261678][T16109] team0: Port device team_slave_1 added [ 1502.372188][T16109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1502.379291][T16109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.416118][T16109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1502.466464][T16109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1502.473457][T16109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.499701][T16109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1502.558868][T16109] device hsr_slave_0 entered promiscuous mode [ 1502.566352][T16109] device hsr_slave_1 entered promiscuous mode [ 1502.573426][T16109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1502.582659][T16109] Cannot create hsr debugfs directory [ 1503.152989][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 1503.318978][ T46] device hsr_slave_0 left promiscuous mode [ 1503.326678][ T46] device hsr_slave_1 left promiscuous mode [ 1503.333140][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1503.340750][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.348690][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1503.356574][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.364882][ T46] device bridge_slave_1 left promiscuous mode [ 1503.371167][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.379703][ T46] device bridge_slave_0 left promiscuous mode [ 1503.386154][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.412850][ T46] device veth1_macvtap left promiscuous mode [ 1503.419018][ T46] device veth0_macvtap left promiscuous mode [ 1503.425303][ T46] device veth1_vlan left promiscuous mode [ 1503.431075][ T46] device veth0_vlan left promiscuous mode [ 1504.136569][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1504.203264][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1504.258408][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.323295][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1505.012305][ T46] bond0 (unregistering): Released all slaves [ 1505.183914][T16109] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1505.229552][T16109] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1505.234352][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 1505.248940][T16109] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1505.269713][T16109] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1505.423587][T16109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.465048][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1505.473592][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1505.520442][T16109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.544149][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1505.562926][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1505.572722][T13631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.580012][T13631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.609352][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1505.620682][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1505.638929][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1505.652601][T13631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.659808][T13631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.671120][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1505.699765][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1505.721146][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1505.736178][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1505.764395][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1505.776927][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1505.786610][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1505.795960][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1505.805050][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1505.817305][T16109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1505.828742][T16109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1505.841986][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1505.853474][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1506.199331][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1506.210892][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1506.227955][T16109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.676985][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1506.694510][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1506.723183][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1506.733193][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1506.746200][T16109] device veth0_vlan entered promiscuous mode [ 1506.759224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1506.768012][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1506.780917][T16109] device veth1_vlan entered promiscuous mode [ 1506.818392][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1506.834773][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1506.854252][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1506.872424][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1506.888097][T16109] device veth0_macvtap entered promiscuous mode [ 1506.901565][T16109] device veth1_macvtap entered promiscuous mode [ 1506.931459][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.942587][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.953050][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.964090][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.974318][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.985273][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.995524][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.006644][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.016535][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.027009][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.037949][T16109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.049008][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.059916][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.070514][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.081085][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.090949][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.101718][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.111712][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.122246][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.133303][T16109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.148360][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1507.157823][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1507.167057][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1507.176131][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1507.187184][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1507.195916][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1507.214411][T16109] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.223169][T16109] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.232597][T16109] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.241538][T16109] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.315485][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 1507.330870][ T5564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.350602][ T5564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.363436][ T9775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.371474][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1507.382563][ T9775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.401373][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1508.016508][T16200] loop7: detected capacity change from 0 to 64 [ 1508.984158][T16206] netlink: 'syz.1.2425': attribute type 12 has an invalid length. [ 1508.992171][T15645] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1509.028693][ T5750] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 1509.393735][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 1510.065640][T16222] loop1: detected capacity change from 0 to 64 [ 1513.183666][T16220] ubi: mtd0 is already attached to ubi0 [ 1513.854629][T16247] loop6: detected capacity change from 0 to 2048 [ 1514.787937][T16247] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1514.809027][T16246] loop1: detected capacity change from 0 to 16 [ 1514.847404][T16246] erofs: (device loop1): mounted with root inode @ nid 36. [ 1514.848641][T16245] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1515.194776][T14970] EXT4-fs (loop6): unmounting filesystem. [ 1515.200962][T16262] loop5: detected capacity change from 0 to 512 [ 1515.240714][T16262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1515.283937][T16262] EXT4-fs: Ignoring removed i_version option [ 1515.327640][T16264] loop7: detected capacity change from 0 to 128 [ 1515.374809][T16264] FAT-fs (loop7): Unrecognized mount option "0x0000000000000006" or missing value [ 1515.384744][T16262] EXT4-fs (loop5): 1 orphan inode deleted [ 1515.390516][T16262] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1515.456944][T16267] loop6: detected capacity change from 0 to 1024 [ 1515.656105][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2421'. [ 1515.666965][T16270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2421'. [ 1516.150789][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1516.563826][T16273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2422'. [ 1516.581338][ T5564] hfsplus: b-tree write err: -5, ino 4 [ 1520.987926][T16301] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1522.351533][T16319] xt_connbytes: Forcing CT accounting to be enabled [ 1522.358555][T16319] Cannot find add_set index 0 as target [ 1522.785680][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2434'. [ 1523.755791][T16333] loop1: detected capacity change from 0 to 512 [ 1523.777309][T16333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1523.921997][T16333] EXT4-fs: Ignoring removed i_version option [ 1524.062871][T16338] loop6: detected capacity change from 0 to 8 [ 1525.042952][T16333] EXT4-fs (loop1): 1 orphan inode deleted [ 1525.080547][T16333] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1525.723513][T16343] loop7: detected capacity change from 0 to 40427 [ 1526.814635][T16343] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1526.822596][T16343] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1526.846504][T16343] F2FS-fs (loop7): invalid crc value [ 1526.847569][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1526.896502][T16343] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1527.020060][T16343] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1527.028375][T16343] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1527.689851][T16360] loop6: detected capacity change from 0 to 64 [ 1528.445722][T15377] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1528.814309][T16364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2441'. [ 1528.846681][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 1529.214803][T16373] netlink: 'syz.0.2443': attribute type 12 has an invalid length. [ 1532.674321][T16391] device veth0 entered promiscuous mode [ 1532.999383][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2449'. [ 1533.822995][T16398] loop1: detected capacity