last executing test programs: 17m48.548140147s ago: executing program 0 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310002000015000300686173683a69702c706f72742c6e6574000000"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0xc0c1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="06000000200d"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000406010100000000000000000700000a0500010007080000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = fanotify_init(0xf00, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, r8, 0x2) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x1, 0x800002b, r9, 0x0) 17m48.204253935s ago: executing program 0 (id=20): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, 0x0, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010100, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) fanotify_init(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 17m7.007768965s ago: executing program 32 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, 0x0, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010100, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) fanotify_init(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 15m26.63522842s ago: executing program 2 (id=212): syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, &(0x7f0000000100)) ioctl$KDSETLED(r3, 0x4b32, 0x8) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0xd) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) timerfd_create(0x8, 0x800) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f00000010c0)={0xb, {"a2e3ad21ed9b52f91b5d342f87f70e06d038e7ff7fc6e5539b3247298b089b3908356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) 15m24.45347579s ago: executing program 2 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000940)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000380)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, 0x0, &(0x7f0000000240)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0x9) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x2, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a748f75737465643a30303030303030303030"], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = getpgid(0x0) syz_pidfd_open(r7, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x2) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x3f8, 0x400, 0x70bd25, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 15m22.975032214s ago: executing program 2 (id=220): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r3, r4, r5, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xffffffff, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 15m19.562098393s ago: executing program 2 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000940)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, 0x0, &(0x7f0000000240)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0x9) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x2, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a748f75737465643a30303030303030303030"], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = getpgid(0x0) syz_pidfd_open(r7, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x2) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x3f8, 0x400, 0x70bd25, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 15m16.65518169s ago: executing program 2 (id=229): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$reject(0x13, r0, 0xd59, 0x1, r0) keyctl$revoke(0x3, r0) 15m16.165989492s ago: executing program 2 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) setpriority(0x0, r1, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010100, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) fanotify_init(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 15m0.680730689s ago: executing program 33 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) setpriority(0x0, r1, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010100, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) fanotify_init(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 13m40.770091461s ago: executing program 3 (id=362): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x1f, &(0x7f0000000200)={0x3a, 0x7fffffff, 0x9}) 13m36.06419041s ago: executing program 3 (id=369): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open$dir(&(0x7f00000001c0)='./bus\x00', 0x0, 0x13c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @loopback}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x159) fadvise64(r7, 0x7, 0x3, 0x4) socket(0x28, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 13m34.105619475s ago: executing program 3 (id=372): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="308002", 0x3, 0x0) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) keyctl$revoke(0x3, 0x0) 13m30.105300587s ago: executing program 3 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x7a, 0x770, 0x0, 0xbabd}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x24004010) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r5, &(0x7f0000000340), 0x0}, 0x20) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)={0x54, r7, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) socket$inet6_udp(0xa, 0x2, 0x0) 13m28.065369814s ago: executing program 3 (id=380): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x1f, &(0x7f0000000200)={0x3a, 0x7fffffff, 0x9}) 13m25.526107213s ago: executing program 3 (id=383): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x80) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0x0, 0x6, 0x0, 0x2}, 0x10, 0xff}, [{0x4, 0xfff, 0x100, 0x7, 0x8, 0x1b2b}, {0x6, 0x7, 0x8c, 0x4, 0x0, 0x6}, {0x7, 0xffffffff, 0x10000, 0x1, 0x6, 0x1}, {0xffffffff, 0x8, 0x7, 0x6, 0x2}, {0x0, 0x9a, 0x8, 0x6, 0x0, 0x9}, {0x5, 0x4, 0x7, 0x101, 0x7}, {0x47, 0xfffffff8, 0x7, 0x100, 0xc, 0x401}, {0xc5, 0x0, 0x5, 0x7, 0x3, 0x7fff}, {0x7, 0x9, 0x4000000, 0x5, 0xa057, 0x3ff}, {0x1, 0x6, 0x8, 0x5, 0x2, 0x8e}, {0xfffffffb, 0x7, 0xfff, 0x8, 0xffffff85, 0x4}, {0x6, 0x9, 0x4, 0x0, 0x7, 0x4}, {0x81, 0x80000001, 0x9, 0x43a, 0x8, 0x1000}, {0x7, 0xa, 0x1, 0x2, 0x0, 0xf}, {0xf, 0x401, 0xf0, 0x9, 0xffff, 0x4}, {0x7fffffff, 0x7, 0x5, 0x0, 0x7ff, 0x7}, {0x92, 0x9, 0x3, 0xe, 0xc3, 0xb}, {0x9, 0x9, 0x2, 0x1, 0x5, 0x400}, {0x4, 0xcc, 0x300000, 0x4, 0x3, 0x7}, {0x4, 0xffffffff, 0x9, 0x9, 0x3, 0xf}, {0x9, 0x8, 0x0, 0xa0, 0x468, 0x5}, {0xffffffff, 0xfffffff9, 0x0, 0x2c, 0x7fffffff, 0x8001}, {0x5, 0x8001, 0x8e27, 0x8, 0x2000000, 0x2}, {0x4, 0x4, 0x3, 0x9, 0x8, 0xeb43}, {0xb, 0x5, 0x401, 0x56, 0xcb7}, {0xef, 0x3, 0x1, 0x8001, 0x7fffffff}, {0x0, 0x10, 0xdaf1, 0x1, 0x1, 0x2}, {0xffff, 0x9, 0x3fed, 0x1, 0x80000000, 0x5}, {0xfffffff8, 0x81, 0x5, 0xfffffffe, 0x3, 0x4}, {0x1, 0x91, 0x800, 0x7, 0x5, 0xf}, {0x4, 0x2, 0xff6f, 0xe, 0xfffffffe, 0x4}, {0x53, 0x4, 0x401, 0x8, 0x5, 0x9}, {0x10001, 0xee, 0xaea, 0xfffffffe, 0x76be, 0x8}, {0x1000, 0x4, 0xd5b, 0x4, 0xe, 0x3ff}, {0x5, 0xed, 0x9, 0x3ff, 0x200, 0xffffffff}, {0x2, 0xff33, 0x9, 0x0, 0x0, 0x66d2}, {0x2a, 0xf2, 0x5, 0x1, 0xc7, 0xfffff3d6}, {0x2dc57e6, 0x5, 0x8, 0x0, 0x7, 0xfffffffc}, {0x51, 0x2, 0x8, 0x8, 0x3, 0x6}, {0x0, 0x101c, 0x40, 0x4, 0x8001, 0xc}, {0x54b, 0x7, 0xf51, 0x0, 0x9, 0x2}, {0xffffffff, 0x2, 0xfffffffc, 0x6, 0x5, 0xe}, {0x5, 0x5ed4f39, 0x0, 0x7ff, 0x81, 0xfffffff8}, {0xbe4, 0xffffffff, 0x6, 0xd4a, 0x7ff}, {0x0, 0x9, 0x8, 0xfff, 0x3, 0x4}, {0xda, 0x0, 0x2, 0x3, 0xfffff1fb}, {0xffffff42, 0x81c, 0x9, 0x3, 0x8, 0x1}, {0x3, 0xfffffff8, 0x8, 0x4, 0x54, 0x200}, {0x9, 0x8, 0x1ff, 0x52800, 0x80, 0x1}, {0x0, 0x5, 0xe8, 0x2, 0x0, 0x1}, {0x7, 0xffffff01, 0x1000, 0x8, 0x0, 0x7}, {0x0, 0x80, 0xc00, 0x200, 0x3, 0xfffffffc}, {0x1000, 0x3, 0x1, 0xff, 0xffff, 0x80000000}, {0xfffffffc, 0x2, 0x40, 0x8, 0xcb87, 0x45b5}, {0x4, 0x0, 0xc09, 0x1, 0x8, 0x7ff}, {0x401, 0x2, 0x9, 0x678, 0x6c, 0xffff}, {0xfffffffe, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xf}, {0x100, 0x2, 0x9, 0x2, 0x6, 0x5b8b}, {0x4, 0xfffffffb, 0x24, 0x5, 0x31c1, 0x2}, {0x6, 0x6, 0x1e1c, 0x200, 0x6, 0x1ff}, {0x1, 0x4, 0x4, 0xd1bd, 0x0, 0x5}, {0x4, 0xfffffffa, 0xfffffffb, 0x7, 0x101, 0x1}, {0x8, 0x7, 0xd2, 0xff, 0x3, 0xcc7e}, {0x7, 0x3, 0xd65f, 0x1, 0x8, 0x4}, {0x2, 0x40, 0x9, 0x5, 0x7}, {0x858, 0xfff, 0x200, 0x9, 0x7ff, 0x9}, {0x4c07e81, 0x8a55, 0x35a, 0x3, 0xffff, 0x10001}, {0x3, 0x3, 0x0, 0x3, 0x8}, {0x2, 0x10001, 0x60000, 0x7, 0x7, 0x9}, {0x4, 0x863a, 0xffffffff, 0x7fffffff, 0x7f, 0x8}, {0x3, 0x1, 0x8, 0x98a, 0x9, 0x89}, {0x3, 0x2, 0x40, 0x9, 0x7, 0x8}, {0x4, 0x6, 0x6, 0x6, 0x3}, {0x4c, 0x0, 0x1, 0x8, 0x80000001, 0xfffffffe}, {0x3, 0x9, 0x9, 0x40, 0x80, 0x12a2}, {0x80000000, 0x1, 0x100, 0x800, 0x3, 0x8baf}, {0x2, 0xc, 0x8, 0x80000000, 0xb8, 0x60f}, {0x3, 0x5, 0x6, 0x5380, 0x7f, 0x7517}, {0x647, 0xffffffdc, 0x4, 0xffff, 0x1, 0x401}, {0xfffffff8, 0xa29, 0xf, 0x3, 0x5, 0xffff2f56}, {0x200, 0x8, 0x3b6, 0x9, 0x100, 0x7}, {0x2, 0x4, 0x81, 0x4, 0x80, 0x1}, {0x5, 0x21e7, 0xa8a5, 0x7ff, 0x6, 0xd}, {0x13, 0x7fffffff, 0x6, 0x5696cd1, 0x4a, 0x6}, {0x9, 0x1000000, 0x0, 0xfff}, {0x5, 0x40, 0xc05, 0x5, 0x8, 0x2}, {0x3, 0x6, 0x5, 0x6, 0xb, 0x8}, {0x400, 0x80000000, 0x101, 0x0, 0x8, 0x9}, {0xb, 0xf9, 0xfffffff7, 0x0, 0x9}, {0x1e9e, 0x0, 0xb8e, 0x9, 0x9, 0xfff}, {0x3, 0x6, 0x24ab, 0x6, 0x1, 0x1}, {0x1, 0x9, 0x3, 0xa0000, 0x5, 0x8}, {0x0, 0xee5, 0x0, 0x5, 0x27, 0x8}, {0xfffffffc, 0x8e7, 0x7, 0x3ff, 0x5, 0x1}, {0x400, 0x10000, 0x4, 0x3, 0x9}, {0x4, 0x4, 0x9, 0x4, 0x0, 0x800}, {0x2, 0x1, 0x74, 0xfffffff9, 0x1, 0x5}, {0x3, 0x1fe0, 0x8, 0x8, 0x3, 0x2}, {0x6, 0x80, 0x700, 0x1, 0x7, 0x9}, {0x4, 0xa, 0x2, 0x3, 0x4000, 0x7}, {0xd, 0x2, 0x0, 0x3, 0x0, 0x5}, {0x10001, 0x7fff, 0x4, 0x9, 0x4, 0x400}, {0x7, 0x6, 0x5, 0x8, 0x20, 0x7ae2}, {0x5, 0x9, 0x1, 0x80000001, 0xd1, 0xffffff80}, {0x9, 0x81, 0x242, 0x7}, {0x9a, 0x0, 0x2, 0xd3ef, 0x9, 0x3}, {0x6, 0x7fff, 0xd6f, 0x7fffffff, 0xb2f8, 0x81}, {0x2, 0x3, 0x0, 0x12b, 0x5, 0xffffff80}, {0x7edc, 0x44cf, 0x9, 0x7ff, 0x7, 0x8}, {0x0, 0x46, 0x80, 0x7fffffff, 0x7, 0x9566}, {0x5, 0x5, 0x8, 0xfffff8de, 0x2, 0x6}, {0x1, 0x2, 0xe, 0x37, 0x2, 0x10}, {0x3, 0xc0, 0xa, 0x1, 0x7, 0x9}, {0x4d5, 0x0, 0x1, 0x0, 0x3, 0x3}, {0x180127ed, 0x45, 0x6, 0x52, 0x6, 0xfffffff3}, {0xfffffffb, 0x409, 0x4, 0x3, 0x8000}, {0xfffffff9, 0xffff932d, 0x101, 0x3, 0x10000, 0x2}, {0x1000, 0x200, 0x5901, 0x8, 0x724, 0x2d3}, {0xfffffff7, 0x1, 0xfffffff8, 0x1, 0x30, 0x8}, {0x0, 0x8, 0x3, 0x3, 0x1, 0xd453}, {0x5, 0x4, 0x1, 0x7, 0x2, 0x8001}, {0x878b, 0xfffffff9, 0x2, 0x73fe, 0x0, 0x9}, {0x4c735734, 0x5, 0xfffff8dc, 0x4, 0x5, 0x3}, {0x5af8, 0x8, 0x5, 0x5, 0x4, 0xd}, {0x2, 0x1, 0x1, 0x3ff, 0x8}, {0x0, 0xc, 0x80, 0x9, 0x6, 0xfffffffc}, {0x1, 0x1ff, 0x9, 0xf0000000, 0xad82, 0xfed}, {0x8, 0x4e9, 0x7f, 0x6, 0xffff, 0x5}], [{0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x7}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x6c920e8d29de5635, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x2}, {0x5, 0x1}, {0x438236dffaa15198}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x5fa8a67979573ac}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x2}, {0x7}, {0x3}, {0x2}, {0x3}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x200c}) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) 13m9.391847385s ago: executing program 34 (id=383): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x80) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0x0, 0x6, 0x0, 0x2}, 0x10, 0xff}, [{0x4, 0xfff, 0x100, 0x7, 0x8, 0x1b2b}, {0x6, 0x7, 0x8c, 0x4, 0x0, 0x6}, {0x7, 0xffffffff, 0x10000, 0x1, 0x6, 0x1}, {0xffffffff, 0x8, 0x7, 0x6, 0x2}, {0x0, 0x9a, 0x8, 0x6, 0x0, 0x9}, {0x5, 0x4, 0x7, 0x101, 0x7}, {0x47, 0xfffffff8, 0x7, 0x100, 0xc, 0x401}, {0xc5, 0x0, 0x5, 0x7, 0x3, 0x7fff}, {0x7, 0x9, 0x4000000, 0x5, 0xa057, 0x3ff}, {0x1, 0x6, 0x8, 0x5, 0x2, 0x8e}, {0xfffffffb, 0x7, 0xfff, 0x8, 0xffffff85, 0x4}, {0x6, 0x9, 0x4, 0x0, 0x7, 0x4}, {0x81, 0x80000001, 0x9, 0x43a, 0x8, 0x1000}, {0x7, 0xa, 0x1, 0x2, 0x0, 0xf}, {0xf, 0x401, 0xf0, 0x9, 0xffff, 0x4}, {0x7fffffff, 0x7, 0x5, 0x0, 0x7ff, 0x7}, {0x92, 0x9, 0x3, 0xe, 0xc3, 0xb}, {0x9, 0x9, 0x2, 0x1, 0x5, 0x400}, {0x4, 0xcc, 0x300000, 0x4, 0x3, 0x7}, {0x4, 0xffffffff, 0x9, 0x9, 0x3, 0xf}, {0x9, 0x8, 0x0, 0xa0, 0x468, 0x5}, {0xffffffff, 0xfffffff9, 0x0, 0x2c, 0x7fffffff, 0x8001}, {0x5, 0x8001, 0x8e27, 0x8, 0x2000000, 0x2}, {0x4, 0x4, 0x3, 0x9, 0x8, 0xeb43}, {0xb, 0x5, 0x401, 0x56, 0xcb7}, {0xef, 0x3, 0x1, 0x8001, 0x7fffffff}, {0x0, 0x10, 0xdaf1, 0x1, 0x1, 0x2}, {0xffff, 0x9, 0x3fed, 0x1, 0x80000000, 0x5}, {0xfffffff8, 0x81, 0x5, 0xfffffffe, 0x3, 0x4}, {0x1, 0x91, 0x800, 0x7, 0x5, 0xf}, {0x4, 0x2, 0xff6f, 0xe, 0xfffffffe, 0x4}, {0x53, 0x4, 0x401, 0x8, 0x5, 0x9}, {0x10001, 0xee, 0xaea, 0xfffffffe, 0x76be, 0x8}, {0x1000, 0x4, 0xd5b, 0x4, 0xe, 0x3ff}, {0x5, 0xed, 0x9, 0x3ff, 0x200, 0xffffffff}, {0x2, 0xff33, 0x9, 0x0, 0x0, 0x66d2}, {0x2a, 0xf2, 0x5, 0x1, 0xc7, 0xfffff3d6}, {0x2dc57e6, 0x5, 0x8, 0x0, 0x7, 0xfffffffc}, {0x51, 0x2, 0x8, 0x8, 0x3, 0x6}, {0x0, 0x101c, 0x40, 0x4, 0x8001, 0xc}, {0x54b, 0x7, 0xf51, 0x0, 0x9, 0x2}, {0xffffffff, 0x2, 0xfffffffc, 0x6, 0x5, 0xe}, {0x5, 0x5ed4f39, 0x0, 0x7ff, 0x81, 0xfffffff8}, {0xbe4, 0xffffffff, 0x6, 0xd4a, 0x7ff}, {0x0, 0x9, 0x8, 0xfff, 0x3, 0x4}, {0xda, 0x0, 0x2, 0x3, 0xfffff1fb}, {0xffffff42, 0x81c, 0x9, 0x3, 0x8, 0x1}, {0x3, 0xfffffff8, 0x8, 0x4, 0x54, 0x200}, {0x9, 0x8, 0x1ff, 0x52800, 0x80, 0x1}, {0x0, 0x5, 0xe8, 0x2, 0x0, 0x1}, {0x7, 0xffffff01, 0x1000, 0x8, 0x0, 0x7}, {0x0, 0x80, 0xc00, 0x200, 0x3, 0xfffffffc}, {0x1000, 0x3, 0x1, 0xff, 0xffff, 0x80000000}, {0xfffffffc, 0x2, 0x40, 0x8, 0xcb87, 0x45b5}, {0x4, 0x0, 0xc09, 0x1, 0x8, 0x7ff}, {0x401, 0x2, 0x9, 0x678, 0x6c, 0xffff}, {0xfffffffe, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xf}, {0x100, 0x2, 0x9, 0x2, 0x6, 0x5b8b}, {0x4, 0xfffffffb, 0x24, 0x5, 0x31c1, 0x2}, {0x6, 0x6, 0x1e1c, 0x200, 0x6, 0x1ff}, {0x1, 0x4, 0x4, 0xd1bd, 0x0, 0x5}, {0x4, 0xfffffffa, 0xfffffffb, 0x7, 0x101, 0x1}, {0x8, 0x7, 0xd2, 0xff, 0x3, 0xcc7e}, {0x7, 0x3, 0xd65f, 0x1, 0x8, 0x4}, {0x2, 0x40, 0x9, 0x5, 0x7}, {0x858, 0xfff, 0x200, 0x9, 0x7ff, 0x9}, {0x4c07e81, 0x8a55, 0x35a, 0x3, 0xffff, 0x10001}, {0x3, 0x3, 0x0, 0x3, 0x8}, {0x2, 0x10001, 0x60000, 0x7, 0x7, 0x9}, {0x4, 0x863a, 0xffffffff, 0x7fffffff, 0x7f, 0x8}, {0x3, 0x1, 0x8, 0x98a, 0x9, 0x89}, {0x3, 0x2, 0x40, 0x9, 0x7, 0x8}, {0x4, 0x6, 0x6, 0x6, 0x3}, {0x4c, 0x0, 0x1, 0x8, 0x80000001, 0xfffffffe}, {0x3, 0x9, 0x9, 0x40, 0x80, 0x12a2}, {0x80000000, 0x1, 0x100, 0x800, 0x3, 0x8baf}, {0x2, 0xc, 0x8, 0x80000000, 0xb8, 0x60f}, {0x3, 0x5, 0x6, 0x5380, 0x7f, 0x7517}, {0x647, 0xffffffdc, 0x4, 0xffff, 0x1, 0x401}, {0xfffffff8, 0xa29, 0xf, 0x3, 0x5, 0xffff2f56}, {0x200, 0x8, 0x3b6, 0x9, 0x100, 0x7}, {0x2, 0x4, 0x81, 0x4, 0x80, 0x1}, {0x5, 0x21e7, 0xa8a5, 0x7ff, 0x6, 0xd}, {0x13, 0x7fffffff, 0x6, 0x5696cd1, 0x4a, 0x6}, {0x9, 0x1000000, 0x0, 0xfff}, {0x5, 0x40, 0xc05, 0x5, 0x8, 0x2}, {0x3, 0x6, 0x5, 0x6, 0xb, 0x8}, {0x400, 0x80000000, 0x101, 0x0, 0x8, 0x9}, {0xb, 0xf9, 0xfffffff7, 0x0, 0x9}, {0x1e9e, 0x0, 0xb8e, 0x9, 0x9, 0xfff}, {0x3, 0x6, 0x24ab, 0x6, 0x1, 0x1}, {0x1, 0x9, 0x3, 0xa0000, 0x5, 0x8}, {0x0, 0xee5, 0x0, 0x5, 0x27, 0x8}, {0xfffffffc, 0x8e7, 0x7, 0x3ff, 0x5, 0x1}, {0x400, 0x10000, 0x4, 0x3, 0x9}, {0x4, 0x4, 0x9, 0x4, 0x0, 0x800}, {0x2, 0x1, 0x74, 0xfffffff9, 0x1, 0x5}, {0x3, 0x1fe0, 0x8, 0x8, 0x3, 0x2}, {0x6, 0x80, 0x700, 0x1, 0x7, 0x9}, {0x4, 0xa, 0x2, 0x3, 0x4000, 0x7}, {0xd, 0x2, 0x0, 0x3, 0x0, 0x5}, {0x10001, 0x7fff, 0x4, 0x9, 0x4, 0x400}, {0x7, 0x6, 0x5, 0x8, 0x20, 0x7ae2}, {0x5, 0x9, 0x1, 0x80000001, 0xd1, 0xffffff80}, {0x9, 0x81, 0x242, 0x7}, {0x9a, 0x0, 0x2, 0xd3ef, 0x9, 0x3}, {0x6, 0x7fff, 0xd6f, 0x7fffffff, 0xb2f8, 0x81}, {0x2, 0x3, 0x0, 0x12b, 0x5, 0xffffff80}, {0x7edc, 0x44cf, 0x9, 0x7ff, 0x7, 0x8}, {0x0, 0x46, 0x80, 0x7fffffff, 0x7, 0x9566}, {0x5, 0x5, 0x8, 0xfffff8de, 0x2, 0x6}, {0x1, 0x2, 0xe, 0x37, 0x2, 0x10}, {0x3, 0xc0, 0xa, 0x1, 0x7, 0x9}, {0x4d5, 0x0, 0x1, 0x0, 0x3, 0x3}, {0x180127ed, 0x45, 0x6, 0x52, 0x6, 0xfffffff3}, {0xfffffffb, 0x409, 0x4, 0x3, 0x8000}, {0xfffffff9, 0xffff932d, 0x101, 0x3, 0x10000, 0x2}, {0x1000, 0x200, 0x5901, 0x8, 0x724, 0x2d3}, {0xfffffff7, 0x1, 0xfffffff8, 0x1, 0x30, 0x8}, {0x0, 0x8, 0x3, 0x3, 0x1, 0xd453}, {0x5, 0x4, 0x1, 0x7, 0x2, 0x8001}, {0x878b, 0xfffffff9, 0x2, 0x73fe, 0x0, 0x9}, {0x4c735734, 0x5, 0xfffff8dc, 0x4, 0x5, 0x3}, {0x5af8, 0x8, 0x5, 0x5, 0x4, 0xd}, {0x2, 0x1, 0x1, 0x3ff, 0x8}, {0x0, 0xc, 0x80, 0x9, 0x6, 0xfffffffc}, {0x1, 0x1ff, 0x9, 0xf0000000, 0xad82, 0xfed}, {0x8, 0x4e9, 0x7f, 0x6, 0xffff, 0x5}], [{0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x7}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x6c920e8d29de5635, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x2}, {0x5, 0x1}, {0x438236dffaa15198}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x5fa8a67979573ac}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x2}, {0x7}, {0x3}, {0x2}, {0x3}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x200c}) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) 8m32.986377639s ago: executing program 4 (id=818): syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000340)={0x1}) socket$inet_udp(0x2, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) memfd_create(0x0, 0x3) socket$key(0xf, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) move_mount(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x64) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x803, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x3}}}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x15) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011fe0100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_SIOCETHTOOL(r2, 0x8932, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) add_key(0x0, 0x0, &(0x7f0000000400)="01000000026dd7d12fa60adffb29d83de5eb4a2f103d87650beb60d4a46d8bb2bdd7d0197e70c5b98589180d581ff9ea1ca6a5a29769e4cbc6a8963824d93472ae1dee7906a151b87c48cd1b02f728399c54db317456b9db5e296196043f637c65b95114b77b7d74207bb3a97b9364b5abb7862cfd9c1e3de1d0b4033c489ac7fbebbe41e7a90f1302b784", 0x8b, 0xffffffffffffffff) 8m29.014749061s ago: executing program 4 (id=822): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file6\x00', 0x201080b, &(0x7f0000000bc0)=ANY=[], 0x1, 0x1e5, &(0x7f0000000080)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setregid(0xffffffffffffffff, r3) r7 = socket(0x10, 0x3, 0x80) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x92, 0x0) 8m24.783131138s ago: executing program 4 (id=827): syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x23c, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sysinfo(0x0) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x8) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r5], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000a00)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRES8=r0, @ANYBLOB="53ae22c053b680147ec8ea19ea0954186b880a16b3178e50a6e7cecaa9648e3591f2446327555a93a0d8d39de7fffa4cdfa1a97e51c9", @ANYRES32=r5, @ANYRES32, @ANYRESDEC, @ANYRES64], 0x1, 0x6ff, &(0x7f0000000c00)="$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") r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x6332, 