last executing test programs: 28m6.784488765s ago: executing program 3 (id=91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xc, 0x800003fffffffffd}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 28m5.33449216s ago: executing program 3 (id=99): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)={{0x10b, 0x96, 0xb, 0x37f, 0x35a, 0x100, 0x367, 0xd}}, 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 28m4.021094046s ago: executing program 3 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4864}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) prlimit64(0x0, 0x2, 0x0, 0x0) 28m1.681062492s ago: executing program 3 (id=108): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000003c00), 0x4, 0x553, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) gettimeofday(0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfee00}], 0x1, 0x1200, 0x30, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x973f, 0x81, 0x1}) 28m0.037954427s ago: executing program 3 (id=115): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) mknod$loop(&(0x7f00000000c0)='./file1/file4/file6\x00', 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x210a, r2}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x1) 27m59.314277369s ago: executing program 3 (id=118): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22b41, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x7, 0x56}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x8, 0xc, 0x6, 0x3, 0x1, 0x3, 0x7, 0xc1, 0x0, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0x6, 0x2, 0x1, 0x9, 0xf, 0x8000000000000000}, {0x2, 0xc8b, 0x5, 0x4, 0x8, 0x6, 0x5, 0x10, 0x5, 0x3, 0x2, 0x24}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27m58.963682739s ago: executing program 32 (id=118): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22b41, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x7, 0x56}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x8, 0xc, 0x6, 0x3, 0x1, 0x3, 0x7, 0xc1, 0x0, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0x6, 0x2, 0x1, 0x9, 0xf, 0x8000000000000000}, {0x2, 0xc8b, 0x5, 0x4, 0x8, 0x6, 0x5, 0x10, 0x5, 0x3, 0x2, 0x24}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26m31.306918772s ago: executing program 4 (id=341): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002800800024000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x79, &(0x7f0000000000)=r7, 0x8) 26m29.984491547s ago: executing program 4 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 26m26.427980208s ago: executing program 4 (id=349): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r3, r4, 0x2f}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 26m25.911954438s ago: executing program 4 (id=354): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mremap(&(0x7f0000040000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 26m23.356020343s ago: executing program 4 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f58965f119"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 26m22.114285993s ago: executing program 4 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 26m21.706552026s ago: executing program 33 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 26m18.536412137s ago: executing program 1 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r4, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050009000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000300000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 26m17.859973525s ago: executing program 1 (id=374): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000000)=0x7, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 26m15.880716457s ago: executing program 1 (id=377): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5455, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1772a, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x4, 0x4, 0xf}], 0x10, 0x11d}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sw_sync(0xffffffffffffff9c, 0x0, 0xf6081, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) 26m12.473290151s ago: executing program 1 (id=382): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mremap(&(0x7f0000040000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 26m9.417171035s ago: executing program 1 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 26m4.984037166s ago: executing program 1 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 26m4.371389561s ago: executing program 34 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 25m24.057062681s ago: executing program 6 (id=398): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mremap(&(0x7f0000040000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 25m20.425736527s ago: executing program 6 (id=466): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 25m17.818412015s ago: executing program 6 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={&(0x7f00000003c0), 0x0, &(0x7f0000000640), &(0x7f0000000100), 0x3}, 0x38) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 25m17.277548106s ago: executing program 35 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={&(0x7f00000003c0), 0x0, &(0x7f0000000640), &(0x7f0000000100), 0x3}, 0x38) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18m47.164976592s ago: executing program 0 (id=1253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000000c0)=r4, 0x4) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) 18m45.702323946s ago: executing program 0 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\\x9e\xbd\x1d\r6\xea\x12+(\x03z', 0x3a, './file0', 0x3a, [0x43]}, 0x35) r5 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r6 = getpid() r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f0000000100)={0xffffffffffffffff, r5}) 18m44.370077561s ago: executing program 0 (id=1259): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4000000, r3}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x30) 18m42.81073604s ago: executing program 0 (id=1264): prctl$PR_SET_IO_FLUSHER(0x34, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 18m40.570845227s ago: executing program 0 (id=1268): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 18m38.810423497s ago: executing program 0 (id=1270): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x3}, @request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x1}, @acquire_done], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x80000000, @ipv4={'\x00', '\xff\xff', @local}, 0x4008}, 0x1c) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f00000000c0)) ioctl$EXT4_IOC_GROUP_ADD(r3, 0xc0185879, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 18m23.227178292s ago: executing program 36 (id=1270): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x3}, @request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x1}, @acquire_done], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x80000000, @ipv4={'\x00', '\xff\xff', @local}, 0x4008}, 0x1c) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85eLRgzrSnbY2djVotRPD53PZh33nC8+7s7zwLvvO/gsfv7O5UWYb+SBaD7wYra2IyV9SpGjFLR/Es89/8+1Tl69eu7jSbq9eSunCypWl51JKc+e+ev29z5/+ejDz2hdzX07F3sIb+z8u/7B3Zu/s/q9X3u6WqVumXn+Q8nS93x/k14tOWu+Wm1lKrxadvOykbq/sbB8Y3yj6W1vDlPfWZ6e3tjtlmfLeMG12hmnQT4PtYcrfyru9lGVZmp0O7sXaZz9VVRVRVSfiZFRVVT0Y09GKh2I25mI+FuLheCQejdPxWJyJx+OJODu6qum+AQAAAAAAAAAAAAAAAAAA4HgZd/5/5q7z/59EjDv/f67h5gEAAAAAAAAAAAAAAAAAAOCYuHz12sWVdnv1UkqnIoqPdtZ21urXenxlI7pRRCcWYz5+jtHp/1pdn4z26mIaWYgPi92b+d2dtYmD+aXR4wTuyl94ub26VOfTwfxUTN+ZX475OD0+v/yH/PlR/lQ8c/6OfBbz8f2b0Y8i1uNG9vf8+0spvfRK+3b+u7167usN3hcAAAD4N2XptrH79yz7s/E6f9jvAzf214tj9/eT8eRks3Mnohy+u5kXRWe78eJWR/U7uxFxRBr7x0UrIo5AG39RnDj0mpkGGvt0JuIe4hMHvkhH4nP+PxaHrRwT/+m6xP1x86ZPNd0HAAAAAAAAAAAAf8/9+Dth03MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAQAA//+siMjP") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f00000000c0)) ioctl$EXT4_IOC_GROUP_ADD(r3, 0xc0185879, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 14m57.150267306s ago: executing program 2 (id=1601): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14m55.297460101s ago: executing program 2 (id=1603): sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000c40)='./file1\x00', 0x810410, &(0x7f00000059c0)=ANY=[], 0x5, 0x1e5, &(0x7f00000001c0)="$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") r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xa50003d1) r1 = open(0x0, 0x10000, 0x0) getdents(r1, 0x0, 0x0) 14m52.770643435s ago: executing program 2 (id=1606): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) socket$nl_route(0x10, 0x3, 0x0) 14m50.39157168s ago: executing program 2 (id=1608): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d16, &(0x7f0000000080)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x80080c4}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 14m45.037959194s ago: executing program 2 (id=1613): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x06O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Tu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x6) fcntl$addseals(r3, 0x409, 0x8) 14m43.815048824s ago: executing program 2 (id=1617): futex(&(0x7f0000000040), 0xb, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1, 0x9) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000000), 0xfc, 0x6e0, &(0x7f0000000580)="$eJzs3c1vHGcdB/Dv7K7fUtE4bdIWVImoEQURkfhFKQQJJSCEfKhQBAckbiZxGiubtLJdcCME4f3aQ/+A9pAbJyTuQeUMFwRHi1MlRC+cfFs0s7Prje111nESx/D5VLPzzDzvv52Z3dnUmgD/txbOpnU/RRbOvrlebm/cm29v3JufqLPbScp0I2l1VyluJ8XHyeV0l3y23FmXL4b188Hyxe/9/T8bn3S3WvVSlW/srPfzTpIvjD6Lu/WS00ma9XqnsW3bE8nkw9u7OrS9fit9u8+/6OeUATvTCxwcts4Od/dTfej5DhwdRb7xmd32TyfH0v2YrD7n6qtD4+mO7vHb11UOAAAADtnCv0/N7af8VL0+vpnNrB/523gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4qoqk2V1VS6OXPp2i9/z/8Xpf6vSRdv+wBwAAAAAAAAAAO4w9sDWeZKK3cWn3Gp/fzGbW83xvu1NU/+b/WrVxsnp9Lu9mNUtZybmsZzFrWctKZpNMD3a2vri2tjI7Qs25XWvOPTiu5mgTnhytGAAAAAAAAAD8z/tlFrb+/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4FRdLsrqrlZC89nUYryWSS8bLc3eSvvfQRUey28/7THwcAAAAcyOQj1Dm+mc2s5/nedqeo7vlfqu6XJ/Nubmcty1lLO0u5Vt9Dl3f9jY178+2Ne/O3yuXAQ69aTPe3h917fqUqMZXrWa72nMvVajDX0qhqlv6Z5FZvTDvH9YtPy7Yvdf1kxJFdq9dlZ+/3fkWYOPCEH4PppNXIWD8iM9XYugfBicEo7IzENz8d1ujl7qq1vacM9jSbRv+Xn5PdHsrkQ2N+acSZHavX5Xx+O+yXm8dtcqvTu0ML9SPRSBWJuYGj76W9Y5588Y+/f/9G+/bNG9dXzz6VKT1J24+J+YFIvDxCJH7wzEaitXd2Y/uOmWrnqd7mR88l+X7O5nSuZCXL+XEWs5alFPVMF+vjuXyd3jtSlx/YujJkAH3j9fvSrMv1x5SFfGfXMZ3Ot6vUYl6r6j6f5RR5O9eylDeq/+Yym6/mQi7k4sA7fGrouKu5VWd9Y39n/Zkv1YmpJL+r14ete1Eo43piIK6D19zpKm9rz9hAlF7Y+93deW18+JRbn6sTZR+/2vNoeNq2R2J2IBIv7h2Jjzrl62r79s2VG4vv7PLp2inGqvXfziSdTnff63VeecT95uFff/500Pk9xMB1rDxeXshkfSU5kbHu0Jq9vBf7V5kqXuOD9U728x78xB3PZHk+N7o9dc/U7w49U8fr73A7W5qr8l7eNW++yntlIG/w+1bydtr970MAPMOOffnY+NS/pv4y9eHUr6duTL05+a2Jr028Op6xP499vTXTfL3xavGHfJifbd3/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj271vTs3F9vtpZXdE43m0KwhiXTu3FzsPcln1FpZLeon6eyrr8NK9B/584yM54kkih17yhk/ni56Tz7aX62ZnUfU5cMM1D/2WyuTA1NuDi18rE50jnejtK8uprcfmcmQwhPdYDaHnKf1W/QoDxcFjoTza7feOb/63p2vLN9afGvpraXbYxcuXJy5eOGN+fPXl9tLM93Xwx4l8CRsfW8HAAAAAAAAAAAAjooR/67gyg9/VP0fgo/09xKHPUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaFs4m9b9FJmdOTdTbm/cm2+XSy+9VbKVpNFIip8mxcfJ5XSXTA80Vwzr54Pli80kn2y11eqVb+xRrzMx0izu1ktOJ2nW6wN4oL2rB26v6M+wDNiZXuDgsP03AAD//9ev6fg=") syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 