change from 0 to 512 [ 1533.826996][T16394] loop6: detected capacity change from 0 to 16 [ 1533.841026][T16394] erofs: (device loop6): mounted with root inode @ nid 36. [ 1533.882384][T16398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1533.915442][T15325] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1533.961851][T16398] EXT4-fs: Ignoring removed i_version option [ 1534.175741][T16398] EXT4-fs (loop1): 1 orphan inode deleted [ 1534.181778][T16398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1534.435026][T16413] ubi: mtd0 is already attached to ubi0 [ 1535.289420][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1536.430851][T16437] loop7: detected capacity change from 0 to 64 [ 1537.169605][T16444] loop5: detected capacity change from 0 to 2048 [ 1537.336248][T16444] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1537.403761][T16442] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1537.564201][T15645] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1537.803052][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1539.489929][T16464] loop7: detected capacity change from 0 to 512 [ 1539.532330][T16230] libceph: connect (1)[c::]:6789 error -101 [ 1539.547566][T16230] libceph: mon0 (1)[c::]:6789 connect error [ 1539.569344][T16461] ceph: No mds server is up or the cluster is laggy [ 1539.580856][T16230] libceph: connect (1)[c::]:6789 error -101 [ 1539.590194][T16230] libceph: mon0 (1)[c::]:6789 connect error [ 1539.683245][T16464] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1539.721726][T16464] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1542.479805][T16109] EXT4-fs (loop7): unmounting filesystem. [ 1543.142113][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2462'. [ 1543.151774][T16490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'. [ 1543.791318][T16512] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1544.032134][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2469'. [ 1544.964622][T16522] loop5: detected capacity change from 0 to 64 [ 1545.035153][T15645] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1546.548049][T16533] loop7: detected capacity change from 0 to 128 [ 1549.004340][T15325] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1549.124232][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 1549.233073][T16538] loop5: detected capacity change from 0 to 512 [ 1549.280602][T16538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1549.309223][T16538] EXT4-fs: Ignoring removed i_version option [ 1550.299623][T16549] loop6: detected capacity change from 0 to 64 [ 1551.139409][T15377] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1551.232882][T16538] EXT4-fs (loop5): 1 orphan inode deleted [ 1551.323738][T16538] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1552.053074][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1552.823354][ T27] audit: type=1326 audit(2000000485.560:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1553.279052][T16586] loop6: detected capacity change from 0 to 2048 [ 1553.315542][T16586] hpfs: filesystem error: improperly stopped; already mounted read-only [ 1553.324693][T16586] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 1554.755873][ T27] audit: type=1326 audit(2000000485.590:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1554.894618][T15645] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1554.963724][ T27] audit: type=1326 audit(2000000485.590:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1555.253492][ T27] audit: type=1326 audit(2000000485.590:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd4a990847 code=0x7ffc0000 [ 1556.039247][T16603] loop7: detected capacity change from 0 to 2048 [ 1556.070056][T16603] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1556.077920][T16603] UDF-fs: Scanning with blocksize 512 failed [ 1556.504688][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.511158][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.631665][T16603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1556.987427][ T4269] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1556.998632][ T4269] Bluetooth: hci3: Injecting HCI hardware error event [ 1557.009740][ T27] audit: type=1326 audit(2000000485.590:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1557.010242][ T4269] Bluetooth: hci3: hardware error 0x00 [ 1557.213757][ T27] audit: type=1326 audit(2000000485.590:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1557.495863][T16609] loop5: detected capacity change from 0 to 128 [ 1557.521639][T16609] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1557.538979][T16609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1557.803734][ T27] audit: type=1326 audit(2000000485.590:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1558.207084][ T27] audit: type=1326 audit(2000000485.590:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1558.741171][ T27] audit: type=1326 audit(2000000485.590:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1559.689905][ T27] audit: type=1326 audit(2000000485.590:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1559.975074][T16625] loop7: detected capacity change from 0 to 256 [ 1560.011793][ T27] audit: type=1326 audit(2000000485.590:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1560.103854][ T4269] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1560.123350][ T27] audit: type=1326 audit(2000000485.590:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1560.224228][ T27] audit: type=1326 audit(2000000485.590:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1560.324209][ T27] audit: type=1326 audit(2000000485.600:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1560.374685][T16625] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc1fa704e, utbl_chksum : 0xe619d30d) [ 1560.697987][ T27] audit: type=1326 audit(2000000485.600:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1560.813731][ T27] audit: type=1326 audit(2000000485.600:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd4a98d290 code=0x7ffc0000 [ 1560.930532][ T27] audit: type=1326 audit(2000000485.600:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.6.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1560.952960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.747586][T16654] loop7: detected capacity change from 0 to 64 [ 1563.560558][T16662] loop1: detected capacity change from 0 to 64 [ 1563.654910][T15645] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1564.268839][T16670] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1565.265154][T16680] xt_connbytes: Forcing CT accounting to be enabled [ 1565.271938][T16680] Cannot find add_set index 0 as target [ 1565.892403][T16683] loop1: detected capacity change from 0 to 64 [ 1567.035879][T16696] netlink: 'syz.6.2502': attribute type 1 has an invalid length. [ 1567.044074][T16696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1567.051305][T16696] IPv6: NLM_F_CREATE should be set when creating new route [ 1567.567945][T16700] loop1: detected capacity change from 0 to 1024 [ 1567.730641][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 1567.730657][ T27] audit: type=1326 audit(2000000500.470:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1567.766638][T16704] ax25_connect(): syz.6.2505 uses autobind, please contact jreuter@yaina.de [ 1567.926613][T16700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1568.405054][ T27] audit: type=1326 audit(2000000500.510:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1568.427927][ T27] audit: type=1326 audit(2000000500.510:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1568.453778][ T27] audit: type=1326 audit(2000000500.510:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1568.476233][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.483866][ T27] audit: type=1326 audit(2000000500.520:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1568.506294][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.860430][ T27] audit: type=1326 audit(2000000500.520:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1568.883157][ T27] audit: type=1326 audit(2000000500.530:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1568.911521][ T27] audit: type=1326 audit(2000000500.540:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1568.934360][ T27] audit: type=1326 audit(2000000500.540:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1568.957888][ T27] audit: type=1326 audit(2000000500.540:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efd4a98e929 code=0x7ffc0000 [ 1570.481816][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1571.723106][T16740] loop5: detected capacity change from 0 to 512 [ 1572.004640][T16740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1572.017377][T16740] EXT4-fs: Ignoring removed i_version option [ 1572.697711][T16752] loop7: detected capacity change from 0 to 64 [ 1572.707627][T16753] siw: device registration error -23 [ 1572.848280][T16740] EXT4-fs (loop5): 1 orphan inode deleted [ 1572.886671][T16740] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1573.601133][T15325] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1573.993278][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1575.880612][T16780] loop5: detected capacity change from 0 to 128 [ 1576.024477][T16780] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1576.055592][T16780] sysv_free_block: trying to free block not in datazone [ 1576.097025][T16780] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1576.159342][T15325] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1576.368437][T16790] loop7: detected capacity change from 0 to 8192 [ 1576.460863][T16790] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1576.473953][T16790] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 1576.484078][T16790] REISERFS (device loop7): using ordered data mode [ 1576.490710][T16790] reiserfs: using flush barriers [ 1576.499223][T16790] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1576.515748][T16790] REISERFS (device loop7): checking transaction log (loop7) [ 1576.525182][T16790] REISERFS (device loop7): Using r5 hash to sort names [ 1576.532246][T16790] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1576.546594][T16790] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1577.222132][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1577.222143][ T27] audit: type=1800 audit(2000000509.960:626): pid=16800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2523" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 [ 1577.295450][T16794] ceph: No mds server is up or the cluster is laggy [ 1577.703768][ T4269] Bluetooth: hci1: command 0x0405 tx timeout [ 1578.301438][T16816] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1578.862811][T16826] loop1: detected capacity change from 0 to 512 [ 1579.085859][T16826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1579.115309][T16826] EXT4-fs: Ignoring removed i_version option [ 1579.945954][T16826] EXT4-fs (loop1): 1 orphan inode deleted [ 1579.969705][T16826] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1580.379561][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1581.738855][T16853] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 1582.088328][T16859] loop7: detected capacity change from 0 to 512 [ 1582.337033][T16864] loop1: detected capacity change from 0 to 64 [ 1582.616393][T16859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1582.690590][T16859] EXT4-fs: Ignoring removed i_version option [ 1582.803392][T16871] loop6: detected capacity change from 0 to 64 [ 1582.835576][T16873] loop5: detected capacity change from 0 to 256 [ 1582.855873][T16859] EXT4-fs (loop7): 1 orphan inode deleted [ 1582.861709][T16859] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1583.108951][T16877] loop1: detected capacity change from 0 to 256 [ 1583.465628][T16877] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc1fa704e, utbl_chksum : 0xe619d30d) [ 1583.538136][T15645] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1583.691762][T16109] EXT4-fs (loop7): unmounting filesystem. [ 1586.358715][T16899] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1587.133467][T16891] loop7: detected capacity change from 0 to 8192 [ 1587.973080][T16891] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1588.019005][T16891] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 1588.053274][T16891] REISERFS (device loop7): using ordered data mode [ 1588.120595][T16891] reiserfs: using flush barriers [ 1588.125985][T16891] REISERFS warning (device loop7): journal-1256 journal_init: unable to get memory for journal structure [ 1589.788295][T16942] loop6: detected capacity change from 0 to 64 [ 1589.916173][T15325] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1591.238683][T16956] loop1: detected capacity change from 0 to 16 [ 1591.245908][T16956] erofs: (device loop1): mounted with root inode @ nid 36. [ 1592.098379][T15377] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1597.430283][T16990] loop1: detected capacity change from 0 to 512 [ 1597.444279][T16990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1597.453029][T16990] EXT4-fs: Ignoring removed i_version option [ 1597.494605][T16990] EXT4-fs (loop1): 1 orphan inode deleted [ 1597.500533][T16990] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1597.681706][T17001] loop6: detected capacity change from 0 to 64 [ 1598.272238][T17009] loop6: detected capacity change from 0 to 256 [ 1599.280691][T17011] tipc: Started in network mode [ 1599.285783][T17011] tipc: Node identity ac14140f, cluster identity 4711 [ 1599.295646][T17011] tipc: New replicast peer: 172.30.1.8 [ 1599.301916][T17011] tipc: Enabled bearer , priority 10 [ 1599.868485][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1599.950902][T17009] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc1fa704e, utbl_chksum : 0xe619d30d) [ 1600.455181][T16646] tipc: Node number set to 2886997007 [ 1602.965790][T17037] hub 8-0:1.0: USB hub found [ 1602.972650][T17037] hub 8-0:1.0: 1 port detected [ 1604.868042][T17050] loop1: detected capacity change from 0 to 64 [ 1605.111920][T17064] loop5: detected capacity change from 0 to 512 [ 1605.172071][T17064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1605.250281][T17064] EXT4-fs: Ignoring removed i_version option [ 1606.081850][T17064] EXT4-fs (loop5): 1 orphan inode deleted [ 1606.132842][T17064] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1606.255386][T17067] loop7: detected capacity change from 0 to 1024 [ 1607.509877][T15645] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1607.574266][T17083] netlink: 'syz.6.2582': attribute type 12 has an invalid length. [ 1608.473250][ T5750] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 75 prio class 1 [ 1608.506819][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1608.718677][T17090] loop1: detected capacity change from 0 to 64 [ 1609.156535][ T4443] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1609.532766][T17100] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1609.532766][T17100] program syz.5.2584 not setting count and/or reply_len properly [ 1609.552762][ T4443] usb 7-1: Using ep0 maxpacket: 8 [ 1609.702058][ T4443] usb 7-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1609.753723][ T4443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.782356][ T4443] usb 7-1: Product: syz [ 1609.787843][ T4443] usb 7-1: Manufacturer: syz [ 1609.802855][ T4443] usb 7-1: SerialNumber: syz [ 1609.834085][ T4443] usb 7-1: config 0 descriptor?? [ 1609.862666][ T4443] usb 7-1: selecting invalid altsetting 3 [ 1609.883691][ T4443] comedi comedi0: could not set alternate setting 3 in high speed [ 1609.909774][ T4443] usbdux 7-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1609.949815][ T4443] usbdux: probe of 7-1:0.0 failed with error -22 [ 1610.203013][T17113] loop1: detected capacity change from 0 to 512 [ 1610.238778][T17113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1610.294070][T17113] EXT4-fs: Ignoring removed i_version option [ 1611.132927][T17113] EXT4-fs (loop1): 1 orphan inode deleted [ 1611.152425][T17113] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1611.278590][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1611.791583][T17134] loop7: detected capacity change from 0 to 16 [ 1611.804190][T17134] erofs: (device loop7): mounted with root inode @ nid 36. [ 1611.835212][T15325] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1611.966341][T17136] loop1: detected capacity change from 0 to 64 [ 1612.149395][ T5648] usb 7-1: USB disconnect, device number 2 [ 1614.735079][T17153] loop5: detected capacity change from 0 to 16 [ 1614.828043][T17153] erofs: (device loop5): mounted with root inode @ nid 36. [ 1615.688237][T17158] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2597'. [ 1615.984296][T17167] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1616.723213][T17174] loop1: detected capacity change from 0 to 128 [ 1616.993432][T17174] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1617.010498][T17174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1617.228027][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.239400][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.341567][ T27] audit: type=1326 audit(2000000550.080:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17170 comm="syz.7.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefcd8e929 code=0x7ffc0000 [ 1617.377547][T17176] ax25_connect(): syz.7.2601 uses autobind, please contact jreuter@yaina.de [ 1617.698477][ T27] audit: type=1326 audit(2000000550.110:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17170 comm="syz.7.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fdefcd8e929 code=0x7ffc0000 [ 1618.205863][ T27] audit: type=1326 audit(2000000550.110:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17170 comm="syz.7.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefcd8e929 code=0x7ffc0000 [ 1618.888095][ T27] audit: type=1326 audit(2000000550.120:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17170 comm="syz.7.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdefcd8e929 code=0x7ffc0000 [ 1618.971565][T17186] loop1: detected capacity change from 0 to 512 [ 1619.003754][ T27] audit: type=1326 audit(2000000550.130:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17170 comm="syz.7.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefcd8e929 code=0x7ffc0000 [ 1619.036946][T17186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1619.084462][T17186] EXT4-fs: Ignoring removed i_version option [ 1619.115758][ T27] audit: type=1326 audit(2000000550.130:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17170 comm="syz.7.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fdefcd8e929 code=0x7ffc0000 [ 1619.145770][T17186] EXT4-fs (loop1): 1 orphan inode deleted [ 1619.151565][T17186] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1619.476290][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1619.508397][ T27] audit: type=1326 audit(2000000550.140:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17170 comm="syz.7.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefcd8e929 code=0x7ffc0000 [ 1619.629832][ T27] audit: type=1326 audit(2000000550.140:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17170 comm="syz.7.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fdefcd8e929 code=0x7ffc0000 [ 1619.764372][ T27] audit: type=1326 audit(2000000550.140:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17170 comm="syz.7.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefcd8e929 code=0x7ffc0000 [ 1619.787985][ T27] audit: type=1326 audit(2000000550.150:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17170 comm="syz.7.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdefcd8e929 code=0x7ffc0000 [ 1619.810551][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2596'. [ 1620.937928][T17199] loop5: detected capacity change from 0 to 16 [ 1620.967040][T17199] erofs: (device loop5): mounted with root inode @ nid 36. [ 1622.564574][T17211] loop6: detected capacity change from 0 to 64 [ 1622.663791][T17212] loop5: detected capacity change from 0 to 16 [ 1622.720667][T17212] erofs: (device loop5): mounted with root inode @ nid 36. [ 1622.738917][T15645] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1623.081114][T17218] loop7: detected capacity change from 0 to 16 [ 1624.044388][T17218] erofs: (device loop7): mounted with root inode @ nid 36. [ 1624.408066][T17224] loop6: detected capacity change from 0 to 512 [ 1624.532722][T17224] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1625.372056][T17224] EXT4-fs (loop6): 1 truncate cleaned up [ 1625.386475][T17224] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1625.814942][T17240] loop5: detected capacity change from 0 to 128 [ 1626.993242][T15325] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1627.386772][T17237] loop7: detected capacity change from 0 to 16 [ 1627.396963][T17237] erofs: (device loop7): mounted with root inode @ nid 36. [ 1627.859980][T15325] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1627.929373][T14970] EXT4-fs (loop6): unmounting filesystem. [ 1630.013637][T17274] loop7: detected capacity change from 0 to 16 [ 1630.900705][T17274] erofs: (device loop7): mounted with root inode @ nid 36. [ 1631.541311][T17268] loop5: detected capacity change from 0 to 512 [ 1631.711158][T15645] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1631.765124][T17268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1631.771964][T17268] EXT4-fs: Ignoring removed i_version option [ 1631.846846][T17282] netlink: 'syz.6.2624': attribute type 12 has an invalid length. [ 1631.958274][T17268] EXT4-fs (loop5): 1 orphan inode deleted [ 1631.979763][T17268] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1632.172061][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2624'. [ 1633.116656][T17296] loop1: detected capacity change from 0 to 512 [ 1633.129201][T17296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1633.220141][T17296] EXT4-fs: Ignoring removed i_version option [ 1634.120157][T17291] loop7: detected capacity change from 0 to 64 [ 1634.184919][T15325] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1634.189783][T17296] EXT4-fs (loop1): 1 orphan inode deleted [ 1634.235048][T17296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1634.264111][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1634.322100][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1636.261332][T17320] loop5: detected capacity change from 0 to 16 [ 1636.779199][T17312] loop1: detected capacity change from 0 to 128 [ 1636.823524][T17320] erofs: (device loop5): mounted with root inode @ nid 36. [ 1636.899414][T15645] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1636.912053][T15325] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1637.392133][T17324] loop7: detected capacity change from 0 to 16 [ 1637.492624][T17324] erofs: (device loop7): mounted with root inode @ nid 36. [ 1638.115946][T15377] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1638.535818][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1638.535834][ T27] audit: type=1326 audit(2000000571.280:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.5.