0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 8m21.634155001s ago: executing program 4 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) setpriority(0x0, r1, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010100, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) fanotify_init(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 8m20.35092588s ago: executing program 4 (id=832): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_setup(0x3450, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) 8m16.47442033s ago: executing program 4 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x4a86, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x897d, 0x100000, 0x8, 0x8000, 0x3, 0x0, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x2, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x3ffffffffffffff, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x8, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r7, r8, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r9, &(0x7f0000000100)=""/134, 0x86) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, 0x0) 8m0.921953918s ago: executing program 35 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x4a86, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x897d, 0x100000, 0x8, 0x8000, 0x3, 0x0, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x2, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x3ffffffffffffff, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x8, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r7, r8, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r9, &(0x7f0000000100)=""/134, 0x86) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, 0x0) 10.908922952s ago: executing program 5 (id=1718): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0xffffffffffffffff}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0)={0x0, 0x6c, 0x29}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'cbcmac-aes-neon\x00'}}, &(0x7f0000000400)="bf9e9014b97efb7cdd465f6584f32f0c9749b395fa8f398903e4494d4008efb413ee053491d49a1e4994a7b7e5fa1a6c682a67edb69f97504e665b4aad510f22ea919e7aa6a7f1a90b495cc03dfe7ccee07e7c9100d0f37c4901706af2f137c0e6ff64111049e652ad357ed9", &(0x7f0000000480)=""/41) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x4) 10.52746794s ago: executing program 6 (id=1719): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9.751472848s ago: executing program 5 (id=1722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c17, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7ff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 9.22504411s ago: executing program 5 (id=1726): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fd) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3d04b63e3ee3755, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x235, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(0x0, 0x0, &(0x7f0000000300), 0x200044, &(0x7f0000000500)={[{'acl'}]}) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000480)=@filename='./file0\x00', 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r5, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8.190082713s ago: executing program 6 (id=1729): r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000141}, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r10 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r10, 0x0, 0x16, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r12, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r12, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 8.160797084s ago: executing program 5 (id=1731): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r2, 0x5ee36000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000980)="8ff819011349850a69e9dc600733c942a066177e34fbafc34cd22dcdf25ab41945ec9b71eda8aeb2a3560b19800e44d21666762b4823a6dfe1c7dcebbab82b88b0629b4f31323edd15a8a1b100003c6c5b8929c77a4b98d7e40f0bc7f32fa4f53634b0c28abdf6a23cd07fcc9675e8d75ba8822afb72343db154e17d51e1a7cd7de494c6ebb981c1f7c45f34525c71b8b569637703b816d33ba4d2ba64", 0x9d, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0xfe) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x28, 0xc, 0x31}, 0x2c) socket(0x10, 0x803, 0xfffffffc) 6.906165163s ago: executing program 1 (id=1733): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000000200)={[{@nodatasum}]}, 0x0, 0x559e, &(0x7f00000088c0)="$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") ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000180)={0x6, {0x11, 0x9a02, 0xffffffffffffffff, 0x8, 0x28000000}}) 5.471161905s ago: executing program 6 (id=1737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x50}, 0x1, 0xc3, 0x0, 0x20000000}, 0x0) 5.24352703s ago: executing program 6 (id=1739): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, 0x0, 0x0) rt_sigqueueinfo(r6, 0x1f, &(0x7f0000000200)={0x3a, 0x7fffffff, 0x9}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 5.005138876s ago: executing program 7 (id=1741): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fd) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3d04b63e3ee3755, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x235, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(0x0, 0x0, &(0x7f0000000300), 0x200044, &(0x7f0000000500)={[{'acl'}]}) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000480)=@filename='./file0\x00', 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r5, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.758055211s ago: executing program 1 (id=1742): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)={@local}) 4.507321017s ago: executing program 8 (id=1743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe8}}, 0x0) 3.878797122s ago: executing program 7 (id=1744): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0xffffffffffffffff}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0)={0x0, 0x6c, 0x29}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'cbcmac-aes-neon\x00'}}, &(0x7f0000000400)="bf9e9014b97efb7cdd465f6584f32f0c9749b395fa8f398903e4494d4008efb413ee053491d49a1e4994a7b7e5fa1a6c682a67edb69f97504e665b4aad510f22ea919e7aa6a7f1a90b495cc03dfe7ccee07e7c9100d0f37c4901706af2f137c0e6ff64111049e652ad357ed9", &(0x7f0000000480)=""/41) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x4) 3.741382765s ago: executing program 1 (id=1745): r0 = mq_open(&(0x7f0000000040)='M2\xa6\x8at\x7f\xe3\xdf\xe7\xe0E\x0f\xcd\xd8h\xa8j\xc6\f \xac\xe2\x1c\xacQ\r\x11t\xfb\x06\xd1\xf7\x94\x88[\x19\xb2P*\x19\xad\xed\xf63|\x92#\x14', 0x841, 0x14f, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x8, 0x0) 3.570585678s ago: executing program 8 (id=1746): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x2) 3.537169319s ago: executing program 1 (id=1747): r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000141}, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r10 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r10, 0x0, 0x16, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r12, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r12, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 2.760846677s ago: executing program 7 (id=1748): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c570", 0x5) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 2.673147519s ago: executing program 8 (id=1749): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="308002", 0x3, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$reject(0x13, r6, 0xd59, 0x1, r6) keyctl$revoke(0x3, r6) 2.61356486s ago: executing program 5 (id=1750): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x800) 2.283068938s ago: executing program 7 (id=1751): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) 1.518202345s ago: executing program 1 (id=1752): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, 0x0}}, {{&(0x7f0000001780)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001a00)=[@ip_ttl={{0x10, 0x0, 0x2, 0x800}}], 0x10}}], 0x2, 0x20040864) 1.389320898s ago: executing program 8 (id=1753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd3e, 0x25dfdbfe, {0x2, 0x0, 0x30, 0x8, 0xfc, 0x1, 0x0, 0x1, 0x5100}, [@RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_GATEWAY={0x8, 0x5, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8c4) 1.387608059s ago: executing program 5 (id=1754): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 1.367598759s ago: executing program 7 (id=1755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 1.30092423s ago: executing program 1 (id=1756): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fd) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3d04b63e3ee3755, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x235, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(0x0, 0x0, &(0x7f0000000300), 0x200044, &(0x7f0000000500)={[{'acl'}]}) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000480)=@filename='./file0\x00', 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 1.197171522s ago: executing program 6 (id=1757): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xa1, 0x7ff, 0x1, {0xa, @pix={0x5, 0x7, 0x68a5bbaa, 0x0, 0x1, 0x6ab49c80, 0x5, 0x80, 0x0, 0x8, 0x2, 0x6}}}) 1.196778062s ago: executing program 8 (id=1758): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0xffffffffffffffff}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0)={0x0, 0x6c, 0x29}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'cbcmac-aes-neon\x00'}}, &(0x7f0000000400)="bf9e9014b97efb7cdd465f6584f32f0c9749b395fa8f398903e4494d4008efb413ee053491d49a1e4994a7b7e5fa1a6c682a67edb69f97504e665b4aad510f22ea919e7aa6a7f1a90b495cc03dfe7ccee07e7c9100d0f37c4901706af2f137c0e6ff64111049e652ad357ed9", &(0x7f0000000480)=""/41) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x4) 995.551267ms ago: executing program 7 (id=1759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) 955.487888ms ago: executing program 6 (id=1760): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x80801, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000580)={0x320, 0x258, 0x3c00, 0x320, 0xfffffffb, 0x7, 0x8, 0x1, {0x728, 0xffff8598}, {0xa, 0x8}, {0x7e, 0xab, 0x1}, {0x101, 0x20000}, 0x0, 0x40, 0x7, 0xfffffff7, 0x0, 0x8, 0x18000000, 0x0, 0x8, 0x4, 0x0, 0x1, 0x15, 0x4, 0x1, 0x6}) 0s ago: executing program 8 (id=1761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340100006d0001002abd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="c010000000000300150024004cf6931b1f228590ed22aa798131054cbb0000001400030077673200000000000000000000000000080025000000000008001b000000000008001d000002000004002400cc0034801400350074"], 0x134}, 0x1, 0x0, 0x0, 0x40c2}, 0x0) kernel console output (not intermixed with test programs): T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 426.200852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.209772][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.220119][ T6828] device veth0_macvtap entered promiscuous mode [ 426.246860][ T6828] device veth1_macvtap entered promiscuous mode [ 426.307607][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.378225][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.467371][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.637006][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.796239][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.806871][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.819377][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.828651][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.881391][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 427.042757][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 427.664527][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.759927][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.939923][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.093230][ T7113] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 428.696845][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.068543][ T7111] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 429.075112][ T7111] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 429.083143][ T7111] vhci_hcd vhci_hcd.0: Device attached [ 429.092962][ T7112] vhci_hcd: connection closed [ 429.095614][ T4334] vhci_hcd: stop threads [ 429.432035][ T4334] vhci_hcd: release socket [ 429.507079][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.615320][ T7118] loop7: detected capacity change from 0 to 128 [ 429.626830][ T7118] FAT-fs (loop7): Unrecognized mount option " " or missing value [ 429.729988][ T4317] usb 36-1: SetAddress Request (2) to port 0 [ 429.736654][ T4317] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 430.216167][ T4334] vhci_hcd: disconnect device [ 430.221201][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.286683][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.326360][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.471135][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.487255][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 430.498797][ T6714] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.167453][ T6828] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.260772][ T6828] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.269556][ T6828] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.319936][ T6828] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.427613][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.468822][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.511041][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.672942][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.785377][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.803143][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 433.533867][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 433.883335][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.469'. [ 434.806099][ T7173] loop4: detected capacity change from 0 to 64 [ 434.867765][ T7178] trusted_key: encrypted_key: keylen parameter is missing [ 435.298741][ T27] audit: type=1804 audit(1783516465.658:43): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.470" name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dev="loop4" ino=22 res=1 errno=0 [ 435.761444][ T4317] usb 36-1: device descriptor read/8, error -110 [ 436.276700][ T4317] usb usb36-port1: attempt power cycle [ 436.285288][ T27] audit: type=1800 audit(1783516465.658:44): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.470" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=22 res=0 errno=0 [ 438.923160][ T7200] trusted_key: encrypted_key: keylen parameter is missing [ 439.180891][ T4317] usb usb36-port1: unable to enumerate USB device [ 439.930719][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.937262][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.379362][ T7212] block device autoloading is deprecated and will be removed. [ 444.723493][ T7264] trusted_key: encrypted_key: keylen parameter is missing [ 445.209039][ T7270] trusted_key: encrypted_key: keylen parameter is missing [ 451.914312][ T7] libceph: connect (1)[c::]:6789 error -101 [ 451.926271][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 451.927184][ T7337] trusted_key: encrypted_key: keylen parameter is missing [ 452.482916][ T4323] libceph: connect (1)[c::]:6789 error -101 [ 452.746527][ T7330] ceph: No mds server is up or the cluster is laggy [ 452.990061][ T4323] libceph: mon0 (1)[c::]:6789 connect error [ 454.176159][ T7362] trusted_key: encrypted_key: keylen parameter is missing [ 456.229552][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 456.440238][ T26] usb 5-1: device descriptor read/64, error -71 [ 456.719966][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 456.919882][ T26] usb 5-1: device descriptor read/64, error -71 [ 457.060396][ T26] usb usb5-port1: attempt power cycle [ 458.724215][ T7384] loop1: detected capacity change from 0 to 128 [ 458.731394][ T7384] FAT-fs (loop1): Unrecognized mount option " " or missing value [ 458.840575][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 459.235704][ T6714] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 460.169628][ T26] usb 5-1: device descriptor read/8, error -71 [ 466.742150][ T7492] trusted_key: encrypted_key: keylen parameter is missing [ 467.076851][ T7500] loop7: detected capacity change from 0 to 64 [ 468.050251][ T7516] loop4: detected capacity change from 0 to 128 [ 468.057666][ T7516] FAT-fs (loop4): Unrecognized mount option " " or missing value [ 469.009261][ T27] audit: type=1804 audit(1783516498.568:45): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.522" name=2F6E6577726F6F742F32342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 dev="loop7" ino=22 res=1 errno=0 [ 469.245348][ T27] audit: type=1800 audit(1783516498.568:46): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.522" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=22 res=0 errno=0 [ 469.300921][ T6714] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 472.156608][ T7532] loop4: detected capacity change from 0 to 32768 [ 473.052453][ T7532] find_entry called with index >= next_index [ 473.059170][ T7532] find_entry called with index >= next_index [ 473.065325][ T7532] find_entry called with index >= next_index [ 473.071372][ T7532] find_entry called with index >= next_index [ 473.077420][ T7532] find_entry called with index >= next_index [ 473.083703][ T7532] add_index: next_index = 0. Resetting! [ 473.089432][ T7532] find_entry called with index >= next_index [ 473.095544][ T7532] find_entry called with index >= next_index [ 473.101650][ T7532] find_entry called with index >= next_index [ 473.107662][ T7532] find_entry called with index >= next_index [ 473.120838][ T7532] find_entry called with index >= next_index [ 473.127053][ T7532] find_entry called with index >= next_index [ 473.133616][ T7532] find_entry called with index >= next_index [ 473.451039][ T7532] find_entry called with index >= next_index [ 473.467219][ T7532] find_entry called with index >= next_index [ 473.487645][ T7532] find_entry called with index >= next_index [ 475.168238][ T7551] loop5: detected capacity change from 0 to 1024 [ 476.157866][ T7561] trusted_key: encrypted_key: keylen parameter is missing [ 476.956855][ T7571] tmpfs: Bad value for 'mpol' [ 477.699457][ T7573] loop5: detected capacity change from 0 to 1024 [ 477.707258][ T7573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 477.751321][ T7573] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 478.075019][ T7588] overlayfs: missing 'lowerdir' [ 479.581250][ T7583] loop1: detected capacity change from 0 to 32768 [ 480.809916][ T7583] read_mapping_page failed! [ 481.158877][ T5332] EXT4-fs (loop5): unmounting filesystem. [ 481.551476][ T7585] loop4: detected capacity change from 0 to 32768 [ 481.579446][ T7585] find_entry called with index >= next_index [ 481.585493][ T7585] find_entry called with index >= next_index [ 481.591583][ T7585] find_entry called with index >= next_index [ 481.597688][ T7585] find_entry called with index >= next_index [ 481.603745][ T7585] find_entry called with index >= next_index [ 481.609845][ T7585] add_index: next_index = 0. Resetting! [ 481.615547][ T7585] find_entry called with index >= next_index [ 481.621706][ T7585] find_entry called with index >= next_index [ 481.627715][ T7585] find_entry called with index >= next_index [ 481.633769][ T7585] find_entry called with index >= next_index [ 481.647032][ T7585] find_entry called with index >= next_index [ 481.653285][ T7585] find_entry called with index >= next_index [ 481.660528][ T7585] find_entry called with index >= next_index [ 481.683258][ T7583] jfs_mount: Failed to read AGGREGATE_I [ 481.688825][ T7583] Mount JFS Failure: -5 [ 481.931428][ T7583] jfs_mount failed w/return code = -5 [ 484.532078][ T7623] loop5: detected capacity change from 0 to 256 [ 484.649198][ T7623] FAT-fs (loop5): Directory bread(block 64) failed [ 484.879941][ T7623] FAT-fs (loop5): Directory bread(block 65) failed [ 484.886726][ T7623] FAT-fs (loop5): Directory bread(block 66) failed [ 484.923092][ T7627] trusted_key: encrypted_key: keylen parameter is missing [ 485.040955][ T7623] FAT-fs (loop5): Directory bread(block 67) failed [ 485.100594][ T7623] FAT-fs (loop5): Directory bread(block 68) failed [ 485.424829][ T7623] FAT-fs (loop5): Directory bread(block 69) failed [ 485.562236][ T7623] FAT-fs (loop5): Directory bread(block 70) failed [ 485.582124][ T7623] FAT-fs (loop5): Directory bread(block 71) failed [ 485.589722][ T7623] FAT-fs (loop5): Directory bread(block 72) failed [ 485.596699][ T7623] FAT-fs (loop5): Directory bread(block 73) failed [ 486.917032][ T7649] [U]  [ 487.403074][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.551'. [ 488.858883][ T7655] loop4: detected capacity change from 0 to 32768 [ 488.883834][ T7655] find_entry called with index >= next_index [ 488.890029][ T7655] find_entry called with index >= next_index [ 488.896044][ T7655] find_entry called with index >= next_index [ 488.902175][ T7655] find_entry called with index >= next_index [ 488.908263][ T7655] find_entry called with index >= next_index [ 488.914494][ T7655] add_index: next_index = 0. Resetting! [ 488.920183][ T7655] find_entry called with index >= next_index [ 488.926250][ T7655] find_entry called with index >= next_index [ 488.933067][ T7655] find_entry called with index >= next_index [ 488.939130][ T7655] find_entry called with index >= next_index [ 488.952285][ T7655] find_entry called with index >= next_index [ 488.958351][ T7655] find_entry called with index >= next_index [ 488.964445][ T7655] find_entry called with index >= next_index [ 489.890363][ T7663] loop7: detected capacity change from 0 to 32768 [ 491.138294][ T7663] find_entry called with index >= next_index [ 491.144500][ T7663] find_entry called with index >= next_index [ 491.150716][ T7663] find_entry called with index >= next_index [ 491.156895][ T7663] find_entry called with index >= next_index [ 491.163144][ T7663] find_entry called with index >= next_index [ 491.169310][ T7663] add_index: next_index = 0. Resetting! [ 491.175267][ T7663] find_entry called with index >= next_index [ 491.181761][ T7663] find_entry called with index >= next_index [ 491.187943][ T7663] find_entry called with index >= next_index [ 491.194096][ T7663] find_entry called with index >= next_index [ 491.212582][ T7663] find_entry called with index >= next_index [ 491.218778][ T7663] find_entry called with index >= next_index [ 491.225104][ T7663] find_entry called with index >= next_index [ 491.290945][ T7663] find_entry called with index >= next_index [ 491.305344][ T7663] find_entry called with index >= next_index [ 491.318216][ T7663] find_entry called with index >= next_index [ 491.586354][ T7667] trusted_key: encrypted_key: keylen parameter is missing [ 493.393068][ T7681] trusted_key: encrypted_key: keylen parameter is missing [ 493.571483][ T7688] loop6: detected capacity change from 0 to 64 [ 494.552671][ T27] audit: type=1804 audit(1783516524.928:47): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.559" name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dev="loop6" ino=22 res=1 errno=0 [ 495.369084][ T27] audit: type=1800 audit(1783516524.928:48): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.559" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=22 res=0 errno=0 [ 497.044963][ T7705] syz.1.564 (7705): drop_caches: 2 [ 498.233677][ T7723] loop4: detected capacity change from 0 to 128 [ 500.593148][ T7723] EXT4-fs: failed to create workqueue [ 500.598565][ T7723] EXT4-fs (loop4): mount failed [ 501.293141][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.299432][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.744284][ T7753] trusted_key: encrypted_key: keylen parameter is missing [ 503.941246][ T7754] loop1: detected capacity change from 0 to 32768 [ 504.184543][ T7754] XFS (loop1): Mounting V5 Filesystem [ 505.221568][ T7754] XFS (loop1): Ending clean mount [ 505.238114][ T7754] XFS (loop1): Quotacheck needed: Please wait. [ 505.424397][ T7754] XFS (loop1): Quotacheck: Done. [ 508.490068][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 508.546432][ T4273] XFS (loop1): Unmounting Filesystem [ 511.616479][ T7825] UBIFS error (pid: 7825): cannot open "ubifs", error -22 [ 512.745545][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 514.049913][ T7849] trusted_key: encrypted_key: keylen parameter is missing [ 514.276854][ T7840] syz.1.578 (7840) used greatest stack depth: 16864 bytes left [ 515.690333][ T4493] wlan0: Trigger new scan to find an IBSS to join [ 516.313997][ T7867] loop1: detected capacity change from 0 to 32768 [ 516.352884][ T7867] find_entry called with index >= next_index [ 516.359061][ T7867] find_entry called with index >= next_index [ 516.365324][ T7867] find_entry called with index >= next_index [ 516.371718][ T7867] find_entry called with index >= next_index [ 516.377734][ T7867] find_entry called with index >= next_index [ 516.383925][ T7867] add_index: next_index = 0. Resetting! [ 516.389654][ T7867] find_entry called with index >= next_index [ 516.395965][ T7867] find_entry called with index >= next_index [ 516.402046][ T7867] find_entry called with index >= next_index [ 516.408072][ T7867] find_entry called with index >= next_index [ 516.422457][ T7867] find_entry called with index >= next_index [ 516.428545][ T7867] find_entry called with index >= next_index [ 516.434713][ T7867] find_entry called with index >= next_index [ 516.827404][ T7871] trusted_key: encrypted_key: keylen parameter is missing [ 518.729844][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 518.963683][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 519.696357][ T7890] binder: 7889:7890 ioctl 40946400 2000000000c0 returned -22 [ 519.714916][ T4325] wlan0: Trigger new scan to find an IBSS to join [ 520.116078][ T7894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.596'. [ 522.643238][ T4325] wlan0: Creating new IBSS network, BSSID 82:15:af:5a:02:68 [ 523.998876][ T7927] bridge0: port 3(syz_tun) entered blocking state [ 524.006202][ T7927] bridge0: port 3(syz_tun) entered disabled state [ 524.025523][ T7927] device syz_tun entered promiscuous mode [ 524.088843][ T7927] bridge0: port 3(syz_tun) entered blocking state [ 524.096307][ T7927] bridge0: port 3(syz_tun) entered forwarding state [ 524.228340][ T7928] trusted_key: encrypted_key: keylen parameter is missing [ 524.359816][ T6714] udevd[6714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 524.393128][ T6714] udevd[6714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 524.463035][ T6714] udevd[6714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 524.516516][ T6714] udevd[6714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 524.648779][ T7937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.604'. [ 526.751659][ T7957] trusted_key: encrypted_key: keylen parameter is missing [ 527.456908][ T7963] netlink: 'syz.7.610': attribute type 2 has an invalid length. [ 527.464924][ T7963] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.610'. [ 529.917420][ T27] audit: type=1326 audit(1783516560.298:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.5.614" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc72a59de59 code=0x0 [ 536.372557][ T8029] trusted_key: encrypted_key: keylen parameter is missing [ 536.734744][ T8034] trusted_key: encrypted_key: keylen parameter is missing [ 539.061168][ T8051] loop4: detected capacity change from 0 to 32768 [ 539.327202][ T8051] find_entry called with index >= next_index [ 539.333424][ T8051] find_entry called with index >= next_index [ 539.339525][ T8051] find_entry called with index >= next_index [ 539.345714][ T8051] find_entry called with index >= next_index [ 539.351760][ T8051] find_entry called with index >= next_index [ 539.357800][ T8051] add_index: next_index = 0. Resetting! [ 539.363642][ T8051] find_entry called with index >= next_index [ 539.369644][ T8051] find_entry called with index >= next_index [ 539.375792][ T8051] find_entry called with index >= next_index [ 539.381886][ T8051] find_entry called with index >= next_index [ 539.394528][ T8051] find_entry called with index >= next_index [ 539.400653][ T8051] find_entry called with index >= next_index [ 539.406879][ T8051] find_entry called with index >= next_index [ 539.933130][ T8054] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 540.079210][ T8056] trusted_key: encrypted_key: key user:syz not found [ 544.043868][ T8068] netlink: 24 bytes leftover after parsing attributes in process `syz.6.631'. [ 546.222336][ T8092] trusted_key: encrypted_key: keylen parameter is missing [ 546.389610][ T8102] trusted_key: encrypted_key: keylen parameter is missing [ 548.436905][ T8123] syz.4.639 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 550.306932][ T8133] loop4: detected capacity change from 0 to 32768 [ 550.371566][ T8133] find_entry called with index >= next_index [ 550.377647][ T8133] find_entry called with index >= next_index [ 550.383743][ T8133] find_entry called with index >= next_index [ 550.389790][ T8133] find_entry called with index >= next_index [ 550.395857][ T8133] find_entry called with index >= next_index [ 550.402075][ T8133] add_index: next_index = 0. Resetting! [ 550.407824][ T8133] find_entry called with index >= next_index [ 550.413965][ T8133] find_entry called with index >= next_index [ 550.420044][ T8133] find_entry called with index >= next_index [ 550.426473][ T8133] find_entry called with index >= next_index [ 550.440758][ T8133] find_entry called with index >= next_index [ 550.446847][ T8133] find_entry called with index >= next_index [ 550.452907][ T8133] find_entry called with index >= next_index [ 551.211679][ T4288] Bluetooth: hci3: link tx timeout [ 551.216876][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 551.227741][ T4288] Bluetooth: hci3: link tx timeout [ 551.232947][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 551.949813][ T4288] Bluetooth: hci3: link tx timeout [ 551.956816][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 551.964813][ T4288] Bluetooth: hci3: link tx timeout [ 551.969988][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 551.980386][ T4288] Bluetooth: hci3: link tx timeout [ 551.985554][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 551.993466][ T4288] Bluetooth: hci3: link tx timeout [ 551.998598][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 552.502176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 552.625451][ T4493] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 552.970101][ T4288] Bluetooth: hci3: link tx timeout [ 552.975293][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 552.983758][ T4288] Bluetooth: hci3: link tx timeout [ 552.989198][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 553.054904][ T4288] Bluetooth: hci3: link tx timeout [ 553.104948][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 553.113573][ T4288] Bluetooth: hci3: link tx timeout [ 553.119058][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 553.601419][ T4288] Bluetooth: hci3: link tx timeout [ 553.606647][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 553.615082][ T4288] Bluetooth: hci3: link tx timeout [ 553.620486][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 556.358013][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.649'. [ 556.720229][ T8176] trusted_key: encrypted_key: keylen parameter is missing [ 558.153643][ T22] libceph: connect (1)[c::]:6789 error -101 [ 558.164041][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 558.433078][ T22] libceph: connect (1)[c::]:6789 error -101 [ 558.543766][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 558.732689][ T8186] ceph: No mds server is up or the cluster is laggy [ 562.734662][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.741019][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.729093][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.665'. [ 567.321270][ T8288] batman_adv: batadv0: Adding interface: dummy0 [ 567.327664][ T8288] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.352949][ T8288] batman_adv: batadv0: Interface activated: dummy0 [ 567.368359][ T8288] batadv0: mtu less than device minimum [ 567.376094][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 567.388602][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 567.400770][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 567.412866][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 567.425472][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 567.438142][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 567.450895][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 567.463339][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 567.475799][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 574.002446][ T8356] trusted_key: encrypted_key: keylen parameter is missing [ 575.255997][ T8369] trusted_key: encrypted_key: keylen parameter is missing [ 576.825092][ T8379] tmpfs: Unknown parameter 'grpquota2' [ 580.107315][ T8396] loop7: detected capacity change from 0 to 32768 [ 580.134936][ T8396] find_entry called with index >= next_index [ 580.141063][ T8396] find_entry called with index >= next_index [ 580.147190][ T8396] find_entry called with index >= next_index [ 580.153352][ T8396] find_entry called with index >= next_index [ 580.159383][ T8396] find_entry called with index >= next_index [ 580.165565][ T8396] add_index: next_index = 0. Resetting! [ 580.172013][ T8396] find_entry called with index >= next_index [ 580.178035][ T8396] find_entry called with index >= next_index [ 580.184351][ T8396] find_entry called with index >= next_index [ 580.190579][ T8396] find_entry called with index >= next_index [ 580.206958][ T8396] find_entry called with index >= next_index [ 580.213074][ T8396] find_entry called with index >= next_index [ 580.219120][ T8396] find_entry called with index >= next_index [ 581.126727][ T8407] tmpfs: Bad value for 'mpol' [ 582.078541][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 582.137363][ T8413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.695'. [ 583.078600][ T8422] trusted_key: encrypted_key: keylen parameter is missing [ 584.110894][ T8431] trusted_key: encrypted_key: keylen parameter is missing [ 586.159564][ T4387] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 588.929865][ T8473] tmpfs: Bad value for 'mpol' [ 589.857543][ T8485] trusted_key: encrypted_key: keylen parameter is missing [ 591.066100][ T8496] trusted_key: encrypted_key: keylen parameter is missing [ 591.349294][ T8500] loop7: detected capacity change from 0 to 1024 [ 591.365746][ T8500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 591.445207][ T8500] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 596.747034][ T6736] EXT4-fs (loop7): unmounting filesystem. [ 598.762941][ T8542] loop7: detected capacity change from 0 to 256 [ 600.085261][ T8542] FAT-fs (loop7): Directory bread(block 64) failed [ 600.099862][ T8542] FAT-fs (loop7): Directory bread(block 65) failed [ 600.108904][ T8542] FAT-fs (loop7): Directory bread(block 66) failed [ 600.135024][ T8542] FAT-fs (loop7): Directory bread(block 67) failed [ 600.162150][ T8542] FAT-fs (loop7): Directory bread(block 68) failed [ 601.207048][ T8561] syz.4.727 sent an empty control message without MSG_MORE. [ 601.270802][ T8542] FAT-fs (loop7): Directory bread(block 69) failed [ 601.279189][ T8542] FAT-fs (loop7): Directory bread(block 70) failed [ 601.333276][ T8542] FAT-fs (loop7): Directory bread(block 71) failed [ 601.620167][ T8542] FAT-fs (loop7): Directory bread(block 72) failed [ 601.626778][ T8542] FAT-fs (loop7): Directory bread(block 73) failed [ 601.881277][ T8570] trusted_key: encrypted_key: keylen parameter is missing [ 601.921546][ T8573] loop5: detected capacity change from 0 to 1024 [ 602.145262][ T8573] EXT4-fs: Ignoring removed mblk_io_submit option [ 602.497139][ T8573] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 602.880512][ T8581] loop4: detected capacity change from 0 to 1024 [ 603.291787][ T8581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 604.800821][ T8581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 608.311077][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 610.767538][ T8639] trusted_key: encrypted_key: keylen parameter is missing [ 613.580086][ T8659] trusted_key: encrypted_key: insufficient parameters specified [ 619.105491][ T4325] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 619.682087][ T8711] Cannot find set identified by id 0 to match [ 622.109956][ T8711] device batadv_slave_1 entered promiscuous mode [ 622.129836][ T4320] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 622.260572][ T8733] trusted_key: encrypted_key: keylen parameter is missing [ 622.319912][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 622.329624][ T4320] usb 2-1: config 111 has too many interfaces: 116, using maximum allowed: 32 [ 623.200916][ T8710] device batadv_slave_1 left promiscuous mode [ 623.212640][ T4320] usb 2-1: config 111 has an invalid descriptor of length 47, skipping remainder of the config [ 623.223582][ T4320] usb 2-1: config 111 has 0 interfaces, different from the descriptor's value: 116 [ 623.383136][ T4320] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 623.429873][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 623.437993][ T4320] usb 2-1: Product: syz [ 623.495444][ T4320] usb 2-1: Manufacturer: syz [ 623.515688][ T4320] usb 2-1: SerialNumber: syz [ 623.624328][ T8747] loop5: detected capacity change from 0 to 16 [ 623.649250][ T8748] trusted_key: encrypted_key: insufficient parameters specified [ 