14m27.298235542s ago: executing program 37 (id=1617): futex(&(0x7f0000000040), 0xb, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1, 0x9) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000000), 0xfc, 0x6e0, &(0x7f0000000580)="$eJzs3c1vHGcdB/Dv7K7fUtE4bdIWVImoEQURkfhFKQQJJSCEfKhQBAckbiZxGiubtLJdcCME4f3aQ/+A9pAbJyTuQeUMFwRHi1MlRC+cfFs0s7Prje111nESx/D5VLPzzDzvv52Z3dnUmgD/txbOpnU/RRbOvrlebm/cm29v3JufqLPbScp0I2l1VyluJ8XHyeV0l3y23FmXL4b188Hyxe/9/T8bn3S3WvVSlW/srPfzTpIvjD6Lu/WS00ma9XqnsW3bE8nkw9u7OrS9fit9u8+/6OeUATvTCxwcts4Od/dTfej5DhwdRb7xmd32TyfH0v2YrD7n6qtD4+mO7vHb11UOAAAADtnCv0/N7af8VL0+vpnNrB/523gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4qoqk2V1VS6OXPp2i9/z/8Xpf6vSRdv+wBwAAAAAAAAAAO4w9sDWeZKK3cWn3Gp/fzGbW83xvu1NU/+b/WrVxsnp9Lu9mNUtZybmsZzFrWctKZpNMD3a2vri2tjI7Qs25XWvOPTiu5mgTnhytGAAAAAAAAAD8z/tlFrb+/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4FRdLsrqrlZC89nUYryWSS8bLc3eSvvfQRUey28/7THwcAAAAcyOQj1Dm+mc2s5/nedqeo7vlfqu6XJ/Nubmcty1lLO0u5Vt9Dl3f9jY178+2Ne/O3yuXAQ69aTPe3h917fqUqMZXrWa72nMvVajDX0qhqlv6Z5FZvTDvH9YtPy7Yvdf1kxJFdq9dlZ+/3fkWYOPCEH4PppNXIWD8iM9XYugfBicEo7IzENz8d1ujl7qq1vacM9jSbRv+Xn5PdHsrkQ2N+acSZHavX5Xx+O+yXm8dtcqvTu0ML9SPRSBWJuYGj76W9Y5588Y+/f/9G+/bNG9dXzz6VKT1J24+J+YFIvDxCJH7wzEaitXd2Y/uOmWrnqd7mR88l+X7O5nSuZCXL+XEWs5alFPVMF+vjuXyd3jtSlx/YujJkAH3j9fvSrMv1x5SFfGfXMZ3Ot6vUYl6r6j6f5RR5O9eylDeq/+Yym6/mQi7k4sA7fGrouKu5VWd9Y39n/Zkv1YmpJL+r14ete1Eo43piIK6D19zpKm9rz9hAlF7Y+93deW18+JRbn6sTZR+/2vNoeNq2R2J2IBIv7h2Jjzrl62r79s2VG4vv7PLp2inGqvXfziSdTnff63VeecT95uFff/500Pk9xMB1rDxeXshkfSU5kbHu0Jq9vBf7V5kqXuOD9U728x78xB3PZHk+N7o9dc/U7w49U8fr73A7W5qr8l7eNW++yntlIG/w+1bydtr970MAPMOOffnY+NS/pv4y9eHUr6duTL05+a2Jr028Op6xP499vTXTfL3xavGHfJifbd3/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj271vTs3F9vtpZXdE43m0KwhiXTu3FzsPcln1FpZLeon6eyrr8NK9B/584yM54kkih17yhk/ni56Tz7aX62ZnUfU5cMM1D/2WyuTA1NuDi18rE50jnejtK8uprcfmcmQwhPdYDaHnKf1W/QoDxcFjoTza7feOb/63p2vLN9afGvpraXbYxcuXJy5eOGN+fPXl9tLM93Xwx4l8CRsfW8HAAAAAAAAAAAAjooR/67gyg9/VP0fgo/09xKHPUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaFs4m9b9FJmdOTdTbm/cm2+XSy+9VbKVpNFIip8mxcfJ5XSXTA80Vwzr54Pli80kn2y11eqVb+xRrzMx0izu1ktOJ2nW6wN4oL2rB26v6M+wDNiZXuDgsP03AAD//9ev6fg=") syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 19.675595425s ago: executing program 8 (id=2852): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r0 = socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x800, 0x4) socket$tipc(0x1e, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0xfffffef2, 0xfffffffffffffff5, 0x0, {0x80000, 0x0, 0xbbca, 0x2, 0xffffffff, 0x0, {0xfffffffffffffffc, 0x0, 0x40000000000, 0xffffffffffffffff, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4000) syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000280), &(0x7f0000000340)=0x30) 16.420914964s ago: executing program 7 (id=2857): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f00000004c0)={[{@uid}, {@type={'type', 0x3d, "a5efd8b9"}}, {@nls={'nls', 0x3d, 'ascii'}}, {@part={'part', 0x3d, 0x2}}, {@part={'part', 0x3d, 0xb}}, {@part={'part', 0x3d, 0x4}}]}, 0x20, 0x70c, &(0x7f0000003800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, 0x0, 0x0, 0x200000200009, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x10}, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0xffffffff, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 15.100235431s ago: executing program 8 (id=2860): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) 14.151813967s ago: executing program 7 (id=2861): ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x15) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r3, 0xee01) 7.749286629s ago: executing program 7 (id=2863): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0xda, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 7.748437509s ago: executing program 9 (id=2864): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 7.574457539s ago: executing program 9 (id=2865): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 7.513719132s ago: executing program 8 (id=2866): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 7.504696623s ago: executing program 5 (id=2867): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="150327bd7000fdeddf25040000000c0001800800030003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 7.174290222s ago: executing program 9 (id=2868): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) 6.650318153s ago: executing program 8 (id=2869): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x141000, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.263173945s ago: executing program 7 (id=2870): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 6.259806456s ago: executing program 5 (id=2871): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r3) keyctl$clear(0x7, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8001}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2f}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x87}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 4.822496209s ago: executing program 7 (id=2872): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) creat(&(0x7f0000000140)='./file0\x00', 0x116) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffe6e, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000240001"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0840d07, &(0x7f0000000040)=0x1d) 4.821555739s ago: executing program 9 (id=2873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r3, 0xee01) 4.79595983s ago: executing program 8 (id=2874): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) waitid(0x2, 0x0, 0x0, 0x1000000, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 4.663928608s ago: executing program 5 (id=2875): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000001fffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.237838649s ago: executing program 9 (id=2876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="150327bd7000fdeddf25040000000c0001800800030003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 395.618227ms ago: executing program 8 (id=2879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xda, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 360.648539ms ago: executing program 7 (id=2880): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="150327bd7000fdeddf25040000000c0001800800030003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 5 (id=2881): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) kernel console output (not intermixed with test programs): 03868][T12167] tipc: Enabled bearer , priority 0 [ 760.435377][T12167] syzkaller0: entered promiscuous mode [ 760.691395][T12167] syzkaller0: entered allmulticast mode [ 761.659182][T12205] tipc: Resetting bearer [ 761.806548][T12146] tipc: Resetting bearer [ 762.804589][T12146] tipc: Disabling bearer [ 762.928539][ T5773] tipc: Node number set to 2886997007 [ 770.745907][T12262] loop2: detected capacity change from 0 to 2048 [ 771.153499][T12262] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 772.341430][T12265] loop5: detected capacity change from 0 to 16 [ 772.360030][T12265] erofs: (device loop5): mounted with root inode @ nid 36. [ 772.371086][T12265] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 772.379757][T12265] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 775.185475][T12275] tipc: Enabled bearer , priority 0 [ 776.731943][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 777.704791][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.742505][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.790480][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 777.834391][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 777.842487][ T9] usb 6-1: SerialNumber: syz [ 778.794158][ T9] usb 6-1: 0:2 : does not exist [ 779.010769][ T9] usb 6-1: USB disconnect, device number 8 [ 779.070586][T12314] tipc: Started in network mode [ 779.076780][T12314] tipc: Node identity 7e07749002ca, cluster identity 4711 [ 779.088735][T12314] tipc: Enabled bearer , priority 0 [ 779.102511][T12314] syzkaller0: entered promiscuous mode [ 779.109178][T12314] syzkaller0: entered allmulticast mode [ 779.127985][T12094] udevd[12094]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.170144][T12314] tipc: Resetting bearer [ 779.181921][T12311] tipc: Resetting bearer [ 779.212416][T12311] tipc: Disabling bearer [ 779.406975][T12319] syzkaller0: entered promiscuous mode [ 779.412640][T12319] syzkaller0: entered allmulticast mode [ 779.528070][T12321] syzkaller0: entered promiscuous mode [ 779.537672][T12321] syzkaller0: entered allmulticast mode [ 779.749860][T12326] netlink: 'syz.8.1382': attribute type 16 has an invalid length. [ 779.758417][T12326] netlink: 'syz.8.1382': attribute type 17 has an invalid length. [ 780.359713][T12326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 780.984747][T12344] kernel profiling enabled (shift: 9) [ 781.477335][T12351] loop2: detected capacity change from 0 to 512 [ 781.646552][T12351] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 781.827459][T12351] EXT4-fs (loop2): 1 truncate cleaned up [ 781.842410][T12351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.528382][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.927979][T12360] syzkaller0: entered promiscuous mode [ 782.950767][T12360] syzkaller0: entered allmulticast mode [ 785.186293][T12383] loop8: detected capacity change