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d058e929 code=0x7ffc0000 [ 1638.573002][T17328] ax25_connect(): syz.5.2634 uses autobind, please contact jreuter@yaina.de [ 1639.405540][ T27] audit: type=1326 audit(2000000571.310:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.5.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d058e929 code=0x7ffc0000 [ 1639.428643][ T27] audit: type=1326 audit(2000000571.310:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.5.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f25d058e929 code=0x7ffc0000 [ 1639.472218][ T27] audit: type=1326 audit(2000000571.310:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.5.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d058e929 code=0x7ffc0000 [ 1641.848666][T17334] xt_recent: hitcount (4294967294) is larger than allowed maximum (255) [ 1641.866724][T17334] loop1: detected capacity change from 0 to 512 [ 1641.896209][T17334] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1641.904563][T17334] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 1641.983206][T17334] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1641.992783][T17334] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1642.000292][T17334] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 4: comm syz.1.2636: lblock 0 mapped to illegal pblock 4 (length 1) [ 1642.026756][T17334] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1642.036488][T17334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1642.168273][ T27] audit: type=1326 audit(2000000571.310:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.5.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d058e929 code=0x7ffc0000 [ 1642.361576][ T27] audit: type=1326 audit(2000000571.310:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.5.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f25d058e929 code=0x7ffc0000 [ 1642.469488][T17344] loop7: detected capacity change from 0 to 16 [ 1642.476633][T17344] erofs: (device loop7): mounted with root inode @ nid 36. [ 1642.694001][ T27] audit: type=1326 audit(2000000571.320:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.5.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d058e929 code=0x7ffc0000 [ 1642.717350][ T27] audit: type=1326 audit(2000000571.320:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.5.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d058e929 code=0x7ffc0000 [ 1642.756471][ T27] audit: type=1326 audit(2000000571.330:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.5.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f25d058e929 code=0x7ffc0000 [ 1642.845787][ T27] audit: type=1326 audit(2000000571.340:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.5.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d058e929 code=0x7ffc0000 [ 1643.222164][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1643.338369][T17350] loop5: detected capacity change from 0 to 512 [ 1643.397072][T17350] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1643.448123][T17350] EXT4-fs: Ignoring removed i_version option [ 1643.555905][T17350] EXT4-fs (loop5): 1 orphan inode deleted [ 1643.574381][T17350] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1643.717124][T17357] lo speed is unknown, defaulting to 1000 [ 1643.743643][T17357] lo speed is unknown, defaulting to 1000 [ 1643.755305][T17357] lo speed is unknown, defaulting to 1000 [ 1644.207627][T17357] infiniband sz1: set active [ 1644.212426][T17357] infiniband sz1: added lo [ 1644.250942][ T22] lo speed is unknown, defaulting to 1000 [ 1644.446566][T17356] loop1: detected capacity change from 0 to 512 [ 1644.551330][T17356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1644.609497][T17356] EXT4-fs: Ignoring removed i_version option [ 1644.643449][T17357] RDS/IB: sz1: added [ 1644.647591][T17357] smc: adding ib device sz1 with port count 1 [ 1644.653947][T17357] smc: ib device sz1 port 1 has pnetid [ 1644.660776][T17357] lo speed is unknown, defaulting to 1000 [ 1644.700820][T17356] EXT4-fs (loop1): 1 orphan inode deleted [ 1644.739036][T15696] lo speed is unknown, defaulting to 1000 [ 1644.743881][T17356] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1644.788171][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1644.800804][T17357] lo speed is unknown, defaulting to 1000 [ 1644.984201][T17357] lo speed is unknown, defaulting to 1000 [ 1645.025737][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 1645.114870][T17364] loop5: detected capacity change from 0 to 128 [ 1645.335259][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1645.347524][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1645.372931][T15293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1645.394151][T15293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1645.405064][T15293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1645.608551][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2642'. [ 1645.635789][T15293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1646.933776][T12276] bridge0: port 3(syz_tun) entered disabled state [ 1647.120495][T12276] device syz_tun left promiscuous mode [ 1647.130653][T12276] bridge0: port 3(syz_tun) entered disabled state [ 1647.325159][T17357] lo speed is unknown, defaulting to 1000 [ 1648.308856][ T2957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.319819][T17389] loop7: detected capacity change from 0 to 512 [ 1648.331747][T17357] lo speed is unknown, defaulting to 1000 [ 1648.659082][T15293] Bluetooth: hci0: command 0x0409 tx timeout [ 1648.962440][T17383] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2646'. [ 1648.981551][T17365] lo speed is unknown, defaulting to 1000 [ 1648.984187][T17357] lo speed is unknown, defaulting to 1000 [ 1649.047519][T17389] EXT4-fs error (device loop7): __ext4_iget:5076: inode #14: block 1886221359: comm syz.7.2649: invalid block [ 1649.102146][T17389] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2649: couldn't read orphan inode 14 (err -117) [ 1649.190429][T17389] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1649.225932][ T2957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.253740][T17389] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1649.274661][T17357] lo speed is unknown, defaulting to 1000 [ 1649.506800][T17365] lo speed is unknown, defaulting to 1000 [ 1651.906560][T17403] __quota_error: 5 callbacks suppressed [ 1651.906579][T17403] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1651.922926][T17403] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 1651.932435][T17403] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.2649: Failed to acquire dquot type 0 [ 1651.932476][T17402] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1651.943833][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 1651.954075][T17402] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 1651.969603][T17402] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.2649: Failed to acquire dquot type 0 [ 1652.075035][T16109] EXT4-fs (loop7): unmounting filesystem. [ 1652.224530][ T2957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.232306][T17407] loop6: detected capacity change from 0 to 512 [ 1652.243723][T17407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1652.250593][T17407] EXT4-fs: Ignoring removed i_version option [ 1652.265262][T17407] EXT4-fs (loop6): 1 orphan inode deleted [ 1652.283214][T17407] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1652.322996][T14970] EXT4-fs (loop6): unmounting filesystem. [ 1652.493044][ T2957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.997910][T17413] loop7: detected capacity change from 0 to 512 [ 1653.084151][T17420] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1654.056674][T17420] xt_CT: No such helper "syz1" [ 1654.143522][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 1654.304769][T17413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1654.436405][T17413] EXT4-fs: Ignoring removed i_version option [ 1654.506682][T17413] EXT4-fs (loop7): 1 orphan inode deleted [ 1654.512521][T17413] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1654.955085][T17365] chnl_net:caif_netlink_parms(): no params data found [ 1655.649960][T17435] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1656.776375][T17436] loop6: detected capacity change from 0 to 128 [ 1656.796005][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 1656.835614][T17436] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 1657.365424][T16109] EXT4-fs (loop7): unmounting filesystem. [ 1658.956355][T17444] lo speed is unknown, defaulting to 1000 [ 1659.080079][T17444] lo speed is unknown, defaulting to 1000 [ 1659.088487][T17444] lo speed is unknown, defaulting to 1000 [ 1659.103835][T17444] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 1659.123762][ T27] audit: type=1326 audit(2000000591.780:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.7.2661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdefcd8e929 code=0x0 [ 1659.147612][T17444] lo speed is unknown, defaulting to 1000 [ 1659.154462][T17444] lo speed is unknown, defaulting to 1000 [ 1659.181593][T17455] loop7: detected capacity change from 0 to 256 [ 1659.197234][T17444] lo speed is unknown, defaulting to 1000 [ 1659.197920][T17365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.579977][T17365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.724905][T17365] device bridge_slave_0 entered promiscuous mode [ 1659.954740][T17444] lo speed is unknown, defaulting to 1000 [ 1659.961707][T17444] lo speed is unknown, defaulting to 1000 [ 1659.966407][T17365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.987392][T17365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.044192][T17365] device bridge_slave_1 entered promiscuous mode [ 1660.055558][T17444] lo speed is unknown, defaulting to 1000 [ 1660.055661][ T2957] tipc: Disabling bearer [ 1660.072356][ T2957] tipc: Disabling bearer [ 1660.098196][T17444] lo speed is unknown, defaulting to 1000 [ 1660.191725][ T2957] tipc: Left network mode [ 1660.254062][T17452] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1660.383516][T17365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.520270][T17365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1660.705114][T17465] loop6: detected capacity change from 0 to 32768 [ 1660.723897][T17465] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2665 (17465) [ 1660.740771][T17465] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1660.751193][T17465] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1660.760010][T17465] BTRFS