624.336731][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.353414][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.365604][ T8747] erofs: (device loop5): mounted with root inode @ nid 36. [ 624.442560][ T8741] IPv6: sit1: Disabled Multicast RS [ 625.378873][ T4320] usb 2-1: USB disconnect, device number 2 [ 629.026307][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.7.767'. [ 631.234157][ T8799] trusted_key: encrypted_key: keylen parameter is missing [ 632.745266][ T8805] netlink: 'syz.5.777': attribute type 2 has an invalid length. [ 634.352055][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.7.778'. [ 634.750461][ T8822] netlink: 200 bytes leftover after parsing attributes in process `syz.4.781'. [ 635.883066][ T8811] netlink: 20 bytes leftover after parsing attributes in process `syz.7.778'. [ 639.227827][ T8846] netlink: 23 bytes leftover after parsing attributes in process `syz.6.784'. [ 639.661911][ T8854] trusted_key: encrypted_key: insufficient parameters specified [ 639.809587][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.788'. [ 639.826149][ T8858] xt_TCPMSS: Only works on TCP SYN packets [ 639.837582][ T8858] tmpfs: Bad value for 'mpol' [ 641.310987][ T8868] trusted_key: encrypted_key: keylen parameter is missing [ 646.466664][ T8908] IPv6: Can't replace route, no match found [ 646.696833][ T8915] trusted_key: encrypted_key: insufficient parameters specified [ 649.290350][ T8926] loop4: detected capacity change from 0 to 16 [ 649.660664][ T8926] erofs: (device loop4): mounted with root inode @ nid 36. [ 649.710129][ T8926] IPv6: sit1: Disabled Multicast RS [ 650.241135][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.7.805'. [ 652.380088][ T4288] Bluetooth: hci3: link tx timeout [ 652.385315][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 652.393150][ T4288] Bluetooth: hci3: link tx timeout [ 652.398288][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 657.598920][ T9003] netlink: 23 bytes leftover after parsing attributes in process `syz.4.818'. [ 663.547815][ T9037] loop4: detected capacity change from 0 to 8 [ 665.769903][ T7423] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 665.846124][ T9052] loop4: detected capacity change from 0 to 128 [ 665.917063][ T9052] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 665.952486][ T9052] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 666.306792][ T6714] udevd[6714]: incorrect jbd checksum on /dev/loop4 [ 666.607903][ T9063] loop4: detected capacity change from 0 to 1024 [ 668.488381][ T7423] hfsplus: b-tree write err: -5, ino 25 [ 668.528261][ T7423] hfsplus: b-tree write err: -5, ino 4 [ 668.595822][ T7423] hfsplus: b-tree write err: -5, ino 2 [ 668.772457][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 668.780112][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 669.476578][ T6974] libceph: connect (1)[c::]:6789 error -101 [ 669.495848][ T6974] libceph: mon0 (1)[c::]:6789 connect error [ 669.571871][ T9069] ceph: No mds server is up or the cluster is laggy [ 669.788788][ T9080] loop4: detected capacity change from 0 to 2048 [ 669.940901][ T9080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 672.147329][ T9088] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 672.164528][ T9088] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 672.177907][ T9088] EXT4-fs (loop4): This should not happen!! Data will be lost [ 672.177907][ T9088] [ 672.187617][ T9088] EXT4-fs (loop4): Total free blocks count 0 [ 672.193624][ T9088] EXT4-fs (loop4): Free/Dirty block details [ 672.199565][ T9088] EXT4-fs (loop4): free_blocks=2415919104 [ 672.205434][ T9088] EXT4-fs (loop4): dirty_blocks=39744 [ 672.210819][ T9088] EXT4-fs (loop4): Block reservation details [ 672.216792][ T9088] EXT4-fs (loop4): i_reserved_data_blocks=2484 [ 673.644566][ T7377] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2048 with error 28 [ 673.835499][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 673.855161][ T9042] net_ratelimit: 10 callbacks suppressed [ 673.855168][ T9042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.162385][ T9111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 675.176909][ T9111] xt_TCPMSS: Only works on TCP SYN packets [ 675.187712][ T9111] tmpfs: Bad value for 'mpol' [ 681.207270][ T9157] loop7: detected capacity change from 0 to 1024 [ 681.460292][ T9163] loop5: detected capacity change from 0 to 16 [ 681.888698][ T9163] erofs: (device loop5): erofs_init_device: empty device tag @ pos 0 [ 682.029558][ T9157] EXT4-fs: Ignoring removed mblk_io_submit option [ 682.201249][ T9157] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 682.604057][ T4288] Bluetooth: hci3: link tx timeout [ 682.609322][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 682.659827][ T4288] Bluetooth: hci3: link tx timeout [ 682.665140][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 683.674343][ T4288] Bluetooth: hci3: link tx timeout [ 683.679612][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 683.687401][ T4288] Bluetooth: hci3: link tx timeout [ 683.692986][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 683.982862][ T9170] bond0: (slave bond_slave_1): Releasing backup interface [ 685.372765][ T9170] syz.5.850 uses obsolete (PF_INET,SOCK_PACKET) [ 685.614823][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.621393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.636326][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.050590][ T9197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.853'. [ 687.425611][ T4288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 687.435785][ T4288] CPU: 0 PID: 4288 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 687.443377][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 687.453462][ T4288] Workqueue: hci5 hci_rx_work [ 687.458214][ T4288] Call Trace: [ 687.461519][ T4288] [ 687.464483][ T4288] dump_stack_lvl+0x188/0x24e [ 687.469231][ T4288] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 687.474922][ T4288] ? show_regs_print_info+0x12/0x12 [ 687.480166][ T4288] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 687.485865][ T4288] sysfs_create_dir_ns+0x26a/0x290 [ 687.491038][ T4288] ? __lock_acquire+0x7c40/0x7c40 [ 687.496115][ T4288] ? sysfs_warn_dup+0xa0/0xa0 [ 687.500844][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 687.506085][ T4288] kobject_add_internal+0x617/0xca0 [ 687.511327][ T4288] kobject_add+0x160/0x230 [ 687.515789][ T4288] ? kobject_init+0x1c0/0x1c0 [ 687.520512][ T4288] ? __raw_spin_lock_init+0x41/0x100 [ 687.525835][ T4288] ? klist_children_get+0x50/0x50 [ 687.530915][ T4288] ? get_device_parent+0x121/0x3e0 [ 687.536097][ T4288] device_add+0x470/0x1050 [ 687.540565][ T4288] hci_conn_add_sysfs+0xd1/0x1e0 [ 687.545559][ T4288] le_conn_complete_evt+0xf69/0x1560 [ 687.550900][ T4288] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 687.557199][ T4288] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 687.562888][ T4288] ? mutex_unlock+0x10/0x10 [ 687.567437][ T4288] ? skb_pull_data+0xec/0x1f0 [ 687.572179][ T4288] hci_le_conn_complete_evt+0x183/0x440 [ 687.577787][ T4288] ? hci_remote_host_features_evt+0x230/0x230 [ 687.584001][ T4288] hci_event_packet+0x7b3/0x1290 [ 687.589000][ T4288] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 687.594687][ T4288] ? bis_list+0x280/0x280 [ 687.599325][ T4288] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 687.605016][ T4288] hci_rx_work+0x3eb/0xd40 [ 687.609462][ T4288] ? _raw_spin_unlock+0x40/0x40 [ 687.614373][ T4288] ? process_one_work+0x7b4/0x1160 [ 687.619535][ T4288] process_one_work+0x8ab/0x1160 [ 687.624516][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 687.630279][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 687.635797][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 687.641399][ T4288] ? wq_worker_running+0x97/0x190 [ 687.646487][ T4288] worker_thread+0xaf5/0x12a0 [ 687.651241][ T4288] kthread+0x29d/0x330 [ 687.655340][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 687.660398][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 687.665053][ T4288] ret_from_fork+0x1f/0x30 [ 687.669545][ T4288] [ 687.687305][ T4288] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 687.701466][ T4288] Bluetooth: hci5: failed to register connection device [ 690.465256][ T4281] EXT4-fs: 15 callbacks suppressed [ 690.465272][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 691.056227][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 691.079375][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 691.089841][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 691.131749][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 691.143609][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 691.150933][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 691.698722][ T9257] chnl_net:caif_netlink_parms(): no params data found [ 692.039445][ T9257] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.075213][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.126167][ T9257] device bridge_slave_0 entered promiscuous mode [ 692.384508][ T9257] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.398934][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.451479][ T9257] device bridge_slave_1 entered promiscuous mode [ 692.581379][ T9257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.597608][ T9257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.341196][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 693.850404][ T9257] team0: Port device team_slave_0 added [ 694.426679][ T9257] team0: Port device team_slave_1 added [ 694.825611][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.238134][ T9297] netlink: 16 bytes leftover after parsing attributes in process `syz.6.869'. [ 695.369857][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 695.621411][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.831693][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.860858][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.961471][ T9257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.878192][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.928444][ T9305] lo speed is unknown, defaulting to 1000 [ 696.935237][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.944513][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.970883][ T9257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.982554][ T9305] lo speed is unknown, defaulting to 1000 [ 696.988820][ T9305] lo speed is unknown, defaulting to 1000 [ 697.449838][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 698.357902][ T9305] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 698.412445][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.617053][ T9311] batman_adv: batadv0: Interface deactivated: dummy0 [ 698.624188][ T9311] batman_adv: batadv0: Removing interface: dummy0 [ 698.634565][ T9311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.642419][ T9311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.666057][ T9311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.673918][ T9311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.050011][ T7418] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 699.135763][ T9305] lo speed is unknown, defaulting to 1000 [ 699.284764][ T9305] lo speed is unknown, defaulting to 1000 [ 699.303415][ T9305] lo speed is unknown, defaulting to 1000 [ 699.529877][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 700.370071][ T9305] lo speed is unknown, defaulting to 1000 [ 700.376598][ T9305] lo speed is unknown, defaulting to 1000 [ 700.488808][ T9257] device hsr_slave_0 entered promiscuous mode [ 700.553945][ T9257] device hsr_slave_1 entered promiscuous mode [ 700.621054][ T9257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.681614][ T9257] Cannot create hsr debugfs directory [ 700.864662][ T9305] lo speed is unknown, defaulting to 1000 [ 701.854621][ T4288] Bluetooth: hci3: link tx timeout [ 701.860198][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 701.867907][ T4288] Bluetooth: hci3: link tx timeout [ 701.873485][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.881226][ T4288] Bluetooth: hci3: link tx timeout [ 701.887788][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 701.887840][ T4288] Bluetooth: hci3: link tx timeout [ 701.887873][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 704.864364][ T9354] loop6: detected capacity change from 0 to 1024 [ 704.888666][ T4288] Bluetooth: hci3: link tx timeout [ 704.894334][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 704.902338][ T4288] Bluetooth: hci3: link tx timeout [ 704.907485][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 705.065301][ T9354] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 705.260382][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.885'. [ 706.956887][ T6828] EXT4-fs (loop6): unmounting filesystem. [ 708.007755][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.887'. [ 708.484016][ T9257] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 708.494836][ T4288] Bluetooth: hci3: link tx timeout [ 708.499994][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 708.507732][ T4288] Bluetooth: hci3: link tx timeout [ 708.512886][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 708.554511][ T9257] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 708.944773][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.6.886'. [ 710.383515][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.392606][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.549147][ T9396] slcan: can't register candev [ 710.555036][ T9396] Falling back ldisc for ttyS3. [ 710.912799][ T9257] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 710.955286][ T9257] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 711.101229][ T9257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.149903][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 711.170947][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 712.235662][ T9257] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.275014][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 712.284766][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 712.298562][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.305800][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.412258][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 712.436160][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 712.445370][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 712.464721][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.472032][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.491081][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 712.505173][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 712.621941][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 712.642692][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 712.653184][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 712.663795][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 712.745057][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 712.758361][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 712.777730][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 712.804051][ T9257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 712.836796][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 712.894025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 712.925882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 713.451200][ T56] device hsr_slave_0 left promiscuous mode [ 713.468657][ T56] device hsr_slave_1 left promiscuous mode [ 713.494257][ T56] device bridge_slave_1 left promiscuous mode [ 713.500440][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.524046][ T56] device bridge_slave_0 left promiscuous mode [ 713.537955][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.838740][ T56] device veth1_macvtap left promiscuous mode [ 713.844849][ T56] device veth0_macvtap left promiscuous mode [ 713.854840][ T56] device veth1_vlan left promiscuous mode [ 713.860684][ T56] device veth0_vlan left promiscuous mode [ 719.153157][ T56] team0 (unregistering): Port device team_slave_1 removed [ 719.487081][ T56] team0 (unregistering): Port device team_slave_0 removed [ 719.832314][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.145624][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.004739][ T56] bond0 (unregistering): Released all slaves [ 721.281319][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.896'. [ 721.290426][ T9453] device bridge_slave_1 left promiscuous mode [ 721.298467][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.198929][ T9453] device bridge_slave_0 left promiscuous mode [ 722.205131][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.846174][ T93] block nbd7: Attempted send on invalid socket [ 723.852705][ T93] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 723.874205][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.897'. [ 723.883944][ T9465] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 723.893309][ T9465] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 723.902973][ T9465] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 724.019242][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 724.087900][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 724.181891][ T9257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.004288][ T9491] loop5: detected capacity change from 0 to 64 [ 726.397106][ T4325] kworker/u4:5: attempt to access beyond end of device [ 726.397106][ T4325] loop5: rw=1, sector=161, nr_sectors = 1 limit=64 [ 726.448930][ T4325] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 726.470968][ T4325] kworker/u4:5: attempt to access beyond end of device [ 726.470968][ T4325] loop5: rw=1, sector=162, nr_sectors = 1 limit=64 [ 726.495779][ T4325] Buffer I/O error on dev loop5, logical block 162, lost async page write [ 726.512565][ T4325] kworker/u4:5: attempt to access beyond end of device [ 726.512565][ T4325] loop5: rw=1, sector=163, nr_sectors = 1 limit=64 [ 726.629274][ T4325] Buffer I/O error on dev loop5, logical block 163, lost async page write [ 726.667743][ T4325] kworker/u4:5: attempt to access beyond end of device [ 726.667743][ T4325] loop5: rw=1, sector=167, nr_sectors = 1 limit=64 [ 726.821520][ T4325] Buffer I/O error on dev loop5, logical block 167, lost async page write [ 727.365552][ T4325] kworker/u4:5: attempt to access beyond end of device [ 727.365552][ T4325] loop5: rw=1, sector=169, nr_sectors = 1 limit=64 [ 727.484520][ T4325] Buffer I/O error on dev loop5, logical block 169, lost async page write [ 727.493119][ T4325] kworker/u4:5: attempt to access beyond end of device [ 727.493119][ T4325] loop5: rw=1, sector=171, nr_sectors = 1 limit=64 [ 727.516037][ T4325] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 727.540302][ T4325] kworker/u4:5: attempt to access