from 0 to 16 [ 785.733458][T12385] xt_TCPMSS: Only works on TCP SYN packets [ 786.138780][T12383] erofs: (device loop8): mounted with root inode @ nid 36. [ 786.150112][T12383] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 786.158938][T12383] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 787.169143][T12392] loop2: detected capacity change from 0 to 16 [ 787.471554][T12392] erofs: (device loop2): mounted with root inode @ nid 36. [ 787.487475][T12392] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 787.496184][T12392] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 788.271412][T12400] loop8: detected capacity change from 0 to 16 [ 788.281777][T12400] erofs: (device loop8): mounted with root inode @ nid 36. [ 788.292591][T12400] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 788.301378][T12400] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 788.561200][T12404] syzkaller0: entered promiscuous mode [ 788.569524][T12404] syzkaller0: entered allmulticast mode [ 790.457353][ T5881] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 791.415443][ T5881] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.547519][ T5881] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 791.726787][ T5881] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 792.080166][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 792.470517][T12435] loop2: detected capacity change from 0 to 16 [ 792.502866][T12435] erofs: (device loop2): mounted with root inode @ nid 36. [ 792.521005][T12431] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 792.529842][T12431] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 792.677418][ T5881] usb 9-1: SerialNumber: syz [ 793.629808][ T5881] usb 9-1: can't set config #1, error -71 [ 793.656859][ T5881] usb 9-1: USB disconnect, device number 2 [ 793.757431][T12447] misc userio: Invalid payload size [ 794.731360][T12453] tipc: Enabled bearer , priority 0 [ 794.784413][T12455] syzkaller0: entered promiscuous mode [ 794.790387][T12455] syzkaller0: entered allmulticast mode [ 794.874611][T12453] tipc: Resetting bearer [ 794.889224][T12449] tipc: Resetting bearer [ 794.934887][T12449] tipc: Disabling bearer [ 796.903191][T12472] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1418'. [ 799.557539][T12479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1432'. [ 799.577596][T12479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1432'. [ 800.285380][T12493] loop2: detected capacity change from 0 to 16 [ 800.472899][T12493] erofs: (device loop2): mounted with root inode @ nid 36. [ 800.491096][T12488] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 800.499844][T12488] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 808.753880][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1435'. [ 808.767693][T12533] loop8: detected capacity change from 0 to 16 [ 809.477467][T12535] (null): rxe_set_mtu: Set mtu to 1024 [ 811.608550][T12533] erofs: (device loop8): mounted with root inode @ nid 36. [ 811.625284][T12532] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 811.634134][T12532] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 813.328493][T12535] infiniband syz2: set down [ 813.328682][T12535] infiniband syz2: added ipvlan0 [ 813.330781][T12535] syz2: rxe_create_cq: returned err = -12 [ 813.330993][T12535] infiniband syz2: Couldn't create ib_mad CQ [ 813.331218][T12535] infiniband syz2: Couldn't open port 1 [ 813.386533][T12535] RDS/IB: syz2: added [ 813.387568][T12535] smc: adding ib device syz2 with port count 1 [ 813.387777][T12535] smc: ib device syz2 port 1 has pnetid [ 815.880092][T12576] loop8: detected capacity change from 0 to 256 [ 816.200286][T12576] FAT-fs (loop8): Directory bread(block 64) failed [ 816.233751][T12576] FAT-fs (loop8): Directory bread(block 65) failed [ 816.240495][T12576] FAT-fs (loop8): Directory bread(block 66) failed [ 816.269599][T12576] FAT-fs (loop8): Directory bread(block 67) failed [ 816.276547][T12576] FAT-fs (loop8): Directory bread(block 68) failed [ 816.283140][T12576] FAT-fs (loop8): Directory bread(block 69) failed [ 816.297333][T12576] FAT-fs (loop8): Directory bread(block 70) failed [ 816.304337][T12576] FAT-fs (loop8): Directory bread(block 71) failed [ 816.311219][T12576] FAT-fs (loop8): Directory bread(block 72) failed [ 816.317803][T12576] FAT-fs (loop8): Directory bread(block 73) failed [ 816.459584][T12583] syz_tun: entered allmulticast mode [ 816.502602][T12588] tipc: Enabled bearer , priority 0 [ 816.511970][T12588] syzkaller0: entered promiscuous mode [ 816.517740][T12588] syzkaller0: entered allmulticast mode [ 816.562957][T12583] syz_tun: left allmulticast mode [ 816.595350][T12588] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1449'. [ 816.654048][T12588] tipc: Resetting bearer [ 816.709326][T12586] tipc: Resetting bearer [ 816.788616][T12586] tipc: Disabling bearer [ 817.591479][T12597] syzkaller0: entered promiscuous mode [ 817.597365][T12597] syzkaller0: entered allmulticast mode [ 817.896354][T12605] loop5: detected capacity change from 0 to 16 [ 817.914097][T12605] erofs: (device loop5): mounted with root inode @ nid 36. [ 818.101530][T12605] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 818.110528][T12605] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 819.580719][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.589497][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.824450][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1462'. [ 825.863143][T12635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1462'. [ 827.160721][T12646] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 833.977834][T12691] loop5: detected capacity change from 0 to 16 [ 834.059303][T12691] erofs: (device loop5): mounted with root inode @ nid 36. [ 834.070207][T12691] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 834.079050][T12691] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 834.308110][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 834.379081][T12698] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1478'. [ 835.026528][T12701] ptrace attach of "./syz-executor exec"[12702] was attempted by "./syz-executor exec"[12701] [ 838.026610][T12717] usb usb1: usbfs: process 12717 (syz.8.1483) did not claim interface 0 before use [ 838.038224][T12717] ptrace attach of "./syz-executor exec"[11843] was attempted by "./syz-executor exec"[12717] [ 840.228783][T12729] loop5: detected capacity change from 0 to 16 [ 840.250845][T12729] erofs: (device loop5): mounted with root inode @ nid 36. [ 840.308315][T12729] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 840.317288][T12729] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 840.373734][T12731] tipc: Enabled bearer , priority 0 [ 840.421536][T12731] syzkaller0: entered promiscuous mode [ 840.439810][T12731] syzkaller0: entered allmulticast mode [ 840.695817][T12736] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1488'. [ 840.728302][T12741] loop8: detected capacity change from 0 to 512 [ 840.739590][T12741] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 840.840536][T12730] tipc: Resetting bearer [ 841.397858][T12741] EXT4-fs (loop8): 1 truncate cleaned up [ 841.421784][T12741] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.447697][T12730] tipc: Disabling bearer [ 844.311068][T11843] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.553311][T12769] loop2: detected capacity change from 0 to 16 [ 845.571707][T12769] erofs: (device loop2): mounted with root inode @ nid 36. [ 851.352444][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 855.324164][T12817] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1505'. [ 855.336647][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1505'. [ 856.579520][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1508'. [ 859.288434][T12839] loop8: detected capacity change from 0 to 16 [ 860.841191][T12839] erofs: (device loop8): mounted with root inode @ nid 36. [ 860.865905][T12839] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 860.892064][T12839] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 863.924550][T12858] netlink: 'syz.2.1519': attribute type 16 has an invalid length. [ 863.934855][T12858] netlink: 'syz.2.1519': attribute type 17 has an invalid length. [ 864.718417][T12858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.785313][T12858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 868.667424][T12888] loop2: detected capacity change from 0 to 16 [ 868.704327][T12888] erofs: (device loop2): mounted with root inode @ nid 36. [ 868.824837][T12888] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 868.874163][T12888] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 874.019139][T12927] loop2: detected capacity change from 0 to 16 [ 875.056413][T12927] erofs: (device loop2): mounted with root inode @ nid 36. [ 875.094884][T12927] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 875.104260][T12927] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 880.669024][T12987] loop5: detected capacity change from 0 to 16 [ 881.092193][T12987] erofs: (device loop5): mounted with root inode @ nid 36. [ 881.367290][T12987] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 881.445118][T12987] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 882.717555][T13005] loop8: detected capacity change from 0 to 1024 [ 885.065847][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 885.073474][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 897.229612][T13070] loop5: detected capacity change from 0 to 16 [ 897.254297][T13070] erofs: (device loop5): mounted with root inode @ nid 36. [ 897.631341][T13070] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 897.641267][T13070] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 908.065022][T13121] loop5: detected capacity change from 0 to 16 [ 908.260925][T13121] erofs: (device loop5): mounted with root inode @ nid 36. [ 908.298473][T13121] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 908.307254][T13121] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 908.461680][T13126] siw: device registration error -23 [ 910.831010][T13140] batman_adv: batadv0: Adding interface: dummy0 [ 910.852893][T13140] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.928936][T13140] batman_adv: batadv0: Interface activated: dummy0 [ 910.982768][T13141] batadv0: mtu less than device minimum [ 911.011423][T13141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 911.024790][T13141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 911.037405][T13141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 911.050045][T13141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 911.062642][T13141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 911.075271][T13141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 911.087978][T13141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 911.100729][T13141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 911.113483][T13141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 914.499741][T13160] loop2: detected capacity change from 0 to 16 [ 914.562720][T13160] erofs: (device loop2): mounted with root inode @ nid 36. [ 916.338797][T13169] orangefs_mount: mount request failed with -4 [ 923.149668][T13206] loop2: detected capacity change from 0 to 16 [ 923.175838][T13206] erofs: (device loop2): mounted with root inode @ nid 36. [ 932.044943][T13247] net_ratelimit: 10 callbacks suppressed [ 932.044960][T13247] netlink: set zone limit has 8 unknown bytes [ 932.791773][T13262] loop8: detected capacity change from 0 to 16 [ 933.507526][T13262] erofs: (device loop8): mounted with root inode @ nid 36. [ 933.664549][T13270] loop2: detected capacity change from 0 to 1024 [ 937.095224][T13299] syz.5.1620(13299): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 938.180293][T13303] loop5: detected capacity change from 0 to 1024 [ 939.341744][T12186] hfsplus: b-tree write err: -5, ino 3 [ 950.142216][T13353] syzkaller0: entered promiscuous mode [ 950.219062][T13353] syzkaller0: entered allmulticast mode [ 950.770456][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 950.781581][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 954.411368][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 954.425426][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 954.434647][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 954.443542][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 954.454905][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 954.462685][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 954.581242][T12687] bond0: (slave syz_tun): Releasing backup interface [ 957.080872][ T5778] Bluetooth: hci3: command tx timeout [ 964.252723][ T5778] Bluetooth: hci3: command tx timeout [ 967.302646][ T5778] Bluetooth: hci3: command tx timeout [ 969.527629][ T5785] Bluetooth: hci3: command tx timeout [ 970.623833][T13377] chnl_net:caif_netlink_parms(): no params data found [ 970.988683][T13437] tipc: Enabled bearer , priority 0 [ 971.087717][T13441] syzkaller0: entered promiscuous mode [ 971.093276][T13441] syzkaller0: entered allmulticast mode [ 971.523373][T13441] tipc: Resetting bearer [ 972.008065][T13436] tipc: Resetting bearer [ 972.542721][T13436] tipc: Disabling bearer [ 972.886006][T12180] tipc: Left network mode [ 975.157234][T13460] loop8: detected capacity change from 0 to 40427 [ 975.178917][T13460] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 975.186019][T13460] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 975.194954][T13460] F2FS-fs (loop8): heap/no_heap options were deprecated [ 975.203320][T13460] F2FS-fs (loop8): invalid crc value [ 975.218714][T13460] F2FS-fs (loop8): Found nat_bits in checkpoint [ 975.293424][T13460] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 975.300606][T13460] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 975.709974][T13474] syz.8.1657: attempt to access beyond end of device [ 975.709974][T13474] loop8: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 975.726347][T13474] F2FS-fs (loop8): Remounting filesystem read-only [ 975.739516][T13474] syz.8.1657: attempt to access beyond end of device [ 975.739516][T13474] loop8: rw=2049, sector=53280, nr_sectors = 8 limit=40427 [ 975.754035][T13474] F2FS-fs (loop8): Remounting filesystem read-only [ 977.581154][T13377] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.811850][T13377] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.846435][T13377] bridge_slave_0: entered allmulticast mode [ 977.886666][T13377] bridge_slave_0: entered promiscuous mode [ 978.046332][T13377] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.091012][T13377] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.113762][T13377] bridge_slave_1: entered allmulticast mode [ 978.134369][T13377] bridge_slave_1: entered promiscuous mode [ 978.796851][T13496] loop5: detected capacity change from 0 to 512 [ 978.822277][T13496] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 978.935781][T13496] EXT4-fs (loop5): 1 truncate cleaned up [ 978.947013][T13496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.070554][ T7433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.124730][T13377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.179229][T13377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.362022][T13505] misc userio: Invalid payload size [ 981.855137][T13377] team0: Port device team_slave_0 added [ 981.946918][T13377] team0: Port device team_slave_1 added [ 982.056983][T13377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.064011][T13377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.096279][T13377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.129412][T13377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.136918][T13377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.163643][T13377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.227376][T13377] hsr_slave_0: entered promiscuous mode [ 982.233925][T13377] hsr_slave_1: entered promiscuous mode [ 982.240454][T13377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.254993][T13377] Cannot create hsr debugfs directory [ 982.804078][T12180] veth1: left promiscuous mode [ 982.810123][T12180] bridge2: left promiscuous mode [ 982.821102][T12180] veth0_to_bond: left allmulticast mode [ 982.830531][T12180] veth0_to_bond: left promiscuous mode [ 982.840666][T12180] bridge1: port 2(veth0_to_bond) entered disabled state [ 982.855477][T12180] veth5: left allmulticast mode [ 982.863751][T12180] veth5: left promiscuous mode [ 982.874167][T12180] bridge1: port 1(veth5) entered disabled state [ 982.916202][T12180] hsr_slave_0: left promiscuous mode [ 982.930865][T12180] hsr_slave_1: left promiscuous mode [ 983.343744][ T5881] syz2: rxe_query_port: returned err = -19 [ 983.385851][ T11] smc: removing ib device syz2 [ 985.133866][T12180] bond0 (unregistering): Released all slaves [ 985.275663][T13377] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 985.310315][T13377] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 985.331615][T13377] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 985.357830][T13377] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 985.664569][T13377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.736111][T13377] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.760281][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.767529][T12178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.777703][T12180] IPVS: stop unused estimator thread 0... [ 985.838040][T12195] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.845340][T12195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.239941][T13377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.678597][T13377] veth0_vlan: entered promiscuous mode [ 986.699887][T13377] veth1_vlan: entered promiscuous mode [ 986.766708][T13377] veth0_macvtap: entered promiscuous mode [ 986.798883][T13377] veth1_macvtap: entered promiscuous mode [ 986.833801][T13377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.849651][T13377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.865408][T13377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.892061][T13377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.904915][T13377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.923349][T13377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.947801][T13377] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.957375][T13377] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.971059][T13377] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.983725][T13377] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.131846][T12178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.152583][T12178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.196220][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.204940][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.129805][T13597] trusted_key: syz.8.1673 sent an empty control message without MSG_MORE. [ 993.634902][T13638] loop9: detected capacity change from 0 to 40427 [ 993.786932][T13638] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 993.794055][T13638] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 993.971769][T13638] F2FS-fs (loop9): heap/no_heap options were deprecated [ 993.980420][T13638] F2FS-fs (loop9): invalid crc value [ 994.088714][T13644] loop8: detected capacity change from 0 to 512 [ 994.125551][T13638] F2FS-fs (loop9): Found nat_bits in checkpoint [ 994.191476][T13638] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 994.198763][T13638] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 994.276274][T13644] EXT4-fs: Ignoring removed mblk_io_submit option [ 994.631227][T13654] syz.9.1668: attempt to access beyond end of device [ 994.631227][T13654] loop9: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 994.647845][T13654] F2FS-fs (loop9): Remounting filesystem read-only [ 994.655982][T13654] syz.9.1668: attempt to access beyond end of device [ 994.655982][T13654] loop9: rw=2049, sector=53264, nr_sectors = 8 limit=40427 [ 994.670346][T13654] F2FS-fs (loop9): Remounting filesystem read-only [ 994.861121][T13644] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 994.999361][T13644] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.1669: attempt to clear invalid blocks 2 len 1 [ 995.120388][T13644] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 995.170039][T13644] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1669: invalid indirect mapped block 1819239214 (level 0) [ 995.208457][T13644] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1669: invalid indirect mapped block 1819239214 (level 1) [ 995.267207][T13644] EXT4-fs (loop8): 1 truncate cleaned up [ 995.310515][T13644] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.647968][T11843] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.955531][T13689] loop5: detected capacity change from 0 to 1024 [ 1000.994306][T13689] EXT4-fs: Ignoring removed bh option [ 1001.024254][T13689] ext4: Bad value for 'max_batch_time' [ 1013.320904][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1704'. [ 1013.335173][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1704'. [ 1013.346578][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1704'. [ 1013.372968][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1704'. [ 1013.382918][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1704'. [ 1016.568414][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1016.577351][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1017.140635][T13832] loop9: detected capacity change from 0 to 128 [ 1019.553780][T13852] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1716'. [ 1020.775415][T13870] loop8: detected capacity change from 0 to 256 [ 1020.784443][T13870] exfat: Deprecated parameter 'utf8' [ 1020.792126][T13870] exfat: Deprecated parameter 'namecase' [ 1020.797983][T13870] exfat: Deprecated parameter 'namecase' [ 1020.803831][T13870] exfat: Deprecated parameter 'utf8' [ 1022.768435][T13870] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1027.683370][T13940] hugetlbfs: syz.5.1730 (13940): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1027.814634][T13601] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1028.314464][T13601] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.370442][T13601] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1028.416997][T13601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.490307][T13601] usb 9-1: config 0 descriptor?? [ 1028.531645][T13601] pwc: Askey VC010 type 2 USB webcam detected. [ 1029.007874][T13601] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1029.028990][T13601] pwc: recv_control_msg error -32 req 02 val 2700 [ 1029.060348][T13601] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1029.087003][T13601] pwc: recv_control_msg error -32 req 04 val 1000 [ 1029.109960][T13601] pwc: recv_control_msg error -32 req 04 val 1300 [ 1029.131133][T13601] pwc: recv_control_msg error -32 req 04 val 1400 [ 1029.155256][T13601] pwc: recv_control_msg error -32 req 02 val 2000 [ 1029.196833][T13601] pwc: recv_control_msg error -32 req 02 val 2100 [ 1029.230972][T13601] pwc: recv_control_msg error -32 req 04 val 1500 [ 1029.262529][T13601] pwc: recv_control_msg error -32 req 02 val 2500 [ 1029.303746][T13601] pwc: recv_control_msg error -32 req 02 val 2400 [ 1029.343564][T13601] pwc: recv_control_msg error -32 req 02 val 2600 [ 1029.374373][T13601] pwc: recv_control_msg error -32 req 02 val 2900 [ 1029.452070][T13601] pwc: recv_control_msg error -32 req 02 val 2800 [ 1032.034323][T13601] pwc: recv_control_msg error -71 req 04 val 1200 [ 1032.057001][T13601] pwc: Registered as video103. [ 1032.064867][T13601] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input5 [ 1032.122387][T13601] usb 9-1: USB disconnect, device number 3 [ 1037.977402][T14003] nbd0: detected capacity change from 0 to 8589934655 [ 1037.995122][ T5785] block nbd0: Receive control failed (result -32) [ 1037.998842][T14013] loop8: detected capacity change from 0 to 256 [ 1038.042094][ T96] block nbd0: Dead connection, failed to find a fallback [ 1038.052305][ T96] block nbd0: shutting down sockets [ 1038.059916][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.073085][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1038.110514][ T55] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.120023][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1038.128468][ T96] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1038.137671][ T96] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1038.145781][ T96] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1038.160208][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1038.169425][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1038.177712][ T96] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1038.185993][ T96] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1038.194808][ T96] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1038.203321][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1038.212471][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1038.220646][ T96] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1038.229083][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1038.238751][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1038.248453][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.258065][ T96] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1038.268710][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.279213][T13813] ldm_validate_partition_table(): Disk read failed. [ 1038.319205][T14013] exfat: Deprecated parameter 'utf8' [ 1038.340341][T13813] Dev nbd0: unable to read RDB block 0 [ 1038.516078][T14013] exfat: Deprecated parameter 'utf8' [ 1038.544963][T14013] exfat: Deprecated parameter 'utf8' [ 1038.564997][T13813] nbd0: unable to read partition table [ 1039.333855][T13813] ldm_validate_partition_table(): Disk read failed. [ 1039.348170][T14013] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1039.382757][T13813] Dev nbd0: unable to read RDB block 0 [ 1039.518126][T13813] nbd0: unable to read partition table [ 1039.783175][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1748'. [ 1040.515771][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1748'. [ 1044.398776][T14080] loop8: detected capacity change from 0 to 1764 [ 1044.400250][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1758'. [ 1046.094998][T14073] netlink: 'syz.8.1756': attribute type 3 has an invalid length. [ 1046.113241][T14073] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1046.235317][T14085] syzkaller0: entered promiscuous mode [ 1046.375065][T14085] syzkaller0: entered allmulticast mode [ 1048.239555][T14117] loop8: detected capacity change from 0 to 128 [ 1050.964401][T12180] kworker/u4:18: attempt to access beyond end of device [ 1050.964401][T12180] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1051.276140][T14137] loop8: detected capacity change from 0 to 512 [ 1051.309635][T14137] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1051.356102][T14137] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.1770: corrupted xattr entries [ 1051.460661][T14137] EXT4-fs (loop8): 1 orphan inode deleted [ 1051.467854][T14137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.058067][T11843] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.082265][T14201] syz.7.1779: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 1059.098632][T14201] CPU: 1 PID: 14201 Comm: syz.7.1779 Not tainted syzkaller #0 [ 1059.106156][T14201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1059.116424][T14201] Call Trace: [ 1059.119756][T14201] [ 1059.122743][T14201] dump_stack_lvl+0x18c/0x250 [ 1059.127488][T14201] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1059.133170][T14201] ? show_regs_print_info+0x20/0x20 [ 1059.138424][T14201] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1059.144120][T14201] warn_alloc+0x246/0x340 [ 1059.148505][T14201] ? stack_trace_save+0xaa/0x100 [ 1059.153503][T14201] ? zone_watermark_ok_safe+0x230/0x230 [ 1059.159115][T14201] ? kasan_set_track+0x5f/0x70 [ 1059.163923][T14201] ? kasan_set_track+0x4e/0x70 [ 1059.168730][T14201] ? __kasan_kmalloc+0x8f/0xa0 [ 1059.173544][T14201] ? xsk_init_queue+0xad/0x100 [ 1059.178353][T14201] ? xsk_setsockopt+0x42e/0x760 [ 1059.183243][T14201] ? do_sock_setsockopt+0x175/0x1a0 [ 1059.188580][T14201] ? __x64_sys_setsockopt+0x182/0x200 [ 1059.194010][T14201] __vmalloc_node_range+0x126/0x1330 [ 1059.199386][T14201] ? free_vm_area+0x50/0x50 [ 1059.203946][T14201] vmalloc_user+0x74/0x80 [ 1059.208320][T14201] ? xskq_create+0xbf/0x170 [ 1059.212872][T14201] xskq_create+0xbf/0x170 [ 1059.217253][T14201] xsk_init_queue+0xad/0x100 [ 1059.221982][T14201] xsk_setsockopt+0x42e/0x760 [ 1059.226722][T14201] ? xsk_poll+0x680/0x680 [ 1059.231126][T14201] ? __fget_files+0x28/0x4b0 [ 1059.235871][T14201] ? __fget_files+0x28/0x4b0 [ 1059.240543][T14201] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1059.246151][T14201] ? security_socket_setsockopt+0x7e/0xa0 [ 1059.251920][T14201] ? xsk_poll+0x680/0x680 [ 1059.256322][T14201] do_sock_setsockopt+0x175/0x1a0 [ 1059.261411][T14201] ? __fdget+0x180/0x210 [ 1059.265714][T14201] __x64_sys_setsockopt+0x182/0x200 [ 1059.270978][T14201] do_syscall_64+0x55/0xa0 [ 1059.275533][T14201] ? clear_bhb_loop+0x40/0x90 [ 1059.280268][T14201] ? clear_bhb_loop+0x40/0x90 [ 1059.284987][T14201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.290930][T14201] RIP: 0033:0x7f66e8b9bf79 [ 1059.295405][T14201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.315079][T14201] RSP: 002b:00007f66e9996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1059.323643][T14201] RAX: ffffffffffffffda RBX: 00007f66e8e16180 RCX: 00007f66e8b9bf79 [ 1059.331686][T14201] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1059.339704][T14201] RBP: 00007f66e8c327e0 R08: 0000000000000004 R09: 0000000000000000 [ 1059.347723][T14201] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.355910][T14201] R13: 00007f66e8e16218 R14: 00007f66e8e16180 R15: 00007ffd5fda2f08 [ 1059.363943][T14201] [ 1059.367864][T14201] Mem-Info: [ 1059.371339][T14201] active_anon:71312 inactive_anon:0 isolated_anon:0 [ 1059.371339][T14201] active_file:18245 inactive_file:40616 isolated_file:0 [ 1059.371339][T14201] unevictable:17726 dirty:252 writeback:0 [ 1059.371339][T14201] slab_reclaimable:11813 slab_unreclaimable:100540 [ 1059.371339][T14201] mapped:28167 shmem:63931 pagetables:1133 [ 1059.371339][T14201] sec_pagetables:0 bounce:0 [ 1059.371339][T14201] kernel_misc_reclaimable:0 [ 1059.371339][T14201] free:1244638 free_pcp:12711 free_cma:0 [ 1059.417654][T14201] Node 0 active_anon:285248kB inactive_anon:0kB active_file:72980kB inactive_file:162264kB unevictable:69368kB isolated(anon):0kB isolated(file):0kB mapped:112668kB