info (device loop6): using free space tree [ 1660.874087][T17365] team0: Port device team_slave_0 added [ 1661.391546][T17465] BTRFS info (device loop6): enabling ssd optimizations [ 1661.483721][T17488] input: syz0 as /devices/virtual/input/input15 [ 1661.743862][ T27] audit: type=1800 audit(2000000594.430:655): pid=17493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2665" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1661.910434][T17365] team0: Port device team_slave_1 added [ 1663.678670][T15293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1663.690293][T15293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1663.702049][T15293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1663.715756][T15293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1663.726241][T15293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1663.735507][T15293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1663.775293][T17365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.782359][T17365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.856062][T17365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.002839][T17365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.020759][T17365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.187282][T17365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.745850][T17518] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1665.118610][T17508] lo speed is unknown, defaulting to 1000 [ 1665.288717][T17365] device hsr_slave_0 entered promiscuous mode [ 1665.304597][T17523] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2671'. [ 1665.350350][T17365] device hsr_slave_1 entered promiscuous mode [ 1665.394568][T17365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1665.438936][T17365] Cannot create hsr debugfs directory [ 1665.473778][T17523] tipc: Enabling of bearer rejected, failed to enable media [ 1665.782295][T17508] lo speed is unknown, defaulting to 1000 [ 1665.784790][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 1665.864916][T17531] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1666.022115][T17508] lo speed is unknown, defaulting to 1000 [ 1666.754253][T14970] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1667.132842][T17543] loop5: detected capacity change from 0 to 256 [ 1667.232022][T17543] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc1fa704e, utbl_chksum : 0xe619d30d) [ 1667.873705][T15293] Bluetooth: hci4: command 0x041b tx timeout [ 1667.930209][T17508] lo speed is unknown, defaulting to 1000 [ 1668.953202][T17533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1669.020598][ T2957] IPVS: stopping master sync thread 16853 ... [ 1669.114340][T17533] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1669.244821][T17533] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1669.341988][T17563] loop6: detected capacity change from 0 to 256 [ 1669.382329][T17563] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc1fa704e, utbl_chksum : 0xe619d30d) [ 1670.023824][T15293] Bluetooth: hci4: command 0x040f tx timeout [ 1670.073891][T17533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1670.094713][T17533] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1670.116317][T15293] Bluetooth: hci2: command 0x0c1a tx timeout [ 1670.127320][T17533] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1670.257804][T17533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1670.383206][T17533] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1670.392797][T17533] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1670.402667][T17533] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1670.410195][T17533] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1670.416532][T17533] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1670.572472][T17572] input: syz0 as /devices/virtual/input/input16 [ 1671.388286][T17572] loop6: detected capacity change from 0 to 32768 [ 1671.399055][T17572] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2677 (17572) [ 1671.426560][T17572] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1671.436883][T17572] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1671.445664][T17572] BTRFS info (device loop6): using free space tree [ 1671.679218][T17365] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1671.791893][T17586] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2678'. [ 1672.080830][T17585] loop7: detected capacity change from 0 to 512 [ 1672.087998][T17585] EXT4-fs: Ignoring removed bh option [ 1672.103687][ T4264] Bluetooth: hci1: command 0x0c1a tx timeout [ 1672.183703][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 1672.262038][T17585] EXT4-fs error (device loop7): __ext4_iget:5076: inode #15: block 1803188595: comm syz.7.2679: invalid block [ 1672.273973][ T4264] Bluetooth: hci0: command 0x0c1a tx timeout [ 1672.280702][T17585] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2679: couldn't read orphan inode 15 (err -117) [ 1672.293236][T17585] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1672.312476][T17585] EXT4-fs (loop7): unmounting filesystem. [ 1672.353384][T17572] BTRFS info (device loop6): enabling ssd optimizations [ 1672.434925][ T4264] Bluetooth: hci4: command 0x0c1a tx timeout [ 1672.674639][T17365] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1672.688230][T14970] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1672.763757][T17365] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1673.070158][T17365] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1673.785608][T17617] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1674.428218][T17365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.533918][T17508] chnl_net:caif_netlink_parms(): no params data found [ 1674.657938][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 1674.664563][T15293] Bluetooth: hci0: command 0x0406 tx timeout [ 1674.670610][T15293] Bluetooth: hci4: command 0x0406 tx timeout [ 1674.941908][T17625] loop6: detected capacity change from 0 to 1024 [ 1675.237467][ T2957] device hsr_slave_0 left promiscuous mode [ 1675.347901][ T2957] device hsr_slave_1 left promiscuous mode [ 1675.447066][ T2957] batman_adv: batadv0: Interface deactivated: dummy0 [ 1675.539110][ T2957] batman_adv: batadv0: Removing interface: dummy0 [ 1675.647274][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1675.741726][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.828371][ T2957] device bridge_slave_1 left promiscuous mode [ 1675.850674][T17628] loop7: detected capacity change from 0 to 16 [ 1675.897120][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.951544][T17628] erofs: (device loop7): mounted with root inode @ nid 36. [ 1675.992017][ T2957] device bridge_slave_0 left promiscuous mode [ 1676.022136][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.209570][ T2957] device veth1_macvtap left promiscuous mode [ 1676.233733][ T2957] device veth0_macvtap left promiscuous mode [ 1676.264388][ T2957] device veth1_vlan left promiscuous mode [ 1676.270289][ T2957] device veth0_vlan left promiscuous mode [ 1676.526303][T17636] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2685'. [ 1676.605352][T17637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1677.333748][T17633] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2684'. [ 1677.380846][T17637] xt_CT: No such helper "syz1" [ 1677.589438][ T2957] bond1 (unregistering): Released all slaves [ 1678.677179][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.685039][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.288042][T17648] loop7: detected capacity change from 0 to 2048 [ 1679.328120][T17648] UDF-fs: bad mount option "lastblock=0000004­½OÌü‹0000L000000005" or missing value [ 1679.867395][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1680.632470][ T2957] team0 (unregistering): Port device team_slave_1 removed [ 1680.738268][ T2957] team0 (unregistering): Port device team_slave_0 removed [ 1680.908278][ T2957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.064371][T17657] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1681.352736][ T2957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.878961][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1681.883670][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1681.981881][T17659] loop7: detected capacity change from 0 to 16 [ 1682.000439][T17659] erofs: (device loop7): mounted with root inode @ nid 36. [ 1682.106579][T17661] loop7: detected capacity change from 0 to 512 [ 1682.134582][T17661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1682.141350][T17661] EXT4-fs: Ignoring removed i_version option [ 1682.157556][ T2957] team0 (unregistering): Port device batadv0 removed [ 1682.234503][T17661] EXT4-fs (loop7): 1 orphan inode deleted [ 1682.240331][T17661] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1682.605706][T16109] EXT4-fs (loop7): unmounting filesystem. [ 1682.949449][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1683.136368][ T2957] bond0 (unregistering): Released all slaves [ 1683.154549][T17669] loop7: detected capacity change from 0 to 128 [ 1683.184042][T17669] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 1683.700804][T17365] 8021q: adding VLAN 0 to HW filter on device team0 [ 1683.714122][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1683.721951][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1683.785147][T17634] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2685'. [ 1683.794854][T17634] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1683.812781][ T26] lo speed is unknown, defaulting to 1000 [ 1684.025662][ T26] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1684.758937][T17681] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1684.939489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1684.952854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1684.968465][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.975656][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1685.065819][T12680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1685.184867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1685.205258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1685.226264][T17694] ax25_connect(): syz.6.2696 uses autobind, please contact jreuter@yaina.de [ 1686.152462][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1686.164594][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1686.173662][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.180843][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.188706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1686.198248][T17696] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1686.444444][T17706] loop5: detected capacity change from 0 to 16 [ 1687.293295][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1687.305509][ T4301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1687.325401][T17706] erofs: (device loop5): mounted with root inode @ nid 36. [ 1687.385865][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1687.627953][T17709] loop6: detected capacity change from 0 to 16 [ 1687.637065][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1687.703859][T17709] erofs: (device