beyond end of device [ 727.540302][ T4325] loop5: rw=1, sector=172, nr_sectors = 1 limit=64 [ 727.606946][ T4325] Buffer I/O error on dev loop5, logical block 172, lost async page write [ 727.647379][ T4325] kworker/u4:5: attempt to access beyond end of device [ 727.647379][ T4325] loop5: rw=1, sector=173, nr_sectors = 1 limit=64 [ 727.665450][ T4325] Buffer I/O error on dev loop5, logical block 173, lost async page write [ 727.712580][ T4325] kworker/u4:5: attempt to access beyond end of device [ 727.712580][ T4325] loop5: rw=1, sector=174, nr_sectors = 1 limit=64 [ 727.780215][ T4325] Buffer I/O error on dev loop5, logical block 174, lost async page write [ 728.009881][ T4325] kworker/u4:5: attempt to access beyond end of device [ 728.009881][ T4325] loop5: rw=1, sector=175, nr_sectors = 1 limit=64 [ 728.185224][ T4325] Buffer I/O error on dev loop5, logical block 175, lost async page write [ 729.418140][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 729.427542][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 729.458143][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 729.497203][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 729.524757][ T9257] device veth0_vlan entered promiscuous mode [ 729.533322][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 729.552312][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 729.652979][ T9257] device veth1_vlan entered promiscuous mode [ 729.743442][ T9257] device veth0_macvtap entered promiscuous mode [ 729.764137][ T9257] device veth1_macvtap entered promiscuous mode [ 729.773170][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 729.811446][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 730.463433][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 730.623472][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 730.719221][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 730.874826][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 731.051291][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.124863][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.186311][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.260203][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.297162][ T7425] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 731.342056][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.404122][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.471818][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.517251][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 731.568030][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 731.628558][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.683435][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.741463][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.807381][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.871792][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.929643][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.014886][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.039473][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 732.054085][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 732.075957][ T9257] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.096444][ T9257] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.107260][ T9257] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.124057][ T9257] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.583358][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.606266][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.617099][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 732.641185][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.657688][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.670677][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 733.559298][ T9557] loop5: detected capacity change from 0 to 1024 [ 735.284839][ T9552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.292810][ T9552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.432974][ T9552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.440779][ T9552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.858935][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.8.913'. [ 738.877562][ T9589] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 738.887001][ T9589] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 738.896683][ T9589] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 746.732559][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.629999][ T9673] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 750.369715][ T9676] loop5: detected capacity change from 0 to 256 [ 750.410342][ T9676] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 753.457015][ T9701] loop5: detected capacity change from 0 to 512 [ 754.874330][ T7106] block nbd1: Attempted send on invalid socket [ 754.882219][ T7106] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 754.914394][ T9701] EXT4-fs (loop5): Test dummy encryption mode enabled [ 755.002508][ T9701] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 755.044285][ T9701] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.943: bad orphan inode 131083 [ 755.082129][ T9701] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 755.588733][ T9701] EXT4-fs (loop5): unmounting filesystem. [ 756.239595][ T9746] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 757.899240][ T9755] loop8: detected capacity change from 0 to 1024 [ 757.975414][ T9755] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 759.051747][ T9772] overlayfs: missing 'lowerdir' [ 759.060956][ T27] audit: type=1800 audit(1785089654.119:50): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.954" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 759.688189][ T9257] EXT4-fs (loop8): unmounting filesystem. [ 760.107124][ T9767] loop7: detected capacity change from 0 to 2048 [ 760.234254][ T9783] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 760.614985][ T9783] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 760.633817][ T9783] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 761.663418][ T9783] Remounting filesystem read-only [ 761.779506][ T9802] netlink: 44 bytes leftover after parsing attributes in process `syz.6.964'. [ 761.788928][ T9802] netlink: 84 bytes leftover after parsing attributes in process `syz.6.964'. [ 762.226740][ T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 763.208915][ T9813] trusted_key: encrypted_key: keylen parameter is missing [ 763.294057][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.301803][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.551735][ T6736] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 764.634062][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.642780][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.420963][ T7106] block nbd6: Attempted send on invalid socket [ 775.427289][ T7106] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 775.674843][ T9883] trusted_key: encrypted_key: keylen parameter is missing [ 776.634145][ T9887] ubi31: attaching mtd0 [ 776.719363][ T9887] ubi31: scanning is finished [ 776.762477][ T9887] ubi31: empty MTD device detected [ 776.997394][ T9898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.005147][ T9898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.017472][ T9898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.025081][ T9898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.032565][ T4360] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 777.247191][ T4360] usb 9-1: Using ep0 maxpacket: 32 [ 777.267724][ T4360] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 777.517458][ T4360] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.631651][ T4360] usb 9-1: config 0 descriptor?? [ 780.267894][ T9887] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 780.310976][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.987'. [ 781.759228][ T4360] usb 9-1: can't set config #0, error -71 [ 781.768146][ T4360] usb 9-1: USB disconnect, device number 2 [ 784.522738][ T9925] fuse: Bad value for 'fd' [ 784.718955][ T9942] capability: warning: `syz.1.994' uses deprecated v2 capabilities in a way that may be insecure [ 785.189686][ T9962] trusted_key: encrypted_key: keylen parameter is missing [ 786.693580][ T7106] block nbd8: Attempted send on invalid socket [ 786.699954][ T7106] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 792.471772][T10021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.479503][T10021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.259156][T10021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.267490][T10021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.384225][ T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 794.781788][T10028] loop6: detected capacity change from 0 to 256 [ 796.922851][T10040] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1008'. [ 796.931938][T10040] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1008'. [ 797.986321][T10054] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1012'. [ 797.995710][T10054] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1012'. [ 798.917360][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1011'. [ 798.926574][T10060] device bridge_slave_1 left promiscuous mode [ 798.934476][T10060] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.335227][T10060] device bridge_slave_0 left promiscuous mode [ 799.342471][T10060] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.793578][T10078] input: syz0 as /devices/virtual/input/input9 [ 800.800398][T10078] input: failed to attach handler leds to device input9, error: -6 [ 802.811260][T10076] tipc: Started in network mode [ 802.816322][T10076] tipc: Node identity 4, cluster identity 4711 [ 802.822566][T10076] tipc: Node number set to 4 [ 803.962154][T10095] loop7: detected capacity change from 0 to 256 [ 803.983013][T10095] FAT-fs (loop7): "posix" option is obsolete, not supported now [ 806.119916][T10115] loop8: detected capacity change from 0 to 256 [ 808.029427][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.059582][T10130] loop5: detected capacity change from 0 to 512 [ 808.139439][T10130] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 808.192931][T10130] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.408093][T10143] IPv6: Can't replace route, no match found [ 809.650593][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 811.836540][ T5332] EXT4-fs (loop5): unmounting filesystem. [ 815.920919][T10175] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 815.948899][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 815.953319][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 815.979712][T10175] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 815.985830][T10175] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 815.991845][T10175] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 816.002901][T10175] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 816.010300][T10175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 816.016359][T10175] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 816.023791][T10175] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 816.031608][T10175] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 816.037634][T10175] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 816.047397][T10175] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 817.765625][T10192] Bluetooth: hci3: link tx timeout [ 817.770931][T10192] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 817.778651][T10192] Bluetooth: hci3: link tx timeout [ 817.783801][T10192] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 818.147873][T10192] Bluetooth: hci3: command 0x0c1a tx timeout [ 818.234890][T10192] Bluetooth: hci4: command 0x0c1a tx timeout [ 818.240991][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout [ 818.247032][ T4288] Bluetooth: hci5: command 0x0c1a tx timeout [ 818.268090][T10208] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 818.704766][T10200] syz.1.1039 (10200): drop_caches: 2 [ 818.960608][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 818.969689][T10212] device bridge_slave_1 left promiscuous mode [ 818.976405][T10212] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.064043][T10212] device bridge_slave_0 left promiscuous mode [ 819.071488][T10212] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.049927][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 821.057683][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 821.120595][T10192] Bluetooth: hci4: command 0x0406 tx timeout [ 822.063398][T10222] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1044'. [ 822.075412][T10235] loop5: detected capacity change from 0 to 256 [ 822.429146][T10235] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 824.577203][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1049'. [ 824.932368][T10257] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1051'. [ 824.941443][T10257] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1051'. [ 827.189876][T10251] IPVS: stopping master sync thread 6017 ... [ 827.602427][T10282] trusted_key: encrypted_key: keylen parameter is missing [ 830.942993][T10309] lo speed is unknown, defaulting to 1000 [ 832.149593][ T4317] kernel write not supported for file /input/mouse0 (pid: 4317 comm: kworker/1:4) [ 833.981829][T10334] 9pnet_fd: p9_fd_create_tcp (10334): problem connecting socket to 127.0.0.1 [ 836.296680][T10352] loop7: detected capacity change from 0 to 512 [ 837.166071][T10352] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 837.189840][T10352] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.328599][T10365] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 838.808470][ T6736] EXT4-fs (loop7): unmounting filesystem. [ 839.369555][T10388] tipc: Enabled bearer , priority 0 [ 841.692570][ T4288] Bluetooth: hci3: link tx timeout [ 841.697821][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 841.705477][ T4288] Bluetooth: hci3: link tx timeout [ 841.710966][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 842.071004][ T4288] Bluetooth: hci3: link tx timeout [ 842.076324][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 842.083979][ T4288] Bluetooth: hci3: link tx timeout [ 842.089143][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 842.175966][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1084'. [ 842.614252][T10417] EXT4-fs: Conflicting test_dummy_encryption options [ 842.943735][T10417] device batadv_slave_0 entered promiscuous mode [ 842.974669][T10431] loop6: detected capacity change from 0 to 16 [ 843.041533][T10431] erofs: (device loop6): erofs_init_device: empty device tag @ pos 0 [ 843.054674][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1083'. [ 843.094068][ T4288] Bluetooth: hci3: link tx timeout [ 843.099410][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 843.108009][ T4288] Bluetooth: hci3: link tx timeout [ 843.113271][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 846.146482][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'. [ 847.829727][T10467] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1091'. [ 847.838883][T10467] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1091'. [ 848.500079][ T4288] Bluetooth: hci3: link tx timeout [ 848.505340][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 848.513086][ T4288] Bluetooth: hci3: link tx timeout [ 848.518232][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 850.314642][T10488] input: syz0 as /devices/virtual/input/input10 [ 851.704844][ T4262] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 852.863313][ T4288] Bluetooth: hci3: link tx timeout [ 852.868575][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 852.886383][ T4288] Bluetooth: hci3: link tx timeout [ 852.894360][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 854.031139][ T4262] usb 6-1: device descriptor read/all, error -71 [ 856.788446][T10529] tipc: Started in network mode [ 856.788544][T10529] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 856.788648][T10529] tipc: Enabled bearer , priority 0 [ 857.051288][ T27] audit: type=1326 audit(1785089748.151:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.1.1102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38b5b9de59 code=0x0 [ 857.379063][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1102'. [ 857.882218][ T4262] tipc: Node number set to 11578026 [ 859.621292][T10557] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1105'. [ 859.630342][T10557] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1105'. [ 862.748209][ T4395] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 862.818115][ T4323] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 863.721926][ T4288] Bluetooth: hci1: SCO packet for unknown connection handle 3072 [ 863.777125][ T4323] usb 8-1: Using ep0 maxpacket: 16 [ 866.574277][ T4323] usb 8-1: device descriptor read/all, error -71 [ 867.068541][T10610] tipc: Started in network mode [ 867.073605][T10610] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 867.081268][T10610] tipc: Enabled bearer , priority 0 [ 867.842229][T10619] loop5: detected capacity change from 0 to 256 [ 867.909346][T10619] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 868.175424][T10631] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 868.175424][T10631] The task syz.7.1122 (10631) triggered the difference, watch for misbehavior. [ 868.257792][T10632] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1121'. [ 868.267054][T10632] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1121'. [ 868.301192][ T4319] tipc: Node number set to 11578026 [ 870.951707][T10635] netlink: 'syz.5.1119': attribute type 4 has an invalid length. [ 871.424269][ T4319] lo speed is unknown, defaulting to 1000 [ 873.651996][T10661] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 874.351066][T10675] tipc: Started in network mode [ 874.356288][T10675] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 874.365601][T10675] tipc: Enabled bearer , priority 0 [ 874.593145][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.711482][ T4319] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 874.910610][T10657] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1125'. [ 875.005768][ T4319] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 875.014367][ T4319] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 875.380953][ T4319] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 875.393820][ T4319] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 875.401846][ T4319] usb 2-1: Manufacturer: syz [ 875.409649][ T4319] usb 2-1: config 0 descriptor?? [ 875.431638][ T4319] igorplugusb 2-1:0.0: incorrect number of endpoints [ 875.567230][ T4319] tipc: Node number set to 11578026 [ 875.586461][T10682] loop5: detected capacity change