dirty:1008kB writeback:0kB shmem:254188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14088kB pagetables:4532kB sec_pagetables:0kB all_unreclaimable? no [ 1059.450904][T14201] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1059.481477][T14201] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.508947][T14201] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1059.515331][T14201] Node 0 DMA32 free:1064396kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:285208kB inactive_anon:0kB active_file:72980kB inactive_file:161432kB unevictable:69368kB writepending:1004kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:32284kB local_pcp:21472kB free_cma:0kB [ 1059.546967][T14201] lowmem_reserve[]: 0 0 0 0 0 [ 1059.552704][T14201] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.580210][T14201] lowmem_reserve[]: 0 0 0 0 0 [ 1059.585328][T14201] Node 1 Normal free:3898812kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18560kB local_pcp:6432kB free_cma:0kB [ 1059.681889][T14201] lowmem_reserve[]: 0 0 0 0 0 [ 1059.686942][T14201] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1059.702642][T14201] Node 0 DMA32: 333*4kB (UME) 1461*8kB (UME) 1087*16kB (UME) 428*32kB (UME) 98*64kB (UME) 276*128kB (UME) 167*256kB (UME) 68*512kB (UME) 14*1024kB (UM) 3*2048kB (UM) 215*4096kB (UM) = 1064396kB [ 1059.723210][T14201] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1059.735559][T14201] Node 1 Normal: 247*4kB (UME) 76*8kB (UME) 44*16kB (UME) 170*32kB (UME) 52*64kB (UME) 11*128kB (UME) 1*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3898812kB [ 1059.754828][T14201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1059.764631][T14201] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1059.774099][T14201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1059.783789][T14201] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1059.793429][T14201] 139738 total pagecache pages [ 1059.798351][T14201] 0 pages in swap cache [ 1059.802612][T14201] Free swap = 124356kB [ 1059.806852][T14201] Total swap = 124996kB [ 1059.811160][T14201] 2097051 pages RAM [ 1059.815052][T14201] 0 pages HighMem/MovableOnly [ 1059.819911][T14201] 416922 pages reserved [ 1059.824146][T14201] 0 pages cma reserved [ 1060.231189][T14208] netlink: 'syz.7.1781': attribute type 1 has an invalid length. [ 1060.417139][T14208] bond3: entered promiscuous mode [ 1060.422877][T14208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1062.186629][T14213] tipc: Started in network mode [ 1062.191710][T14213] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 1062.199521][T14213] tipc: Enabled bearer , priority 10 [ 1062.709209][T14208] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1781'. [ 1062.718316][T14208] bond3: entered allmulticast mode [ 1062.860104][T14223] loop9: detected capacity change from 0 to 512 [ 1062.895268][T14208] bond3: (slave bridge3): making interface the new active one [ 1062.961977][T14223] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1063.000030][T14208] bridge3: entered promiscuous mode [ 1063.006761][T14208] bridge3: entered allmulticast mode [ 1063.014900][T14208] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1063.389967][T13878] tipc: Node number set to 10398378 [ 1076.295544][T14349] loop9: detected capacity change from 0 to 512 [ 1076.318129][T14349] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1076.446579][T14349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1076.502711][T14349] System zones: 1-12 [ 1076.515046][T14349] EXT4-fs (loop9): 1 truncate cleaned up [ 1076.524102][T14349] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.753241][ T8] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1077.471433][T14370] loop5: detected capacity change from 0 to 64 [ 1078.684879][T13377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.878076][ T8] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1078.899050][ T8] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1078.911006][ T8] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1078.932128][ T8] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1078.954094][ T8] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1078.965635][ T8] usb 9-1: Product: syz [ 1078.974000][ T8] usb 9-1: Manufacturer: syz [ 1078.981224][ T8] usb 9-1: SerialNumber: syz [ 1079.268930][T14381] loop5: detected capacity change from 0 to 512 [ 1079.673701][ T8] usb 9-1: config 0 descriptor?? [ 1080.008979][ T8] usb 9-1: can't set config #0, error -71 [ 1080.011749][T14381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.060261][T14379] loop9: detected capacity change from 0 to 4096 [ 1080.100294][ T8] usb 9-1: USB disconnect, device number 4 [ 1080.200170][T14379] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1080.233545][T14379] ntfs3: loop9: Failed to initialize $Extend/$ObjId. [ 1080.243146][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1814'. [ 1080.264897][ T7433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.109100][T14393] vlan2: entered allmulticast mode [ 1081.243635][T14393] bridge0: entered allmulticast mode [ 1082.116710][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1082.980411][ T5774] libceph: connect (1)[c::]:6789 error -101 [ 1083.008195][ T5774] libceph: mon0 (1)[c::]:6789 connect error [ 1083.022340][T14425] loop9: detected capacity change from 0 to 64 [ 1083.252325][T14414] ceph: No mds server is up or the cluster is laggy [ 1084.055364][ T5774] libceph: connect (1)[c::]:6789 error -101 [ 1084.062044][ T5774] libceph: mon0 (1)[c::]:6789 connect error [ 1085.220779][ T5774] libceph: connect (1)[c::]:6789 error -101 [ 1085.226910][ T5774] libceph: mon0 (1)[c::]:6789 connect error [ 1085.954443][T14448] IPVS: Unknown mcast interface: vcan0 [ 1089.208800][T14464] loop9: detected capacity change from 0 to 16 [ 1089.230063][T14464] erofs: (device loop9): mounted with root inode @ nid 36. [ 1089.863667][T14474] 8021q: VLANs not supported on lo [ 1089.899367][T14452] Bluetooth: hci3: command 0x0406 tx timeout [ 1089.933664][T14473] loop5: detected capacity change from 0 to 1024 [ 1089.984645][T14473] EXT4-fs: Ignoring removed orlov option [ 1090.099855][T14473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.224533][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1090.252080][T14474] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1090.281521][T14474] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1091.270998][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1091.458289][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1091.585213][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1091.608036][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1091.622373][ T7433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.668802][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1091.719451][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1091.760626][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1091.814709][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1091.850126][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1091.905114][ T9] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1091.926437][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.962693][ T9] usb 9-1: Product: syz [ 1091.974692][ T9] usb 9-1: Manufacturer: syz [ 1092.000109][ T9] usb 9-1: SerialNumber: syz [ 1092.039084][ T9] usb 9-1: config 0 descriptor?? [ 1092.068822][T14471] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1092.098336][T14471] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1092.131151][ T9] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 1093.627175][ T5880] usb 9-1: USB disconnect, device number 5 [ 1104.067670][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1104.315366][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1104.343912][T14563] loop8: detected capacity change from 0 to 2048 [ 1104.357028][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1104.405527][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1104.470295][T14563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1104.480688][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1104.555936][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1104.610944][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1104.635748][T14566] syzkaller0: entered promiscuous mode [ 1104.641352][T14566] syzkaller0: entered allmulticast mode [ 1104.644314][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1104.872394][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1104.884398][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1104.898752][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1104.916561][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.929716][ T9] usb 6-1: Product: syz [ 1104.934243][ T9] usb 6-1: Manufacturer: syz [ 1104.960128][ T9] usb 6-1: SerialNumber: syz [ 1105.076532][T14575] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1105.568087][ T9] usb 6-1: config 0 descriptor?? [ 1105.574390][T14557] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1105.582039][T14557] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1105.600146][ T9] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1106.496801][ T9] usb 6-1: USB disconnect, device number 9 [ 1112.455291][T14629] syzkaller0: entered promiscuous mode [ 1112.461061][T14629] syzkaller0: entered allmulticast mode [ 1114.016838][T14643] loop5: detected capacity change from 0 to 16 [ 1114.251057][T14643] erofs: (device loop5): mounted with root inode @ nid 36. [ 1114.277382][T14639] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1114.286072][T14639] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1119.750691][T11887] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1119.904450][T14676] tipc: Enabled bearer , priority 0 [ 1119.924551][T14676] syzkaller0: entered promiscuous mode [ 1119.930200][T14676] syzkaller0: entered allmulticast mode [ 1120.219538][T14676] tipc: Resetting bearer [ 1120.240308][T14680] loop9: detected capacity change from 0 to 16 [ 1120.254549][T14680] erofs: (device loop9): mounted with root inode @ nid 36. [ 1120.265028][T14680] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1120.273731][T14680] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1120.322193][T14675] tipc: Resetting bearer [ 1120.421966][T14675] tipc: Disabling bearer [ 1124.034768][T14690] loop9: detected capacity change from 0 to 764 [ 1124.841524][T14700] netlink: 'syz.7.1871': attribute type 1 has an invalid length. [ 1124.850058][T14700] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.1871'. [ 1129.269041][T14715] loop9: detected capacity change from 0 to 1024 [ 1129.282687][T14715] EXT4-fs: Ignoring removed orlov option [ 1130.350869][T14715] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1130.351362][T14715] EXT4-fs: failed to create workqueue [ 1130.403487][T14715] EXT4-fs (loop9): mount failed [ 1131.208061][T14734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1136.606055][T14758] loop5: detected capacity change from 0 to 764 [ 1139.014384][T14774] netlink: 'syz.5.1896': attribute type 3 has an invalid length. [ 1139.044578][T14774] netlink: 'syz.5.1896': attribute type 3 has an invalid length. [ 1140.359046][T14786] loop5: detected capacity change from 0 to 16 [ 1140.369538][T14786] erofs: (device loop5): mounted with root inode @ nid 36. [ 1140.380176][T14786] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1140.389683][T14786] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1140.811093][ C0] hrtimer: interrupt took 66232 ns [ 1146.035997][T14820] tipc: Resetting bearer [ 1146.937936][T14838] netlink: 'syz.7.1908': attribute type 3 has an invalid length. [ 1146.959438][T14838] netlink: 'syz.7.1908': attribute type 3 has an invalid length. [ 1147.826742][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1150.227444][T11887] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1150.476801][T11887] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.509073][T11887] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1150.526836][T11887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.555978][T11887] usb 9-1: config 0 descriptor?? [ 1150.575791][T11887] pwc: Askey VC010 type 2 USB webcam detected. [ 1151.061934][T11887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1151.201778][T11887] pwc: recv_control_msg error -32 req 02 val 2700 [ 1151.339448][T11887] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1151.478999][T11887] pwc: recv_control_msg error -32 req 04 val 1000 [ 1151.642406][T14872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.655384][T14872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.666543][T11887] pwc: recv_control_msg error -32 req 04 val 1300 [ 1151.675532][T11887] pwc: recv_control_msg error -32 req 04 val 1400 [ 1151.676638][T14872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.694519][T14872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.697971][T11887] pwc: recv_control_msg error -32 req 02 val 2000 [ 1151.717795][T11887] pwc: recv_control_msg error -32 req 02 val 2100 [ 1151.725258][T11887] pwc: recv_control_msg error -32 req 04 val 1500 [ 1151.733438][T11887] pwc: recv_control_msg error -32 req 02 val 2500 [ 1151.742646][T11887] pwc: recv_control_msg error -32 req 02 val 2400 [ 1151.751656][T11887] pwc: recv_control_msg error -32 req 02 val 2600 [ 1151.766227][T11887] pwc: recv_control_msg error -32 req 02 val 2900 [ 1151.774491][T11887] pwc: recv_control_msg error -32 req 02 val 2800 [ 1151.783562][T11887] pwc: recv_control_msg error -32 req 04 val 1100 [ 1151.801998][T11887] pwc: Registered as video103. [ 1151.810037][T14872] tipc: Resetting bearer [ 1151.827621][T11887] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input6 [ 1152.064674][ T787] usb 9-1: USB disconnect, device number 6 [ 1152.817084][T14887] netlink: 'syz.9.1919': attribute type 3 has an invalid length. [ 1152.825132][T14887] netlink: 'syz.9.1919': attribute type 3 has an invalid length. [ 1152.942957][T14884] netlink: 'syz.5.1928': attribute type 1 has an invalid length. [ 1152.951318][T14884] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1928'. [ 1157.379302][T14155] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1157.573766][T14918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1157.809353][T14155] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1158.199542][T14924] fido_id[14924]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1158.277279][T14930] loop9: detected capacity change from 0 to 128 [ 1158.453417][T14930] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1158.468182][T14930] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.058840][T13377] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1160.115843][T14953] netlink: 'syz.9.1932': attribute type 1 has an invalid length. [ 1160.123783][T14953] netlink: 168864 bytes leftover after parsing attributes in process `syz.9.1932'. [ 1161.466432][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1936'. [ 1161.725575][T14966] loop9: detected capacity change from 0 to 16 [ 1161.794282][T14966] erofs: (device loop9): mounted with root inode @ nid 36. [ 1161.804725][T14966] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1161.813458][T14966] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1162.627379][T14970] loop5: detected capacity change from 0 to 64 [ 1163.436681][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 1163.446912][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 1163.456174][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 1163.465457][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 1164.193507][T14985] syzkaller0: entered promiscuous mode [ 1164.220814][T14985] syzkaller0: entered allmulticast mode [ 1166.025306][T15007] loop9: detected capacity change from 0 to 16 [ 1166.445843][T15007] erofs: (device loop9): mounted with root inode @ nid 36. [ 1166.464277][T15005] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1166.473232][T15005] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1167.433600][T15019] loop8: detected capacity change from 0 to 128 [ 1167.746473][T15021] loop9: detected capacity change from 0 to 1024 [ 1167.754020][T15021] journal_path: Non-blockdev passed as '' [ 1167.759830][T15021] EXT4-fs: error: could not find journal device path [ 1167.903832][T15019] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1167.921728][T15019] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1168.278215][T11843] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1168.639052][T11887] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1168.695684][T15032] QAT: Invalid ioctl 1074328842 [ 1169.072836][T11887] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1169.552438][T11887] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1169.629013][T11887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.048048][T11887] usb 6-1: config 0 descriptor?? [ 1170.057638][T11887] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1170.883801][T15051] loop9: detected capacity change from 0 to 16 [ 1171.070297][T15051] erofs: (device loop9): mounted with root inode @ nid 36. [ 1171.089961][T15050] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1171.098768][T15050] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1171.205691][ T6096] usb 6-1: USB disconnect, device number 10 [ 1174.307855][T15081] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1973'. [ 1175.062489][T15088] loop5: detected capacity change from 0 to 65 [ 1175.101750][T15088] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5 [ 1176.033173][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1969'. [ 1180.562772][T15119] loop9: detected capacity change from 0 to 64 [ 1183.638752][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1976'. [ 1183.651147][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1976'. [ 1183.661887][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1976'. [ 1183.673365][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1976'. [ 1183.683553][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1976'. [ 1184.914130][ T787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1185.344248][ T787] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1186.067592][T15135] fido_id[15135]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1191.213611][T15167] loop8: detected capacity change from 0 to 64 [ 1191.823542][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1990'. [ 1191.865353][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1990'. [ 1191.887047][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1990'. [ 1191.912255][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1990'. [ 1199.158594][T15205] loop8: detected capacity change from 0 to 64 [ 1199.822882][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2001'. [ 1199.835556][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2001'. [ 1199.846307][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2001'. [ 1199.857067][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2001'. [ 1207.522594][T15249] loop9: detected capacity change from 0 to 512 [ 1208.665328][T15249] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1208.743267][T15249] EXT4-fs error (device loop9): xattr_find_entry:337: inode #15: comm syz.9.2011: corrupted xattr entries [ 1208.796446][T15249] EXT4-fs (loop9): 1 orphan inode deleted [ 1208.803989][T15249] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1209.851890][T13377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.391052][T15270] loop9: detected capacity change from 0 to 128 [ 1210.401989][T15270] EXT4-fs: Ignoring removed nobh option [ 1210.714635][T15270] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1210.727954][T15270] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1211.000041][T13377] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1213.583203][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1216.117658][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2013'. [ 1216.130465][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2013'. [ 1216.141086][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2013'. [ 1216.151735][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2013'. [ 1216.161939][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2013'. [ 1217.875713][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2026'. [ 1217.901652][T15324] IPVS: Unknown mcast interface: vcan0 [ 1221.275681][T15345] loop8: detected capacity change from 0 to 512 [ 1221.399049][T15345] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 