loop6): mounted with root inode @ nid 36. [ 1687.734096][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1687.743090][T17711] loop5: detected capacity change from 0 to 512 [ 1687.774638][T17711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1687.795931][T17508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.813643][T17508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.834756][T17508] device bridge_slave_0 entered promiscuous mode [ 1687.855262][T17508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.862437][T17508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.897362][T17711] EXT4-fs: Ignoring removed i_version option [ 1687.949529][T17508] device bridge_slave_1 entered promiscuous mode [ 1687.979228][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1687.995622][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1688.029333][T17711] EXT4-fs (loop5): 1 orphan inode deleted [ 1688.087445][T17718] loop7: detected capacity change from 0 to 256 [ 1688.127902][T17718] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc1fa704e, utbl_chksum : 0xe619d30d) [ 1688.170179][T17711] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1688.419093][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1688.772715][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1688.841216][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1689.335017][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1689.466662][T17280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1689.494903][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1689.508106][T17280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1689.669367][T17729] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2704'. [ 1689.785464][ T5648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1689.872905][T17365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1689.920704][T17508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.937319][T17508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.453022][T17508] team0: Port device team_slave_0 added [ 1690.532253][T17508] team0: Port device team_slave_1 added [ 1690.564849][T17726] ALSA: mixer_oss: invalid OSS volume '`d#ètü&{W¯k¬ïsÓd:»ýEB|£åÃÓ' [ 1690.632168][T17508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1690.673801][T17508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1690.783637][T17508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1690.858209][T17508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.908634][T17508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1690.924071][ T4301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1690.936922][ T4334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1691.095332][T17746] loop7: detected capacity change from 0 to 256 [ 1691.149272][T17746] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc1fa704e, utbl_chksum : 0xe619d30d) [ 1691.536011][T17508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1691.762439][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1691.805472][T17751] loop5: detected capacity change from 0 to 16 [ 1691.854557][T17751] erofs: (device loop5): mounted with root inode @ nid 36. [ 1691.944993][ T5648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1692.018644][T17508] device hsr_slave_0 entered promiscuous mode [ 1692.038547][T17508] device hsr_slave_1 entered promiscuous mode [ 1692.050431][T17508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1692.083739][T17508] Cannot create hsr debugfs directory [ 1692.179712][T17757] loop7: detected capacity change from 0 to 164 [ 1692.346286][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1692.383913][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1692.465307][T17365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1693.281974][ T4301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1693.828239][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2709'. [ 1693.851892][T17767] netlink: 'syz.7.2709': attribute type 5 has an invalid length. [ 1693.874082][T17767] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2709'. [ 1693.953717][T17767] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1693.962814][T17767] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1693.975329][T17767] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1693.999862][T17767] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1694.017847][T17767] device geneve2 entered promiscuous mode [ 1694.348590][T17508] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1694.424506][ T4301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1694.664179][ T4301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1694.805713][T17508] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1694.870851][T17508] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1694.905029][T17508] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1695.225978][T17508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.271480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1695.287568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1695.325824][T17508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1695.351990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1695.369558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1695.458155][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.465385][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1695.473181][T12680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1695.485036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1695.578254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1695.589106][T17791] loop6: detected capacity change from 0 to 16 [ 1695.596305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1695.625941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1695.643481][T17791] erofs: (device loop6): mounted with root inode @ nid 36. [ 1695.722010][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1695.764236][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.771432][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1695.880204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1695.890620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1695.934734][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1696.023063][T17795] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1696.035231][T17795] loop5: detected capacity change from 0 to 128 [ 1696.103751][T15293] Bluetooth: hci1: command 0x0406 tx timeout [ 1696.977452][ T5648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1697.003711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1697.134731][T17795] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1697.143358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1697.144054][T17795] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1697.175218][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1697.277347][T17804] loop6: detected capacity change from 0 to 256 [ 1697.548730][T17794] EXT4-fs warning (device loop5): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 1698.140198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1698.144857][ T5648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1698.166410][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1698.175553][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1698.175967][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1698.184129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1698.201008][T17804] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc1fa704e, utbl_chksum : 0xe619d30d) [ 1698.236391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1698.469876][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1698.695390][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1698.987511][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1699.004510][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1699.019147][T17365] device veth0_vlan entered promiscuous mode [ 1699.054254][T17812] loop6: detected capacity change from 0 to 128 [ 1699.092567][T17365] device veth1_vlan entered promiscuous mode [ 1699.199452][ T5648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1699.217080][T15645] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1699.543236][T17816] loop5: detected capacity change from 0 to 256 [ 1700.086388][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2716'. [ 1700.148870][T17816] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc1fa704e, utbl_chksum : 0xe619d30d) [ 1700.925405][T17365] device veth0_macvtap entered promiscuous mode [ 1700.936105][T12680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1700.991424][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1701.017216][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1701.064514][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1701.191815][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1701.205624][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1701.219194][T17365] device veth1_macvtap entered promiscuous mode [ 1701.268561][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1701.788272][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.920296][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.083981][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1702.225858][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1702.236715][ T26] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1702.288523][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.459643][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1702.519478][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.917354][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.313849][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1703.368182][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.434577][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.453782][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.563414][T17843] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2721'. [ 1703.574075][T17365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1703.634480][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1703.649388][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1703.671416][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1703.759752][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.819414][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1703.894116][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.944863][T15293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1703.954366][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1703.965454][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.970137][T15293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1703.976327][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1703.988481][T17852] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2722'. [ 1703.993701][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.003073][T15293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1704.012682][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.030628][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.043239][T17365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.073138][T17849] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2722'. [ 