from 0 to 512 [ 875.714165][T10682] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 875.744727][T10682] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 877.246064][T10685] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 877.276472][ T4319] usb 2-1: USB disconnect, device number 3 [ 879.807052][ T5332] EXT4-fs (loop5): unmounting filesystem. [ 880.767273][T10709] block nbd1: NBD_DISCONNECT [ 880.772783][T10709] block nbd1: Send disconnect failed -32 [ 880.779235][T10708] block nbd1: Disconnected due to user request. [ 880.785902][T10708] block nbd1: shutting down sockets [ 881.058925][T10718] input: syz0 as /devices/virtual/input/input11 [ 884.098549][T10747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.375023][T10779] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 888.730008][T10780] block nbd5: NBD_DISCONNECT [ 888.740521][T10780] block nbd5: Disconnected due to user request. [ 888.746947][T10780] block nbd5: shutting down sockets [ 889.080962][ T4288] Bluetooth: hci3: link tx timeout [ 889.086860][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 889.094555][ T4288] Bluetooth: hci3: link tx timeout [ 889.100247][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 893.586125][T10830] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 893.668880][T10835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.717788][T10839] trusted_key: encrypted_key: keylen parameter is missing [ 893.747498][T10838] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 893.771530][T10838] dns_resolver: Unsupported server list version (0) [ 893.951796][T10809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 893.958401][T10809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 893.964782][T10809] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 893.970855][T10809] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 893.979402][T10809] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 893.986831][T10809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 893.992991][T10809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 894.230575][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 894.266622][T10854] trusted_key: encrypted_key: keylen parameter is missing [ 894.958674][T10866] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 896.243924][ T4289] Bluetooth: hci5: command 0x0c1a tx timeout [ 896.250826][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout [ 896.267010][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 896.273090][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 898.758171][T10192] Bluetooth: hci5: command 0x0406 tx timeout [ 899.516437][ T4348] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 901.376453][T10192] Bluetooth: hci0: unexpected event for opcode 0x200c [ 901.422259][T10935] trusted_key: encrypted_key: keylen parameter is missing [ 902.922417][ T93] block nbd8: Attempted send on invalid socket [ 902.928690][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 903.031375][T10948] SQUASHFS error: Failed to read block 0x0: -5 [ 903.091736][T10948] unable to read squashfs_super_block [ 905.372945][T10946] syz.6.1176 (10946): drop_caches: 2 [ 905.490578][T10960] trusted_key: encrypted_key: keylen parameter is missing [ 905.566265][T10949] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.575594][T10949] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.584393][T10949] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.593195][T10949] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.669219][T10962] Bluetooth: MGMT ver 1.22 [ 905.709382][T10949] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.718461][T10949] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.727428][T10949] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.736397][T10949] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.270718][T10942] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.279546][T10942] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.288272][T10942] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.296977][T10942] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.311593][T10942] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.321031][T10942] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.330066][T10942] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.338915][T10942] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.863658][T10998] tmpfs: Unknown parameter 'grpquota2' [ 911.889952][T11022] trusted_key: encrypted_key: keylen parameter is missing [ 914.135153][ T7106] block nbd6: Attempted send on invalid socket [ 914.141458][ T7106] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 914.220397][T11047] netlink: 'syz.8.1193': attribute type 10 has an invalid length. [ 914.228756][T11047] tipc: Resetting bearer [ 914.247985][T11047] tipc: Resetting bearer [ 914.257518][T11047] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.275231][T11047] bond0: (slave team0): Enslaving as an active interface with an up link [ 914.476337][T11044] SQUASHFS error: Failed to read block 0x0: -5 [ 914.848803][T11044] unable to read squashfs_super_block [ 916.002398][T11062] loop7: detected capacity change from 0 to 164 [ 918.081162][T11061] xt_TPROXY: Can be used only with -p tcp or -p udp [ 918.114675][T11061] loop8: detected capacity change from 0 to 16 [ 918.124727][T11061] erofs: Unknown parameter 'ip6gre0' [ 918.236684][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1199'. [ 918.826718][ T9597] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 919.249370][T11069] Malformed UNC in devname [ 919.249370][T11069] [ 919.256345][T11069] CIFS: VFS: Malformed UNC in devname [ 919.281766][T11069] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 919.293753][T11069] Cannot find add_set index 0 as target [ 920.062162][T11076] vivid-004: disconnect [ 920.214509][T11081] trusted_key: encrypted_key: keylen parameter is missing [ 920.956058][T11070] vivid-004: reconnect [ 923.644691][T11114] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 925.303006][T11144] mmap: syz.8.1210 (11144) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 926.841817][T11156] trusted_key: encrypted_key: keylen parameter is missing [ 933.178358][T11221] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1226'. [ 933.956112][ T4325] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 934.823468][T11245] input: syz0 as /devices/virtual/input/input12 [ 935.942226][ T93] block nbd5: Attempted send on invalid socket [ 935.948490][ T93] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 935.958036][T11254] SQUASHFS error: Failed to read block 0x0: -5 [ 936.006614][T11254] unable to read squashfs_super_block [ 937.190876][T11271] netlink: 'syz.6.1234': attribute type 13 has an invalid length. [ 937.246680][T11273] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 937.279495][T11271] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 937.296328][T11271] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 937.379777][T11271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 937.402072][T11271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 938.328702][T11292] tmpfs: Unknown parameter 'grpquota2' [ 938.523767][T11296] loop6: detected capacity change from 0 to 256 [ 938.536798][T11296] exfat: Deprecated parameter 'utf8' [ 938.896721][T11296] exFAT-fs (loop6): bogus number of FAT structure [ 938.971812][T11296] exFAT-fs (loop6): failed to read boot sector [ 939.087133][T11296] exFAT-fs (loop6): failed to recognize exfat type [ 941.307502][T11316] binder: 11309:11316 ioctl 4018620d 0 returned -22 [ 941.344141][T11316] binder: 11309:11316 ioctl c0306201 0 returned -14 [ 941.391636][T11316] binder: 11309:11316 ioctl c0306201 0 returned -14 [ 941.415518][T11316] binder: 11309:11316 ioctl c0306201 0 returned -14 [ 941.437390][T11316] binder: 11309:11316 ioctl c0306201 0 returned -14 [ 942.314970][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 945.268210][T11326] input: syz0 as /devices/virtual/input/input13 [ 945.411310][T11333] MPI: mpi too large (110728 bits) [ 946.907756][T11345] vivid-004: disconnect [ 947.510720][ T27] audit: type=1326 audit(1785089832.063:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.6.1249" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39de59 code=0x0 [ 949.225196][T11340] vivid-004: reconnect [ 949.737123][T11377] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 950.194718][T11380] loop6: detected capacity change from 0 to 512 [ 950.203974][T11380] ext4: Unknown parameter 'context' [ 951.033579][ T9609] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 954.097669][T11409] netlink: 'syz.7.1258': attribute type 10 has an invalid length. [ 954.105997][T11409] tipc: Resetting bearer [ 954.123538][T11409] tipc: Resetting bearer [ 954.132125][T11409] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.145738][T11409] bond0: (slave team0): Enslaving as an active interface with an up link [ 957.260379][T10192] Bluetooth: hci1: Malformed LE Event: 0x0d [ 958.456491][T11429] loop6: detected capacity change from 0 to 128 [ 958.469774][T11429] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 958.483514][T11429] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 959.531981][T11439] hub 8-0:1.0: USB hub found [ 959.539332][T11439] hub 8-0:1.0: 1 port detected [ 959.987943][ T9609] udevd[9609]: incorrect jbd checksum on /dev/loop6 [ 961.466644][T11459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 961.480445][T11459] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 961.519336][T11459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 961.564816][T11459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 965.101982][T10192] Bluetooth: hci3: link tx timeout [ 965.107311][T10192] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 965.115473][T10192] Bluetooth: hci3: link tx timeout [ 965.120644][T10192] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 966.523057][T11502] overlayfs: overlapping lowerdir path [ 966.663094][T11504] overlayfs: overlapping lowerdir path [ 967.671340][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1273'. [ 970.249954][ T7425] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 970.346567][T11532] loop8: detected capacity change from 0 to 128 [ 970.375534][T11532] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 970.387888][T11532] hpfs: filesystem error: improperly stopped [ 970.394034][T11532] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 970.401823][T11532] hpfs: You really don't want any checks? You are crazy... [ 970.409115][T11532] hpfs: Code page index out of array [ 970.414593][T11532] hpfs: code page support is disabled [ 970.430783][T11532] hpfs: hpfs_map_4sectors(): unaligned read [ 970.439391][T11532] hpfs: hpfs_map_4sectors(): unaligned read [ 970.445370][T11532] hpfs: filesystem error: unable to find root dir [ 970.505239][T11532] hpfs: hpfs_map_sector(): read error [ 970.511340][T11532] hpfs: hpfs_map_sector(): read error [ 972.554922][ T27] audit: type=1326 audit(1785089855.486:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.1.1284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b5b9de59 code=0x7ffc0000 [ 972.806611][T11532] Cannot find set identified by id 0 to match [ 973.138743][ T27] audit: type=1326 audit(1785089855.486:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.1.1284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b5b9de59 code=0x7ffc0000 [ 973.217205][T11552] binder: 11548:11552 ioctl c00c620f 2000000003c0 returned -22 [ 973.244498][T11552] block device autoloading is deprecated and will be removed. [ 973.948175][ T27] audit: type=1326 audit(1785089855.486:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.1.1284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f38b5b9de59 code=0x7ffc0000 [ 973.973036][ T27] audit: type=1326 audit(1785089855.486:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.1.1284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b5b9de59 code=0x7ffc0000 [ 973.999526][ T27] audit: type=1326 audit(1785089855.486:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.1.1284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b5b9de59 code=0x7ffc0000 [ 974.024485][ T27] audit: type=1326 audit(1785089855.486:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.1.1284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f38b5b9de59 code=0x7ffc0000 [ 974.058045][ T27] audit: type=1326 audit(1785089855.486:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.1.1284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b5b9de59 code=0x7ffc0000 [ 974.083243][ T27] audit: type=1326 audit(1785089855.486:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.1.1284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b5b9de59 code=0x7ffc0000 [ 974.107581][ T27] audit: type=1326 audit(1785089855.486:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.1.1284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f38b5b9de59 code=0x7ffc0000 [ 974.153566][ T27] audit: type=1326 audit(1785089855.486:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.1.1284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b5b9de59 code=0x7ffc0000 [ 977.192564][T11582] loop8: detected capacity change from 0 to 164 [ 977.203029][T10192] Bluetooth: hci0: Malformed LE Event: 0x0d [ 977.340032][T11579] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1291'. [ 978.230896][T11594] I/O error, dev loop11, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 978.241706][T11594] hfsplus: unable to find HFS+ superblock [ 979.609567][T11599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 982.263341][ T4325] nci: nci_rsp_packet: unknown rsp opcode 0xc06 [ 984.652007][T10192] Bluetooth: hci4: Malformed LE Event: 0x0d [ 985.055140][T11623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 986.461592][T11658] ALSA: mixer_oss: invalid OSS volume '' [ 987.508708][T11655] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 987.515289][T11655] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 987.523500][T11655] vhci_hcd vhci_hcd.0: Device attached [ 987.533993][T11656] vhci_hcd: connection closed [ 987.551972][ T5331] vhci_hcd: stop threads [ 987.752295][ T5331] vhci_hcd: release socket [ 987.757051][ T5331] vhci_hcd: disconnect device [ 987.974208][T11665] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 987.982612][T11665] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 987.991159][T11665] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 992.059145][T11689] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 992.897436][T11694] device ip6erspan0 entered promiscuous mode [ 997.789238][T11742] loop7: detected capacity change from 0 to 256 [ 997.797750][T11741] loop5: detected capacity change from 0 to 128 [ 998.386862][T11741] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 998.401430][T11742] exfat: Deprecated parameter 'utf8' [ 998.437501][T11742] exFAT-fs (loop7): bogus number of FAT structure [ 998.461392][T11742] exFAT-fs (loop7): failed to read boot sector [ 998.581992][T11742] exFAT-fs (loop7): failed to recognize exfat type [ 998.582307][T11741] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 998.693752][T11751] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1334'. [ 998.712844][T11751] netlink: 124 bytes leftover after parsing attributes in process `syz.8.1334'. [ 999.354946][ T9597] udevd[9597]: incorrect jbd checksum on /dev/loop5 [ 1004.771522][T11791] hub 8-0:1.0: USB hub found [ 1004.778884][T11791] hub 8-0:1.0: 1 port detected [ 1004.893298][ T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1006.523863][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1006.774221][T11819] lo speed is unknown, defaulting to 1000 [ 1008.512894][T11833] I/O error, dev loop13, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1008.512994][T11833] hfsplus: unable to find HFS+ superblock [ 1009.983513][T11849] trusted_key: encrypted_key: keylen parameter is missing [ 1011.554001][T11852] loop8: detected capacity change from 0 to 128 [ 1011.569893][T11852] EXT4-fs warning (device loop8): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1011.732887][T11852] EXT4-fs (loop8): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1011.767940][ T9609] udevd[9609]: incorrect jbd checksum on /dev/loop8 [ 1013.276355][T11866] loop8: detected capacity change from 0 to 1024 [ 1013.405314][T11870] affs: No valid root block on device nullb0 [ 1013.564305][T11875] capability: warning: `syz.6.1353' uses 32-bit capabilities (legacy support in use) [ 1013.863811][ T7073] hfsplus: b-tree write err: -5, ino 25 [ 1013.884279][ T7073] hfsplus: b-tree write err: -5, ino 4 [ 1013.916786][ T7073] hfsplus: b-tree write err: -5, ino 2 [ 1013.979281][T11884] overlayfs: overlapping lowerdir path [ 1014.034229][ T5313] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1014.127937][T11893] overlayfs: overlapping lowerdir path [ 1014.959902][ T5313] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1016.585697][ T5313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.831379][ T5313] usb 7-1: config 0 descriptor?? [ 1017.118377][ T5313] usb 7-1: can't set config #0, error -71 [ 1017.144331][ T5313] usb 7-1: USB disconnect, device number 2 [ 1018.326450][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 1018.326498][ T27] audit: type=1326 audit(1785089898.327:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.5.1358" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72a59de59 code=0x0 [ 1018.992602][T11931] trusted_key: encrypted_key: keylen parameter is missing [ 1019.864701][T11921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.069635][T11947] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1365'. [ 1027.092741][ T27] audit: type=1326 audit(1785089906.525:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.6.1373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4ff39de59 code=0x0 [ 1027.486252][T11987] hub 1-0:1.0: USB hub found [ 1027.527414][T11987] hub 1-0:1.0: 1 port detected [ 1028.471793][T12004] trusted_key: encrypted_key: keylen parameter is missing [ 1028.738526][ T7425] wlan0: Trigger new scan to find an IBSS to join [ 1028.939692][T12010] loop8: detected capacity change from 0 to 512 [ 1029.728127][T12010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1029.789048][T12010] System zones: 1-12 [ 1029.850524][ T5331] wlan0: Trigger new scan to find an IBSS to join [ 1030.187776][T12010] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.1378: missing EA_INODE flag [ 1030.497228][T12010] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1378: error while reading EA inode 12 err=-117 [ 1030.721994][T12010] EXT4-fs (loop8): 1 orphan inode deleted [ 1030.730487][ T27] audit: type=1800 audit(1785089909.940:97): pid=12019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1379" name="bus" dev="ramfs" ino=59793 