1704.089890][T15293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1704.104058][T15293] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1704.111981][T15293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1704.158048][T17849] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1704.209791][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1704.244560][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1704.359224][ T5648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1704.371300][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1704.379047][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1704.397740][T17508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.607032][T17859] loop5: detected capacity change from 0 to 8 [ 1704.685303][T17859] SQUASHFS error: xz decompression failed, data probably corrupt [ 1704.694122][T17859] SQUASHFS error: Failed to read block 0x108: -5 [ 1704.700715][T17859] SQUASHFS error: Unable to read metadata cache entry [106] [ 1704.708236][T17859] SQUASHFS error: Unable to read inode 0x11f [ 1705.252740][T17850] lo speed is unknown, defaulting to 1000 [ 1705.287213][T15645] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1705.359403][T17862] loop6: detected capacity change from 0 to 128 [ 1705.404784][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1706.355785][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 1706.731435][ T4301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1707.067648][T17850] lo speed is unknown, defaulting to 1000 [ 1708.088637][T12680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1708.424170][T15293] Bluetooth: hci5: command 0x041b tx timeout [ 1709.100980][T17894] xt_socket: unknown flags 0x4c [ 1709.116497][T17894] xt_l2tp: v2 sid > 0xffff: 262144 [ 1709.143990][ T26] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1709.167028][T17850] lo speed is unknown, defaulting to 1000 [ 1709.384597][T12680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1709.583891][ T5648] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1710.096616][T17622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1710.189862][ T4301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1710.503949][T15293] Bluetooth: hci5: command 0x040f tx timeout [ 1710.664172][T17622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1711.103702][ T5648] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.138960][ T5648] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1711.224055][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1711.248785][ T9762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1711.258905][ T9762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1711.259598][ T5648] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1711.343944][ T5648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.361856][T17508] device veth0_vlan entered promiscuous mode [ 1711.397513][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1711.417271][ T5648] usb 7-1: Product: syz [ 1711.427042][ T5648] usb 7-1: Manufacturer: syz [ 1711.458380][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1711.460671][ T5648] usb 7-1: SerialNumber: syz [ 1711.511771][T17508] device veth1_vlan entered promiscuous mode [ 1711.565018][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1711.617671][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1711.702887][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1711.731116][T17622] usb 7-1: USB disconnect, device number 3 [ 1712.266065][T12680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1712.583962][T15293] Bluetooth: hci5: command 0x0419 tx timeout [ 1712.890152][ T9768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1713.218448][T17928] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1713.305196][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1714.025422][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1714.041771][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1714.427410][T17936] loop6: detected capacity change from 0 to 32768 [ 1714.434929][T17936] XFS: ikeep mount option is deprecated. [ 1714.493212][T17938] loop7: detected capacity change from 0 to 16 [ 1714.533007][T17938] erofs: (device loop7): mounted with root inode @ nid 36. [ 1715.034390][T17936] XFS (loop6): Mounting V5 Filesystem [ 1715.074670][ T5648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1715.085831][T17508] device veth0_macvtap entered promiscuous mode [ 1715.165800][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1715.183783][T17936] XFS (loop6): Ending clean mount [ 1715.196038][T17936] XFS (loop6): Quotacheck needed: Please wait. [ 1715.265477][T17508] device veth1_macvtap entered promiscuous mode [ 1715.306073][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.333677][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.414563][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.433998][T17936] XFS (loop6): Quotacheck: Done. [ 1715.761940][ T27] audit: type=1326 audit(2000000648.495:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.7.2737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdefcd8e929 code=0x0 [ 1716.176616][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1716.378925][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.425075][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1716.796626][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.807445][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.817472][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.828299][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.838439][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.849118][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.859242][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.871238][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.181441][T17508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1717.194771][T17850] chnl_net:caif_netlink_parms(): no params data found [ 1717.326567][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1717.352648][ T4301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1717.514924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1717.721150][T14970] XFS (loop6): Unmounting Filesystem [ 1719.486277][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.497355][ T5648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1719.567560][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.608877][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.705074][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.743706][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.779191][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.923689][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.007628][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.023605][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1723.167321][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1723.213197][T17999] loop5: detected capacity change from 0 to 131072 [ 1723.226277][T17999] F2FS-fs (loop5): Allow to mount readonly mode only [ 1723.244852][T12108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1723.255216][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.286139][T17508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1723.327012][T17508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.347181][T17508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1723.513766][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1723.633764][T18001] I/O error, dev loop5, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1724.002566][ T9762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1724.062998][ T9762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1724.221306][T18009] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1725.570532][T18014] loop5: detected capacity change from 0 to 16 [ 1725.676692][T18020] loop7: detected capacity change from 0 to 16 [ 1725.859140][T18014] erofs: (device loop5): mounted with root inode @ nid 36. [ 1725.941073][ T26] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1726.985853][ T26] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1727.446932][T18035] futex_wake_op: syz.5.2747 tries to shift op by 144; fix this program [ 1727.746867][T18035] loop5: detected capacity change from 0 to 128 [ 1728.271594][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1728.286582][T18035] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1728.344613][T18035] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1728.354500][T18035] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1729.273920][T17622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1729.314274][ T4443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1729.323974][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1729.493856][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1729.517434][T12769] EXT4-fs (loop5): unmounting filesystem. [ 1729.530162][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1729.538333][ T4269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1729.547268][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1729.554794][ T4269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1730.518794][T12680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1730.672561][T18061] loop6: detected capacity change from 0 to 512 [ 1730.888358][T18061] EXT4-fs (loop6): 1 orphan inode deleted [ 1730.894309][T18061] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1730.903755][T18061] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1730.908305][ T9764] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1731.018335][ T9764] EXT4-fs error (device loop6): ext4_release_dquot:6850: comm kworker/u4:2: Failed to release dquot type 1 [ 1731.134107][T17850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.141275][T17850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.185714][T17850] device bridge_slave_0 entered promiscuous mode [ 1731.202165][ T5648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1731.250048][T18041] lo speed is unknown, defaulting to 1000 [ 1731.577114][ T5648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1731.711152][T14970] EXT4-fs (loop6): unmounting filesystem. [ 1731.809667][T17850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.823716][T17850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.951772][T17850] device bridge_slave_1 entered promiscuous mode [ 1732.059180][T18076] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1732.968765][T15293] Bluetooth: hci0: command 0x0409 tx timeout [ 1732.971002][T12680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1732.988346][T17622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1733.155080][T18081] ================================================================== [ 1733.163206][T18081] BUG: KASAN: use-after-free in rose_get_neigh+0x17e/0x550 [ 1733.170447][T18081] Read of size 1 at addr ffff88807c131830 by task syz.5.2750/18081 [ 1733.178361][T18081] [ 1733.180704][T18081] CPU: 0 PID: 18081 Comm: syz.5.2750 Not tainted 6.1.141-syzkaller #0 [ 1733.188876][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1733.198947][T18081] Call Trace: [ 1733.202249][T18081] [ 1733.205199][T18081] dump_stack_lvl+0x168/0x22e [ 1733.210011][T18081] ? __lock_acquire+0x7c50/0x7c50 [ 1733.215070][T18081] ? show_regs_print_info+0x12/0x12 [ 1733.220312][T18081] ? load_image+0x3b0/0x3b0 [ 1733.224842][T18081] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1733.230336][T18081] ? __virt_addr_valid+0x188/0x540 [ 1733.235662][T18081] ? __virt_addr_valid+0x465/0x540 [ 1733.240802][T18081] ? rose_get_neigh+0x17e/0x550 [ 1733.245681][T18081] print_report+0xa8/0x220 [ 1733.250127][T18081] kasan_report+0x10b/0x140 [ 1733.254679][T18081] ? rose_get_neigh+0x17e/0x550 [ 1733.259559][T18081] rose_get_neigh+0x17e/0x550 [ 1733.264265][T18081] rose_connect+0x412/0x1380 [ 1733.268879][T18081] ? aa_sk_perm+0x7e5/0x920 [ 1733.273414][T18081] ? rose_bind+0xa90/0xa90 [ 1733.277856][T18081] ? aa_af_perm+0x1c0/0x2b0 [ 1733.282387][T18081] ? tomoyo_socket_connect_permission+0x195/0x280 [ 1733.289007][T18081] ? __might_fault+0xa6/0x120 [ 1733.293717][T18081] ? bpf_lsm_socket_connect+0x5/0x10 [ 1733.299035][T18081] ? security_socket_connect+0x7c/0xa0 [ 1733.304531][T18081] ? rose_bind+0xa90/0xa90 [ 1733.308982][T18081] __sys_connect+0x389/0x410 [ 1733.313688][T18081] ? __sys_connect_file+0x170/0x170 [ 1733.318931][T18081] __x64_sys_connect+0x76/0x80 [ 1733.323736][T18081] do_syscall_64+0x4c/0xa0 [ 1733.328199][T18081] ? clear_bhb_loop+0x60/0xb0 [ 1733.332897][T18081] ? clear_bhb_loop+0x60/0xb0 [ 1733.337609][T18081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1733.343543][T18081] RIP: 0033:0x7f25d058e929 [ 1733.347983][T18081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1733.368051][T18081] RSP: 002b:00007f25d14a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1733.376507][T18081] RAX: ffffffffffffffda RBX: 00007f25d07b6160 RCX: 00007f25d058e929 [ 1733.384508][T18081] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 1733.392505][T18081] RBP: 00007f25d0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1733.400498][T18081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1733.408489][T18081] R13: 0000000000000001 R14: 00007f25d07b6160 R15: 00007ffcedf3aaa8 [ 1733.416496][T18081] [ 1733.419531][T18081] [ 1733.421872][T18081] Allocated by task 5648: [ 1733.426301][T18081] kasan_set_track+0x4b/0x70 [ 1733.430922][T18081] __kasan_kmalloc+0x8e/0xa0 [ 1733.435544][T18081] __kmalloc_node_track_caller+0xae/0x230 [ 1733.441293][T18081] __alloc_skb+0x22a/0x7e0 [ 1733.445735][T18081] ndisc_alloc_skb+0xa6/0x450 [ 1733.450437][T18081] ndisc_ns_create+0x1ce/0x620 [ 1733.455228][T18081] ndisc_send_ns+0xab/0x150 [ 1733.459754][T18081] addrconf_dad_work+0xa15/0x14d0 [ 1733.464798][T18081] process_one_work+0x898/0x1160 [ 1733.469791][T18081] worker_thread+0xaa2/0x1250 [ 1733.474495][T18081] kthread+0x29d/0x330 [ 1733.478612][T18081] ret_from_fork+0x1f/0x30 [ 1733.483053][T18081] [ 1733.485400][T18081] Last potentially related work creation: [ 1733.491131][T18081] kasan_save_stack+0x3a/0x60 [ 1733.495933][T18081] __kasan_record_aux_stack+0xb2/0xc0 [ 1733.501326][T18081] kvfree_call_rcu+0x108/0x870 [ 1733.506115][T18081] drop_sysctl_table+0x2fa/0x430 [ 1733.511102][T18081] drop_sysctl_table+0x2e9/0x430 [ 1733.516083][T18081] unregister_sysctl_table+0x85/0x130 [ 1733.521498][T18081] inetdev_event+0x6db/0x1410 [ 1733.526208][T18081] raw_notifier_call_chain+0xcb/0x160 [ 1733.531597][T18081] unregister_netdevice_many+0xfdc/0x1840 [ 1733.537347][T18081] default_device_exit_batch+0x9c3/0xa50 [ 1733.543013][T18081] cleanup_net+0x77b/0xb80 [ 1733.547458][T18081] process_one_work+0x898/0x1160 [ 1733.552412][T18081] worker_thread+0xaa2/0x1250 [ 1733.557109][T18081] kthread+0x29d/0x330 [ 1733.561222][T18081] ret_from_fork+0x1f/0x30 [ 1733.565666][T18081] [ 1733.568007][T18081] Second to last potentially related work creation: [ 1733.574600][T18081] kasan_save_stack+0x3a/0x60 [ 1733.579308][T18081] __kasan_record_aux_stack+0xb2/0xc0 [ 1733.584702][T18081] call_rcu+0x14b/0x970 [ 1733.588885][T18081] inetdev_event+0x77a/0x1410 [ 1733.593592][T18081] raw_notifier_call_chain+0xcb/0x160 [ 1733.598995][T18081] unregister_netdevice_many+0xfdc/0x1840 [ 1733.604758][T18081] unregister_netdevice_queue+0x31c/0x360 [ 1733.610508][T18081] lapbeth_device_event+0x65d/0xa10 [ 1733.615738][T18081] raw_notifier_call_chain+0xcb/0x160 [ 1733.621133][T18081] unregister_netdevice_many+0xfdc/0x1840 [ 1733.626920][T18081] unregister_netdevice_queue+0x31c/0x360 [ 1733.632687][T18081] nsim_destroy+0x49/0x150 [ 1733.637141][T18081] __nsim_dev_port_del+0x155/0x1c0 [ 1733.642286][T18081] nsim_dev_reload_destroy+0x283/0x480 [ 1733.647778][T18081] nsim_drv_remove+0x5c/0x160 [ 1733.652486][T18081] device_release_driver_internal+0x4be/0x850 [ 1733.658574][T18081] bus_remove_device+0x2e2/0x400 [ 1733.663537][T18081] device_del+0x628/0xa70 [ 1733.667886][T18081] device_unregister+0x1c/0xc0 [ 1733.672673][T18081] del_device_store+0x2a7/0x360 [ 1733.677552][T18081] kernfs_fop_write_iter+0x379/0x4c0 [ 1733.682867][T18081] vfs_write+0x44c/0x960 [ 1733.687126][T18081] ksys_write+0x143/0x240 [ 1733.691472][T18081] do_syscall_64+0x4c/0xa0 [ 1733.695911][T18081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1733.701833][T18081] [ 1733.704190][T18081] The buggy address belongs to the object at ffff88807c131800 [ 1733.704190][T18081] which belongs to the cache kmalloc-512 of size 512 [ 1733.718264][T18081] The buggy address is located 48 bytes inside of [ 1733.718264][T18081] 512-byte region [ffff88807c131800, ffff88807c131a00) [ 1733.731560][T18081] [ 1733.733898][T18081] The buggy address belongs to the physical page: [ 1733.740334][T18081] page:ffffea0001f04c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807c132000 pfn:0x7c130 [ 1733.751820][T18081] head:ffffea0001f04c00 order:2 compound_mapcount:0 compound_pincount:0 [ 1733.760177][T18081] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1733.768200][T18081] raw: 00fff00000010200 ffffea00008d5408 ffffea0001f89208 ffff888017441c80 [ 1733.776812][T18081] raw: ffff88807c132000 0000000000100007 00000001ffffffff 0000000000000000 [ 1733.785428][T18081] page dumped because: kasan: bad access detected [ 1733.791877][T18081] page_owner tracks the page as allocated [ 1733.797620][T18081] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4255, tgid 4255 (syz-executor), ts 68548448611, free_ts 58319976196 [ 1733.820500][T18081] post_alloc_hook+0x173/0x1a0 [ 1733.825317][T18081] get_page_from_freelist+0x1a26/0x1ac0 [ 1733.830905][T18081] __alloc_pages+0x1df/0x4e0 [ 1733.835530][T18081] alloc_slab_page+0x5d/0x160 [ 1733.840237][T18081] new_slab+0x87/0x2c0 [ 1733.844335][T18081] ___slab_alloc+0xbc6/0x1220 [ 1733.849042][T18081] __kmem_cache_alloc_node+0x1a0/0x260 [ 1733.854523][T18081] __kmalloc_node_track_caller+0x9e/0x230 [ 1733.860266][T18081] __alloc_skb+0x22a/0x7e0 [ 1733.864709][T18081] netlink_ack+0x372/0x1100 [ 1733.869249][T18081] netlink_rcv_skb+0x263/0x420 [ 1733.874047][T18081] netlink_unicast+0x74c/0x8c0 [ 1733.878851][T18081] netlink_sendmsg+0x89e/0xbc0 [ 1733.883652][T18081] __sys_sendto+0x44f/0x5c0 [ 1733.888193][T18081] __x64_sys_sendto+0xda/0xf0 [ 1733.892904][T18081] do_syscall_64+0x4c/0xa0 [ 1733.897353][T18081] page last free stack trace: [ 1733.902038][T18081] free_unref_page_prepare+0x8b4/0x9a0 [ 1733.907538][T18081] free_unref_page+0x2e/0x3f0 [ 1733.912349][T18081] qlist_free_all+0x76/0xe0 [ 1733.916874][T18081] kasan_quarantine_reduce+0x144/0x160 [ 1733.922380][T18081] __kasan_slab_alloc+0x1e/0x80 [ 1733.927264][T18081] slab_post_alloc_hook+0x4b/0x480 [ 1733.932489][T18081] kmem_cache_alloc+0x123/0x2f0 [ 1733.937447][T18081] vm_area_dup+0x23/0x1a0 [ 1733.941818][T18081] __split_vma+0xb9/0x500 [ 1733.946198][T18081] do_mas_align_munmap+0x762/0x1220 [ 1733.951435][T18081] do_mas_munmap+0x240/0x2b0 [ 1733.956059][T18081] mmap_region+0x713/0x1d30 [ 1733.960592][T18081] do_mmap+0x894/0xf30 [ 1733.964690][T18081] vm_mmap_pgoff+0x1b2/0x2b0 [ 1733.969311][T18081] ksys_mmap_pgoff+0x516/0x6f0 [ 1733.974112][T18081] do_syscall_64+0x4c/0xa0 [ 1733.978557][T18081] [ 1733.980896][T18081] Memory state around the buggy address: [ 1733.986544][T18081] ffff88807c131700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1733.994625][T18081] ffff88807c131780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1734.002707][T18081] >ffff88807c131800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1734.010781][T18081] ^ [ 1734.016428][T18081] ffff88807c131880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1734.024509][T18081] ffff88807c131900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1734.032584][T18081] ================================================================== [ 1734.040836][T18081] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1734.048135][T18081] CPU: 0 PID: 18081 Comm: syz.5.2750 Not tainted 6.1.141-syzkaller #0 [ 1734.056317][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1734.066393][T18081] Call Trace: [ 1734.069949][T18081] [ 1734.072894][T18081] dump_stack_lvl+0x168/0x22e [ 1734.077686][T18081] ? memcpy+0x3c/0x60 [ 1734.081690][T18081] ? show_regs_print_info+0x12/0x12 [ 1734.086916][T18081] ? load_image+0x3b0/0x3b0 [ 1734.091445][T18081] panic+0x2c9/0x710 [ 1734.095365][T18081] ? asm_common_interrupt+0x22/0x40 [ 1734.100598][T18081] ? bpf_jit_dump+0xd0/0xd0 [ 1734.105121][T18081] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 1734.111043][T18081] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1734.116963][T18081] ? _raw_spin_unlock+0x40/0x40 [ 1734.121841][T18081] check_panic_on_warn+0x80/0xa0 [ 1734.126803][T18081] ? rose_get_neigh+0x17e/0x550 [ 1734.131689][T18081] end_report+0x66/0x110 [ 1734.135965][T18081] kasan_report+0x118/0x140 [ 1734.140503][T18081] ? rose_get_neigh+0x17e/0x550 [ 1734.145385][T18081] rose_get_neigh+0x17e/0x550 [ 1734.150090][T18081] rose_connect+0x412/0x1380 [ 1734.154704][T18081] ? aa_sk_perm+0x7e5/0x920 [ 1734.159408][T18081] ? rose_bind+0xa90/0xa90 [ 1734.163860][T18081] ? aa_af_perm+0x1c0/0x2b0 [ 1734.168388][T18081] ? tomoyo_socket_connect_permission+0x195/0x280 [ 1734.174841][T18081] ? __might_fault+0xa6/0x120 [ 1734.179541][T18081] ? bpf_lsm_socket_connect+0x5/0x10 [ 1734.184848][T18081] ? security_socket_connect+0x7c/0xa0 [ 1734.190338][T18081] ? rose_bind+0xa90/0xa90 [ 1734.194775][T18081] __sys_connect+0x389/0x410 [ 1734.199487][T18081] ? __sys_connect_file+0x170/0x170 [ 1734.204727][T18081] __x64_sys_connect+0x76/0x80 [ 1734.209518][T18081] do_syscall_64+0x4c/0xa0 [ 1734.213961][T18081] ? clear_bhb_loop+0x60/0xb0 [ 1734.218664][T18081] ? clear_bhb_loop+0x60/0xb0 [ 1734.223359][T18081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1734.229282][T18081] RIP: 0033:0x7f25d058e929 [ 1734.233717][T18081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1734.253348][T18081] RSP: 002b:00007f25d14a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1734.261785][T18081] RAX: ffffffffffffffda RBX: 00007f25d07b6160 RCX: 00007f25d058e929 [ 1734.269776][T18081] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 1734.277769][T18081] RBP: 00007f25d0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1734.285763][T18081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.293756][T18081] R13: 0000000000000001 R14: 00007f25d07b6160 R15: 00007ffcedf3aaa8 [ 1734.301754][T18081] [ 1734.305057][T18081] Kernel Offset: disabled [ 1734.309561][T18081] Rebooting in 86400 seconds..