res=0 errno=0 [ 1030.763161][T12010] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1033.131463][ T7422] wlan0: Trigger new scan to find an IBSS to join [ 1033.317762][T12042] ubi0: attaching mtd0 [ 1033.331496][T12042] ubi0: scanning is finished [ 1033.574450][T12044] loop7: detected capacity change from 0 to 256 [ 1033.582491][T12044] FAT-fs (loop7): Unrecognized mount option "nonumtail90" or missing value [ 1033.730382][ T9257] EXT4-fs (loop8): unmounting filesystem. [ 1033.751298][T12042] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1033.758891][T12042] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1033.766302][T12042] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1033.773389][T12042] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1033.780887][T12042] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1033.813862][T12042] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1033.822516][T12042] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 251655731 [ 1033.832523][T12042] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1033.844323][T12047] ubi0: background thread "ubi_bgt0d" started, PID 12047 [ 1034.039961][ T6609] wlan0: Trigger new scan to find an IBSS to join [ 1038.941198][T12080] bond0: (slave bond_slave_1): Releasing backup interface [ 1039.290323][ T4348] wlan0: Creating new IBSS network, BSSID 3a:4e:70:39:a9:d1 [ 1039.298200][T12092] trusted_key: encrypted_key: keylen parameter is missing [ 1039.344520][ T7422] wlan0: Creating new IBSS network, BSSID 4a:c2:e0:b4:97:80 [ 1039.533289][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1392'. [ 1039.769651][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1392'. [ 1042.256242][ T4317] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1042.279812][T12123] loop6: detected capacity change from 0 to 256 [ 1043.430033][ T4317] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1043.678815][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.869764][ T4317] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1043.947961][T12145] Invalid ELF header type: 3 != 1 [ 1043.998865][T12145] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1399'. [ 1044.083902][ T4317] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1044.444563][ T4317] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1044.463044][ T4317] usb 6-1: Manufacturer: syz [ 1044.505081][T12144] loop7: detected capacity change from 0 to 1024 [ 1044.534737][ T4317] usb 6-1: config 0 descriptor?? [ 1044.566455][T12144] EXT4-fs: Ignoring removed oldalloc option [ 1044.572511][T12144] EXT4-fs: Ignoring removed oldalloc option [ 1044.689143][T12144] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1044.698157][ T4317] usb 6-1: can't set config #0, error -71 [ 1044.731083][ T4317] usb 6-1: USB disconnect, device number 4 [ 1046.534659][T12168] trusted_key: encrypted_key: keylen parameter is missing [ 1047.252487][T12166] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1047.440377][ T6736] EXT4-fs (loop7): unmounting filesystem. [ 1047.824049][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1406'. [ 1050.825349][T12200] loop5: detected capacity change from 0 to 512 [ 1050.906647][T12200] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1050.935823][T12200] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.145102][T10192] Bluetooth: hci4: command 0x0405 tx timeout [ 1054.388382][T10192] Bluetooth: hci3: link tx timeout [ 1054.393619][T10192] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1054.471453][T10192] Bluetooth: hci3: link tx timeout [ 1054.478984][T10192] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1054.518238][T12250] trusted_key: encrypted_key: keylen parameter is missing [ 1054.558765][ T5332] EXT4-fs (loop5): unmounting filesystem. [ 1054.657181][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1416'. [ 1055.319638][T12260] loop5: detected capacity change from 0 to 8192 [ 1055.430097][T12260] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1055.592522][ T27] audit: type=1804 audit(1785089933.120:98): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1421" name="/newroot/268/file0/file0" dev="loop5" ino=1048632 res=1 errno=0 [ 1056.560007][T12269] loop8: detected capacity change from 0 to 2048 [ 1056.569231][T12270] binder: 12262:12270 ioctl c0306201 0 returned -14 [ 1056.598469][T12269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1057.798884][T12285] bond0: (slave bond_slave_1): Releasing backup interface [ 1059.561476][T12307] loop6: detected capacity change from 0 to 128 [ 1059.575399][T12307] UDF-fs: bad mount option "gid=ÿ" or missing value [ 1059.904772][T12311] overlayfs: failed to resolve './file1': -2 [ 1063.727688][T12330] trusted_key: encrypted_key: keylen parameter is missing [ 1063.771480][T12327] loop5: detected capacity change from 0 to 256 [ 1063.781676][T12327] exfat: Deprecated parameter 'namecase' [ 1063.787532][T12327] exfat: Deprecated parameter 'namecase' [ 1063.794072][T12327] exfat: Deprecated parameter 'namecase' [ 1064.064774][T12331] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1064.769087][T12327] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 1064.791641][T12327] binder: 12323:12327 ioctl c0306201 0 returned -14 [ 1066.526085][T12349] loop6: detected capacity change from 0 to 128 [ 1071.430309][T12376] loop6: detected capacity change from 0 to 8192 [ 1072.100515][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1072.118017][T12376] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1072.163726][ T27] audit: type=1804 audit(1785089948.710:99): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1442" name="/newroot/181/file0/file0" dev="loop6" ino=1048636 res=1 errno=0 [ 1073.248484][ T27] audit: type=1326 audit(1785089949.730:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.7.1445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f148819de59 code=0x0 [ 1073.314001][T12398] loop8: detected capacity change from 0 to 256 [ 1073.371772][T12400] hub 1-0:1.0: USB hub found [ 1073.398949][T12398] FAT-fs (loop8): Unrecognized mount option "GPL" or missing value [ 1073.429616][T12400] hub 1-0:1.0: 1 port detected [ 1073.436351][T12402] trusted_key: encrypted_key: keylen parameter is missing [ 1073.476687][T12399] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1073.952607][T12414] loop7: detected capacity change from 0 to 512 [ 1073.959815][T12414] EXT4-fs: Ignoring removed nobh option [ 1073.984513][T12414] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1074.003450][T12414] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #11: block 1: comm syz.7.1451: lblock 0 mapped to illegal pblock 1 (length 1) [ 1074.056210][T12414] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1074.078184][T12414] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:984: inode #11: comm syz.7.1451: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1074.119870][T12414] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.7.1451: ea_inode dec ref err=-117 [ 1074.133759][ T6609] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1074.144055][T12414] EXT4-fs (loop7): 1 orphan inode deleted [ 1074.144095][T12414] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1074.158893][ T7073] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1074.251089][ T6736] EXT4-fs (loop7): unmounting filesystem. [ 1074.710715][T12425] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1452'. [ 1075.438261][ T5331] wlan0: Trigger new scan to find an IBSS to join [ 1076.297984][T10192] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 1076.342497][T10192] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 1076.419995][T12442] trusted_key: encrypted_key: keylen parameter is missing [ 1077.250770][T12449] loop8: detected capacity change from 0 to 256 [ 1077.322446][T12449] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1077.487169][T12449] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1077.543263][T12449] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1077.597081][T12449] UDF-fs: Scanning with blocksize 512 failed [ 1077.604299][T12455] loop7: detected capacity change from 0 to 1024 [ 1077.615167][T12455] EXT4-fs: Ignoring removed oldalloc option [ 1077.625837][T12455] EXT4-fs: Ignoring removed oldalloc option [ 1077.806120][T12449] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1077.914313][T12455] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1078.191827][T12449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1078.996343][T12471] loop5: detected capacity change from 0 to 1024 [ 1079.497922][T12471] EXT4-fs: Ignoring removed oldalloc option [ 1079.519752][ T6736] EXT4-fs (loop7): unmounting filesystem. [ 1079.560133][T12471] EXT4-fs: Ignoring removed oldalloc option [ 1079.648745][T12471] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1080.439897][ T4348] wlan0: Trigger new scan to find an IBSS to join [ 1080.519683][T12488] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1464'. [ 1080.631900][T10192] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1080.640689][T10192] Bluetooth: hci4: Injecting HCI hardware error event [ 1080.650448][ T4288] Bluetooth: hci4: hardware error 0x00 [ 1080.889742][ T5332] EXT4-fs (loop5): unmounting filesystem. [ 1082.169932][ T7422] wlan0: Trigger new scan to find an IBSS to join [ 1082.432675][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1464'. [ 1082.538378][T12493] trusted_key: encrypted_key: keylen parameter is missing [ 1082.932180][ T46] wlan0: Creating new IBSS network, BSSID 06:a8:31:f8:f3:77 [ 1083.023447][ T4288] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1084.577434][ T4288] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1084.879286][T12516] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1468'. [ 1086.054052][ T7418] wlan0: Trigger new scan to find an IBSS to join [ 1086.141065][T12523] trusted_key: encrypted_key: keylen parameter is missing [ 1086.231213][T12526] loop8: detected capacity change from 0 to 64 [ 1086.317565][T12526] MINIX-fs: bad superblock [ 1087.679724][T12543] loop7: detected capacity change from 0 to 2048 [ 1087.897482][T12543] EXT4-fs (loop7): bad block size 65536 [ 1088.788772][ T4325] wlan0: Creating new IBSS network, BSSID ce:84:14:b4:e3:cc [ 1089.591726][T12569] loop8: detected capacity change from 0 to 64 [ 1089.773227][T12569] hfs: part requires an argument [ 1089.908962][T12569] hfs: unable to parse mount options [ 1090.886504][T12580] tipc: Can't bind to reserved service type 2 [ 1090.959359][T12581] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1091.155568][ T4288] Bluetooth: hci5: unexpected event for opcode 0x0c22 [ 1095.964385][ T4317] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1096.220745][ T4317] usb 7-1: Using ep0 maxpacket: 8 [ 1096.233814][ T4317] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1096.382091][ T4317] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1096.748800][ T4317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.786554][T12638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1500'. [ 1096.820124][ T4317] usb 7-1: Product: syz [ 1096.824375][ T4317] usb 7-1: Manufacturer: syz [ 1096.829004][ T4317] usb 7-1: SerialNumber: syz [ 1096.982654][ T4317] usb 7-1: config 0 descriptor?? [ 1097.688810][ T4317] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1097.702432][ T4317] usb 7-1: setting power ON [ 1097.707902][ T4317] dvb-usb: bulk message failed: -22 (2/0) [ 1097.743569][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1097.774654][ T4317] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1097.783854][ T4317] usb 7-1: media controller created [ 1098.259556][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1098.280341][ T4317] usb 7-1: selecting invalid altsetting 6 [ 1098.287658][ T4317] usb 7-1: digital interface selection failed (-22) [ 1098.306355][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 1098.320697][ T4317] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1098.344627][ T4317] usb 7-1: setting power OFF [ 1098.355055][ T4317] dvb-usb: bulk message failed: -22 (2/0) [ 1098.365754][ T4317] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1098.383119][ T4317] (NULL device *): no alternate interface [ 1098.459809][ T4317] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1098.483399][ T4317] usb 7-1: USB disconnect, device number 4 [ 1101.529026][ T4288] Bluetooth: hci1: command 0x0405 tx timeout [ 1102.598503][ T4582] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1102.715715][T12698] trusted_key: encrypted_key: keylen parameter is missing [ 1106.337223][T12725] loop7: detected capacity change from 0 to 256 [ 1106.471204][ T9609] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1106.528174][T10192] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 1106.684191][T10192] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 1108.082143][ T4319] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1108.287567][ T4319] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.348074][ T4319] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 1108.448873][ T4319] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1108.495964][T12768] loop5: detected capacity change from 0 to 2048 [ 1108.507382][ T4319] usb 8-1: Manufacturer: syz [ 1108.591710][ T4319] usb 8-1: config 0 descriptor?? [ 1108.836920][T12768] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1109.118517][ T126] usb 8-1: USB disconnect, device number 4 [ 1110.087946][T10192] Bluetooth: hci3: command 0x0409 tx timeout [ 1110.380805][ T4325] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1110.391186][ T7425] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1111.507364][T12800] loop5: detected capacity change from 0 to 128 [ 1111.862870][T12800] qnx6: unable to set blocksize [ 1112.019808][T10192] Bluetooth: hci5: Malformed Event: 0x2f [ 1112.645289][T12186] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1113.222130][ T4317] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1113.225610][T12186] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.261532][T12186] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1113.293935][T12186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1113.326605][T12186] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1113.363221][T12186] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1113.393080][T12186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.425496][ T4317] usb 8-1: Using ep0 maxpacket: 16 [ 1113.432895][ T4317] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.446769][T12186] usb 6-1: Product: syz [ 1113.467875][T12186] usb 6-1: Manufacturer: syz [ 1113.483493][ T4317] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1113.489381][T12186] usb 6-1: SerialNumber: syz [ 1113.506387][ T4317] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1113.526585][ T4317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.535694][T12186] usb 6-1: config 0 descriptor?? [ 1113.547084][ T4317] usb 8-1: Product: syz [ 1113.551316][ T4317] usb 8-1: Manufacturer: syz [ 1113.563119][T12186] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1113.593919][T12186] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1113.600183][ T4317] usb 8-1: SerialNumber: syz [ 1113.639533][T12186] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1113.873141][ T4317] usb 8-1: 0:2 : does not exist [ 1113.897597][ T4317] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1113.955981][ T126] usb 6-1: USB disconnect, device number 5 [ 1113.965869][ T126] garmin_gps 6-1:0.0: device disconnected [ 1114.026592][ T4317] usb 8-1: USB disconnect, device number 5 [ 1114.060773][ T9609] udevd[9609]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1114.123851][T10192] Bluetooth: hci1: unexpected event for opcode 0x203d [ 1114.238491][ T4392] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1114.464909][ T4392] usb 2-1: Using ep0 maxpacket: 16 [ 1114.495429][ T4392] usb 2-1: config 0 has an invalid interface number: 213 but max is 1 [ 1114.509488][ T4392] usb 2-1: config 0 has no interface number 1 [ 1114.521545][ T4392] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1115.022303][ T7425] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1115.338119][ T4392] usb 2-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1115.347217][ T4392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.359291][ T4392] usb 2-1: Product: syz [ 1115.363747][ T4392] usb 2-1: Manufacturer: syz [ 1115.368363][ T4392] usb 2-1: SerialNumber: syz [ 1115.375590][ T4392] usb 2-1: config 0 descriptor?? [ 1115.395985][ T4392] usb 2-1: selecting invalid altsetting 0 [ 1115.413142][T10192] Bluetooth: hci5: unexpected event for opcode 0x080c [ 1115.450825][ T4392] usb 2-1: Could not set interface, error -22 [ 1115.655187][ T4392] usb 2-1: USB disconnect, device number 4 [ 1117.460329][T12858] loop7: detected capacity change from 0 to 32768 [ 1117.507481][T12858] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1554 (12858) [ 1117.582092][T12858] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1117.630644][T12858] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1117.657584][T12858] BTRFS info (device loop7): using free space tree [ 1117.924451][T12858] BTRFS info (device loop7): enabling ssd optimizations [ 1118.119567][ T6736] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1118.418299][T10192] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1118.429182][T10192] Bluetooth: hci1: Injecting HCI hardware error event [ 1118.438787][ T4288] Bluetooth: hci1: hardware error 0x00 [ 1119.285531][T12930] netlink: zone id is out of range [ 1119.290798][T12930] netlink: zone id is out of range [ 1119.323929][T12930] netlink: zone id is out of range [ 1119.329097][T12930] netlink: zone id is out of range [ 1119.334248][T12930] netlink: zone id is out of range [ 1119.372415][T12930] netlink: zone id is out of range [ 1119.390958][T12930] netlink: zone id is out of range [ 1119.420103][T12930] netlink: zone id is out of range [ 1119.425305][T12930] netlink: zone id is out of range [ 1119.440207][T12930] netlink: zone id is out of range [ 1119.482230][ T9609] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop7 scanned by udevd (9609) [ 1120.990018][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1577'. [ 1121.003003][ T7422] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1121.322334][ T4288] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1121.420566][T12974] loop8: detected capacity change from 0 to 512 [ 1123.952435][T12974] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1127.222301][T13031] bond0: (slave bond_slave_1): Releasing backup interface [ 1128.601477][T13059] loop7: detected capacity change from 0 to 4096 [ 1128.673135][T13059] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1128.731698][T13059] NILFS (loop7): mounting unchecked fs [ 1128.737227][T13059] NILFS (loop7): recovery required for readonly filesystem [ 1129.051798][T13059] NILFS (loop7): write access will be enabled during recovery [ 1130.044012][T13059] NILFS (loop7): recovery complete [ 1130.681298][T13085] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1131.234210][ T4288] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 1133.141436][T13112] netlink: 'syz.5.1614': attribute type 1 has an invalid length. [ 1133.232983][T13112] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1614'. [ 1133.503456][T13121] loop6: detected capacity change from 0 to 16 [ 1133.523159][ T4288] Bluetooth: hci3: link tx timeout [ 1133.528503][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1133.536350][ T4288] Bluetooth: hci3: link tx timeout [ 1133.541499][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1133.555515][T13121] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1133.611541][ T4288] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 1134.128057][T13140] xt_TCPMSS: Only works on TCP SYN packets [ 1134.373086][T13139] loop7: detected capacity change from 0 to 64 [ 1135.228493][T13153] loop7: detected capacity change from 0 to 8 [ 1135.234895][ T126] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1135.320564][T13153] SQUASHFS error: Failed to read block 0x26067d: -5 [ 1135.415790][T13153] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 1135.456528][T13153] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1135.470654][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 1135.480773][ T126] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1135.522060][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.603209][ T126] usb 2-1: config 0 has no interface number 0 [ 1135.643834][ T126] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1135.697273][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.901966][ T126] usb 2-1: Product: syz [ 1135.932833][ T126] usb 2-1: Manufacturer: syz [ 1135.937578][ T126] usb 2-1: SerialNumber: syz [ 1135.974915][ T126] usb 2-1: config 0 descriptor?? [ 1136.006623][ T126] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 1136.026948][ T126] usb 2-1: No valid video chain found. [ 1136.225194][ T126] usb 2-1: USB disconnect, device number 5 [ 1137.574902][T13164] loop8: detected capacity change from 0 to 32768 [ 1137.670637][T13164] [ 1137.670637][T13164] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1137.670637][T13164] [ 1137.739352][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1138.615812][ T46] [ 1138.615812][ T46] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1138.615812][ T46] [ 1138.637137][T13199] loop6: detected capacity change from 0 to 256 [ 1138.702166][ T46] [ 1138.702166][ T46] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1138.702166][ T46] [ 1138.713668][T13199] FAT-fs (loop6): Directory bread(block 1285) failed [ 1138.738418][ T9257] [ 1138.738418][ T9257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1138.738418][ T9257] [ 1138.751657][T13199] FAT-fs (loop6): Directory bread(block 1286) failed [ 1138.758424][T13199] FAT-fs (loop6): Directory bread(block 1287) failed [ 1138.858190][T13199] FAT-fs (loop6): Directory bread(block 1288) failed [ 1138.869657][ T107] [ 1138.869657][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1138.869657][ T107] [ 1138.917190][T13199] FAT-fs (loop6): Directory bread(block 1285) failed [ 1138.946052][ T9257] [ 1138.946052][ T9257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1138.946052][ T9257] [ 1139.667239][T13199] FAT-fs (loop6): Directory bread(block 1286) failed [ 1140.174991][T13199] FAT-fs (loop6): Directory bread(block 1287) failed [ 1140.181773][T13199] FAT-fs (loop6): Directory bread(block 1288) failed [ 1140.299741][T13199] FAT-fs (loop6): Directory bread(block 1285) failed [ 1140.380855][T13216] loop7: detected capacity change from 0 to 2048 [ 1140.390791][T13199] FAT-fs (loop6): Directory bread(block 1286) failed [ 1140.402314][T13216] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=18881, location=18881 [ 1140.438836][T13216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1140.642643][ T4288] Bluetooth: hci3: hcon ffff88807e396000 sent 1 < count 256 [ 1143.203766][T13249] loop6: detected capacity change from 0 to 4096 [ 1143.221451][T13249] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1143.332908][T13249] ntfs: volume version 3.1. [ 1144.012271][T13269] loop5: detected capacity change from 0 to 64 [ 1144.482543][T13277] loop8: detected capacity change from 0 to 16 [ 1144.547448][T13277] erofs: (device loop8): mounted with root inode @ nid 36. [ 1144.575057][ T6609] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1146.001300][T13283] loop5: detected capacity change from 0 to 4096 [ 1146.098194][T13283] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1146.146970][T13283] NILFS (loop5): mounting unchecked fs [ 1146.152491][T13283] NILFS (loop5): recovery required for readonly filesystem [ 1146.233163][T13283] NILFS (loop5): write access will be enabled during recovery [ 1146.436078][ T9609] udevd[9609]: incorrect nilfs2 checksum on /dev/loop5 [ 1146.452653][T13283] NILFS (loop5): recovery complete [ 1146.562257][T13308] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1147.221462][T13310] loop8: detected capacity change from 0 to 16 [ 1147.287777][T13310] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1148.671475][ T4334] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1148.804873][T13338] loop5: detected capacity change from 0 to 1024 [ 1148.848625][T13340] loop7: detected capacity change from 0 to 16 [ 1148.882768][T13340] erofs: (device loop7): mounted with root inode @ nid 36. [ 1148.938894][T13338] hfsplus: type requires a 4 character value [ 1149.000341][T13338] hfsplus: unable to parse mount options [ 1149.555058][T13355] loop7: detected capacity change from 0 to 512 [ 1150.475988][T13355] EXT4-fs: Ignoring removed oldalloc option [ 1150.659385][T13355] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1150.760769][T13355] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1150.834050][T13370] loop5: detected capacity change from 0 to 16 [ 1150.889034][T13370] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1151.235597][T13382] loop5: detected capacity change from 0 to 256 [ 1151.268105][ T6736] EXT4-fs (loop7): unmounting filesystem. [ 1151.711144][T13397] loop7: detected capacity change from 0 to 128 [ 1153.865706][T13430] loop8: detected capacity change from 0 to 65 [ 1154.017204][T13430] BFS-fs: bfs_fill_super(): NOTE: filesystem loop8 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1156.474739][ T7422] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1157.420947][T13466] xt_cgroup: path and classid specified [ 1160.154745][T13503] loop6: detected capacity change from 0 to 512 [ 1160.162209][T13503] EXT4-fs: Ignoring removed oldalloc option [ 1160.270432][T13503] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1160.548552][T13503] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1160.716048][T13514] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1724'. [ 1161.888406][ T6828] EXT4-fs (loop6): unmounting filesystem. [ 1164.664903][T13569] device bridge0 entered promiscuous mode [ 1166.235100][T13590] Unknown options in mask b7f2 [ 1168.423061][T13614] netlink: 'syz.5.1750': attribute type 10 has an invalid length. [ 1168.732717][T13624] loop5: detected capacity change from 0 to 512 [ 1170.048365][T13624] [ 1170.050772][T13624] ====================================================== [ 1170.057802][T13624] WARNING: possible circular locking dependency detected [ 1170.064838][T13624] syzkaller #0 Not tainted [ 1170.069263][T13624] ------------------------------------------------------ [ 1170.076296][T13624] syz.5.1754/13624 is trying to acquire lock: [ 1170.082380][T13624] ffff88807a008c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 1170.092503][T13624] [ 1170.092503][T13624] but task is already holding lock: [ 1170.099880][T13624] ffff888026be6518 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3f6/0x760 [ 1170.109779][T13624] [ 1170.109779][T13624] which lock already depends on the new lock. [ 1170.109779][T13624] [ 1170.120204][T13624] [ 1170.120204][T13624] the existing dependency chain (in reverse order) is: [ 1170.129232][T13624] [ 1170.129232][T13624] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 1170.136820][T13624] down_write+0x36/0x60 [ 1170.141531][T13624] ext4_destroy_inline_data+0x24/0xe0 [ 1170.147460][T13624] ext4_writepages+0x599/0x2e70 [ 1170.152857][T13624] do_writepages+0x3c6/0x640 [ 1170.157998][T13624] filemap_fdatawrite_wbc+0x11e/0x180 [ 1170.163924][T13624] filemap_flush+0xe0/0x140 [ 1170.168976][T13624] ext4_release_file+0x7e/0x300 [ 1170.174382][T13624] __fput+0x20a/0x8b0 [ 1170.178922][T13624] task_work_run+0x1d0/0x260 [ 1170.184071][T13624] do_exit+0x9d5/0x2570 [ 1170.188778][T13624] do_group_exit+0x229/0x2e0 [ 1170.193937][T13624] get_signal+0x1259/0x1340 [ 1170.199006][T13624] arch_do_signal_or_restart+0xc4/0x1310 [ 1170.205203][T13624] exit_to_user_mode_loop+0x70/0x110 [ 1170.211045][T13624] exit_to_user_mode_prepare+0xee/0x180 [ 1170.217149][T13624] irqentry_exit_to_user_mode+0x5/0x30 [ 1170.223164][T13624] exc_page_fault+0x88/0x100 [ 1170.228302][T13624] asm_exc_page_fault+0x22/0x30 [ 1170.233793][T13624] [ 1170.233793][T13624] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 1170.242242][T13624] __lock_acquire+0x2d18/0x7c40 [ 1170.247650][T13624] lock_acquire+0x1bb/0x4a0 [ 1170.252707][T13624] percpu_down_read+0x44/0x1a0 [ 1170.258016][T13624] ext4_writepages+0x213/0x2e70 [ 1170.263402][T13624] do_writepages+0x3c6/0x640 [ 1170.268537][T13624] __writeback_single_inode+0x153/0x1170 [ 1170.274722][T13624] writeback_single_inode+0x3d2/0x8e0 [ 1170.280644][T13624] write_inode_now+0x17f/0x210 [ 1170.286229][T13624] iput+0x643/0x9c0 [ 1170.290597][T13624] ext4_xattr_block_set+0x2487/0x2fe0 [ 1170.296532][T13624] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 1170.302899][T13624] __ext4_expand_extra_isize+0x301/0x3e0 [ 1170.309085][T13624] __ext4_mark_inode_dirty+0x478/0x760 [ 1170.315098][T13624] ext4_evict_inode+0xa67/0x10e0 [ 1170.320588][T13624] evict+0x4b6/0x8b0 [ 1170.325056][T13624] ext4_orphan_cleanup+0xc32/0x1470 [ 1170.330809][T13624] ext4_fill_super+0x6f0c/0x78f0 [ 1170.336306][T13624] get_tree_bdev+0x3e6/0x610 [ 1170.341451][T13624] vfs_get_tree+0x88/0x270 [ 1170.346426][T13624] do_new_mount+0x247/0xa40 [ 1170.351502][T13624] __se_sys_mount+0x2e3/0x3d0 [ 1170.356733][T13624] do_syscall_64+0x4c/0xa0 [ 1170.361706][T13624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1170.368155][T13624] [ 1170.368155][T13624] other info that might help us debug this: [ 1170.368155][T13624] [ 1170.378406][T13624] Possible unsafe locking scenario: [ 1170.378406][T13624] [ 1170.385883][T13624] CPU0 CPU1 [ 1170.391324][T13624] ---- ---- [ 1170.396708][T13624] lock(&ei->xattr_sem); [ 1170.401075][T13624] lock(&sbi->s_writepages_rwsem); [ 1170.408823][T13624] lock(&ei->xattr_sem); [ 1170.415690][T13624] lock(&sbi->s_writepages_rwsem); [ 1170.420915][T13624] [ 1170.420915][T13624] *** DEADLOCK *** [ 1170.420915][T13624] [ 1170.429072][T13624] 3 locks held by syz.5.1754/13624: [ 1170.434302][T13624] #0: ffff88805589e0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x930 [ 1170.445415][T13624] #1: ffff88805589e650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x431/0x10e0 [ 1170.454978][T13624] #2: ffff888026be6518 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3f6/0x760 [ 1170.465332][T13624] [ 1170.465332][T13624] stack backtrace: [ 1170.471249][T13624] CPU: 1 PID: 13624 Comm: syz.5.1754 Not tainted syzkaller #0 [ 1170.478738][T13624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.488826][T13624] Call Trace: [ 1170.492124][T13624] [ 1170.495081][T13624] dump_stack_lvl+0x188/0x24e [ 1170.499803][T13624] ? load_image+0x410/0x410 [ 1170.504347][T13624] ? show_regs_print_info+0x12/0x12 [ 1170.509600][T13624] ? print_circular_bug+0x12b/0x1a0 [ 1170.514852][T13624] check_noncircular+0x296/0x330 [ 1170.519836][T13624] ? look_up_lock_class+0x75/0x140 [ 1170.524970][T13624] ? add_chain_block+0x9b0/0x9b0 [ 1170.529941][T13624] ? lockdep_lock+0xf1/0x1f0 [ 1170.534570][T13624] ? _find_first_zero_bit+0xd2/0x100 [ 1170.539904][T13624] __lock_acquire+0x2d18/0x7c40 [ 1170.544796][T13624] ? verify_lock_unused+0x140/0x140 [ 1170.550023][T13624] ? mark_lock+0x94/0x320 [ 1170.554389][T13624] ? __lock_acquire+0x1465/0x7c40 [ 1170.559482][T13624] lock_acquire+0x1bb/0x4a0 [ 1170.564032][T13624] ? ext4_writepages+0x213/0x2e70 [ 1170.569089][T13624] ? __lock_acquire+0x138a/0x7c40 [ 1170.574143][T13624] ? __might_sleep+0xd0/0xd0 [ 1170.578776][T13624] ? read_lock_is_recursive+0x10/0x10 [ 1170.584184][T13624] ? mark_lock+0x94/0x320 [ 1170.588551][T13624] percpu_down_read+0x44/0x1a0 [ 1170.593350][T13624] ? ext4_writepages+0x213/0x2e70 [ 1170.598411][T13624] ext4_writepages+0x213/0x2e70 [ 1170.603302][T13624] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1170.609323][T13624] ? verify_lock_unused+0x140/0x140 [ 1170.614564][T13624] ? ext4_read_folio+0x370/0x370 [ 1170.619546][T13624] ? mark_lock+0x94/0x320 [ 1170.623931][T13624] ? __lock_acquire+0x1465/0x7c40 [ 1170.629012][T13624] ? __lock_acquire+0x7c40/0x7c40 [ 1170.634629][T13624] ? do_raw_spin_lock+0x128/0x2f0 [ 1170.639700][T13624] ? do_raw_spin_unlock+0x11d/0x230 [ 1170.644936][T13624] ? ext4_read_folio+0x370/0x370 [ 1170.649910][T13624] do_writepages+0x3c6/0x640 [ 1170.654547][T13624] ? __writepage+0x130/0x130 [ 1170.659163][T13624] ? writeback_single_inode+0x3c7/0x8e0 [ 1170.664748][T13624] ? __lock_acquire+0x7c40/0x7c40 [ 1170.669812][T13624] ? do_raw_spin_lock+0x128/0x2f0 [ 1170.674871][T13624] __writeback_single_inode+0x153/0x1170 [ 1170.680544][T13624] writeback_single_inode+0x3d2/0x8e0 [ 1170.685986][T13624] ? write_inode_now+0x210/0x210 [ 1170.690967][T13624] write_inode_now+0x17f/0x210 [ 1170.695759][T13624] ? bdi_split_work_to_wbs+0x8f0/0x8f0 [ 1170.701249][T13624] ? rcu_is_watching+0x11/0xa0 [ 1170.706061][T13624] ? do_raw_spin_unlock+0x11d/0x230 [ 1170.711304][T13624] iput+0x643/0x9c0 [ 1170.715153][T13624] ext4_xattr_block_set+0x2487/0x2fe0 [ 1170.720566][T13624] ? __might_sleep+0xd0/0xd0 [ 1170.725206][T13624] ? ext4_xattr_block_find+0x2c0/0x2c0 [ 1170.730713][T13624] ? ext4_xattr_block_find+0x24a/0x2c0 [ 1170.736226][T13624] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 1170.742094][T13624] __ext4_expand_extra_isize+0x301/0x3e0 [ 1170.747775][T13624] __ext4_mark_inode_dirty+0x478/0x760 [ 1170.753283][T13624] ext4_evict_inode+0xa67/0x10e0 [ 1170.758277][T13624] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1170.764211][T13624] ? do_raw_spin_unlock+0x11d/0x230 [ 1170.769446][T13624] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1170.775376][T13624] evict+0x4b6/0x8b0 [ 1170.779311][T13624] ? proc_nr_inodes+0x2f0/0x2f0 [ 1170.784203][T13624] ? do_raw_spin_unlock+0x11d/0x230 [ 1170.789433][T13624] ? _raw_spin_unlock+0x24/0x40 [ 1170.794312][T13624] ? iput+0x79f/0x9c0 [ 1170.798334][T13624] ext4_orphan_cleanup+0xc32/0x1470 [ 1170.803579][T13624] ? ext4_orphan_del+0xc90/0xc90 [ 1170.808551][T13624] ? ext4_register_sysfs+0x27e/0x2c0 [ 1170.813864][T13624] ? errseq_check_and_advance+0x62/0x120 [ 1170.819531][T13624] ext4_fill_super+0x6f0c/0x78f0 [ 1170.824509][T13624] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1170.830784][T13624] ? set_blocksize+0x1d0/0x470 [ 1170.835575][T13624] ? sb_set_blocksize+0xa5/0xe0 [ 1170.840447][T13624] get_tree_bdev+0x3e6/0x610 [ 1170.845062][T13624] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1170.851344][T13624] vfs_get_tree+0x88/0x270 [ 1170.855794][T13624] do_new_mount+0x247/0xa40 [ 1170.860340][T13624] __se_sys_mount+0x2e3/0x3d0 [ 1170.865055][T13624] ? __x64_sys_mount+0xc0/0xc0 [ 1170.869851][T13624] ? lockdep_hardirqs_on+0x94/0x140 [ 1170.875072][T13624] ? __x64_sys_mount+0x1c/0xc0 [ 1170.879866][T13624] do_syscall_64+0x4c/0xa0 [ 1170.884317][T13624] ? clear_bhb_loop+0x60/0xb0 [ 1170.889033][T13624] ? clear_bhb_loop+0x60/0xb0 [ 1170.893744][T13624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1170.899683][T13624] RIP: 0033:0x7fc72a59f0ca [ 1170.904145][T13624] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.923773][T13624] RSP: 002b:00007fc72b392e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1170.932211][T13624] RAX: ffffffffffffffda RBX: 00007fc72b392ee0 RCX: 00007fc72a59f0ca [ 1170.940212][T13624] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007fc72b392ea0 [ 1170.948229][T13624] RBP: 0000200000000240 R08: 00007fc72b392ee0 R09: 0000000000000000 [ 1170.956241][T13624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1170.964250][T13624] R13: 00007fc72b392ea0 R14: 000000000000047a R15: 000000000000002c [ 1170.972251][T13624] [ 1170.993411][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1765'. [ 1171.037437][T13624] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.1754: iget: bad extra_isize 90 (inode size 256) [ 1171.051052][T13624] EXT4-fs (loop5): Remounting filesystem read-only [ 1171.058280][T13624] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1754: error while reading EA inode 11 err=-117 [ 1171.070935][T13624] EXT4-fs (loop5): Remounting filesystem read-only [ 1171.082936][T13624] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1171.096891][T13624] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.1754: iget: bad extra_isize 90 (inode size 256) [ 1171.111168][T13624] EXT4-fs (loop5): Remounting filesystem read-only [ 1171.117837][T13624] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1754: error while reading EA inode 11 err=-117 [ 1171.131067][T13624] EXT4-fs (loop5): Remounting filesystem read-only [ 1171.139627][T13624] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.1754: iget: bad extra_isize 90 (inode size 256) [ 1171.154139][T13624] EXT4-fs (loop5): Remounting filesystem read-only [ 1171.160807][T13624] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1754: error while reading EA inode 18 err=-117 [ 1171.206596][T13624] EXT4-fs (loop5): Remounting filesystem read-only [ 1171.224814][T13624] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.1754: iget: bad extra_isize 90 (inode size 256) [ 1171.675765][T13624] EXT4-fs (loop5): Remounting filesystem read-only [ 1171.682397][T13624] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1754: error while reading EA inode 18 err=-117 [ 1171.696925][T13624] EXT4-fs (loop5): Remounting filesystem read-only [ 1171.703591][T13624] EXT4-fs (loop5): 1 orphan inode deleted [ 1171.717847][T13624] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1171.738566][T13624] EXT4-fs (loop5): unmounting filesystem. [ 1179.454506][ T4387] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)