1222.246560][T15355] netlink: 'syz.9.2034': attribute type 1 has an invalid length. [ 1222.279290][T15355] bond1: entered promiscuous mode [ 1222.284879][T15355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1222.331636][T15355] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2034'. [ 1222.341215][T15355] bond1: entered allmulticast mode [ 1222.372976][T15355] bond1: (slave bridge1): making interface the new active one [ 1222.434199][T15355] bridge1: entered promiscuous mode [ 1222.463881][T15355] bridge1: entered allmulticast mode [ 1222.484807][T15355] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1223.069424][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2035'. [ 1223.107441][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2035'. [ 1223.139861][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2035'. [ 1223.164897][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2035'. [ 1223.183635][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2035'. [ 1235.081869][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1235.081885][ T28] audit: type=1804 audit(2000002359.654:344): pid=15444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2054" name="bus" dev="ramfs" ino=35209 res=1 errno=0 [ 1243.797185][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2069'. [ 1252.385111][T15532] syz.5.2076: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1252.385506][T15532] CPU: 1 PID: 15532 Comm: syz.5.2076 Not tainted syzkaller #0 [ 1252.385528][T15532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1252.385543][T15532] Call Trace: [ 1252.385552][T15532] [ 1252.385562][T15532] dump_stack_lvl+0x18c/0x250 [ 1252.385605][T15532] ? show_regs_print_info+0x20/0x20 [ 1252.385637][T15532] ? load_image+0x400/0x400 [ 1252.385668][T15532] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1252.385695][T15532] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1252.385725][T15532] warn_alloc+0x246/0x340 [ 1252.385758][T15532] ? stack_trace_save+0xaa/0x100 [ 1252.385787][T15532] ? zone_watermark_ok_safe+0x230/0x230 [ 1252.385830][T15532] ? kasan_set_track+0x5f/0x70 [ 1252.385862][T15532] ? kasan_set_track+0x4e/0x70 [ 1252.385884][T15532] ? __kasan_kmalloc+0x8f/0xa0 [ 1252.385908][T15532] ? xsk_init_queue+0xad/0x100 [ 1252.385933][T15532] ? xsk_setsockopt+0x42e/0x760 [ 1252.385956][T15532] ? do_sock_setsockopt+0x175/0x1a0 [ 1252.385987][T15532] ? __x64_sys_setsockopt+0x182/0x200 [ 1252.386023][T15532] __vmalloc_node_range+0x126/0x1330 [ 1252.386082][T15532] ? free_vm_area+0x50/0x50 [ 1252.386121][T15532] vmalloc_user+0x74/0x80 [ 1252.386150][T15532] ? xskq_create+0xbf/0x170 [ 1252.386174][T15532] xskq_create+0xbf/0x170 [ 1252.386203][T15532] xsk_init_queue+0xad/0x100 [ 1252.386232][T15532] xsk_setsockopt+0x42e/0x760 [ 1252.386261][T15532] ? xsk_poll+0x680/0x680 [ 1252.386289][T15532] ? __fget_files+0x28/0x4b0 [ 1252.386316][T15532] ? __fget_files+0x28/0x4b0 [ 1252.386348][T15532] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1252.386375][T15532] ? security_socket_setsockopt+0x7e/0xa0 [ 1252.386399][T15532] ? xsk_poll+0x680/0x680 [ 1252.386426][T15532] do_sock_setsockopt+0x175/0x1a0 [ 1252.386458][T15532] ? __fdget+0x180/0x210 [ 1252.386488][T15532] __x64_sys_setsockopt+0x182/0x200 [ 1252.386527][T15532] do_syscall_64+0x55/0xa0 [ 1252.386555][T15532] ? clear_bhb_loop+0x40/0x90 [ 1252.386578][T15532] ? clear_bhb_loop+0x40/0x90 [ 1252.386605][T15532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1252.386627][T15532] RIP: 0033:0x7f6ce299bf79 [ 1252.386647][T15532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.386666][T15532] RSP: 002b:00007f6ce37d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1252.386690][T15532] RAX: ffffffffffffffda RBX: 00007f6ce2c16270 RCX: 00007f6ce299bf79 [ 1252.386706][T15532] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1252.386720][T15532] RBP: 00007f6ce2a327e0 R08: 0000000000000004 R09: 0000000000000000 [ 1252.386733][T15532] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1252.386748][T15532] R13: 00007f6ce2c16308 R14: 00007f6ce2c16270 R15: 00007ffc9c24ecd8 [ 1252.386781][T15532] [ 1252.386790][T15532] Mem-Info: [ 1252.386801][T15532] active_anon:88063 inactive_anon:0 isolated_anon:0 [ 1252.386801][T15532] active_file:7756 inactive_file:51200 isolated_file:0 [ 1252.386801][T15532] unevictable:17726 dirty:53 writeback:0 [ 1252.386801][T15532] slab_reclaimable:11911 slab_unreclaimable:101091 [ 1252.386801][T15532] mapped:28266 shmem:81088 pagetables:999 [ 1252.386801][T15532] sec_pagetables:0 bounce:0 [ 1252.386801][T15532] kernel_misc_reclaimable:0 [ 1252.386801][T15532] free:1229285 free_pcp:10373 free_cma:0 [ 1252.386864][T15532] Node 0 active_anon:352252kB inactive_anon:0kB active_file:31024kB inactive_file:204600kB unevictable:69368kB isolated(anon):0kB isolated(file):0kB mapped:113064kB dirty:212kB writeback:0kB shmem:322816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13508kB pagetables:3996kB sec_pagetables:0kB all_unreclaimable? no [ 1252.386921][T15532] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1252.386973][T15532] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.387034][T15532] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1252.387085][T15532] Node 0 DMA32 free:1001960kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:352212kB inactive_anon:0kB active_file:31024kB inactive_file:203768kB unevictable:69368kB writepending:212kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:23956kB local_pcp:5164kB free_cma:0kB [ 1252.387148][T15532] lowmem_reserve[]: 0 0 0 0 0 [ 1252.387194][T15532] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.387252][T15532] lowmem_reserve[]: 0 0 0 0 0 [ 1252.387299][T15532] Node 1 Normal free:3899836kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17536kB local_pcp:5408kB free_cma:0kB [ 1252.387359][T15532] lowmem_reserve[]: 0 0 0 0 0 [ 1252.387407][T15532] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1252.387596][T15532] Node 0 DMA32: 172*4kB (UE) 129*8kB (UME) 645*16kB (UME) 685*32kB (UME) 25*64kB (UME) 8*128kB (UE) 131*256kB (UME) 72*512kB (UME) 16*1024kB (UM) 5*2048kB (M) 212*4096kB (UM) = 1001960kB [ 1252.387808][T15532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1252.387942][T15532] Node 1 Normal: 247*4kB (UME) 76*8kB (UME) 44*16kB (UME) 194*32kB (UME) 56*64kB (UME) 11*128kB (UME) 1*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3899836kB [ 1252.388148][T15532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.388166][T15532] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1252.388184][T15532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.388218][T15532] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1252.388236][T15532] 156988 total pagecache pages [ 1252.388245][T15532] 0 pages in swap cache [ 1252.388253][T15532] Free swap = 124296kB [ 1252.388262][T15532] Total swap = 124996kB [ 1252.388271][T15532] 2097051 pages RAM [ 1252.388279][T15532] 0 pages HighMem/MovableOnly [ 1252.388287][T15532] 416922 pages reserved [ 1252.388296][T15532] 0 pages cma reserved [ 1252.753271][ C1] vkms_vblank_simulate: vblank timer overrun [ 1252.786608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1252.817344][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.023070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.607002][ T28] audit: type=1804 audit(2000002378.830:345): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2081" name="bus" dev="ramfs" ino=35339 res=1 errno=0 [ 1257.143288][T15572] loop9: detected capacity change from 0 to 1024 [ 1259.538437][ T35] hfsplus: b-tree write err: -5, ino 4 [ 1265.247307][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 1279.168040][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1285.594849][ T28] audit: type=1326 audit(2000002406.883:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.7.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1285.669245][ T28] audit: type=1326 audit(2000002406.883:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.7.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1285.904434][ T28] audit: type=1326 audit(2000002406.883:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.7.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1286.022670][ T28] audit: type=1326 audit(2000002406.883:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.7.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1286.373848][T15721] loop9: detected capacity change from 0 to 512 [ 1286.457729][T15721] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1286.601531][T15721] EXT4-fs error (device loop9): ext4_orphan_get:1398: inode #15: comm syz.9.2118: inode has both inline data and extents flags [ 1286.616226][ T28] audit: type=1326 audit(2000002406.883:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.7.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1286.639923][ T28] audit: type=1326 audit(2000002406.883:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.7.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1286.684020][T15721] EXT4-fs error (device loop9): ext4_orphan_get:1403: comm syz.9.2118: couldn't read orphan inode 15 (err -117) [ 1286.730862][T15721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1286.977333][ T28] audit: type=1326 audit(2000002406.883:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.7.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1287.518874][ T28] audit: type=1326 audit(2000002406.883:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.7.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1287.703708][ T28] audit: type=1326 audit(2000002406.920:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.7.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1287.738270][ T28] audit: type=1326 audit(2000002406.920:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.7.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1287.795049][T13377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.361399][T15757] tipc: Failed to remove unknown binding: 66,1,1/0:705799682/705799684 [ 1294.370529][T15757] tipc: Failed to remove unknown binding: 66,1,1/0:705799682/705799684 [ 1295.561258][T15769] syzkaller0: entered promiscuous mode [ 1295.566936][T15769] syzkaller0: entered allmulticast mode [ 1300.787768][T15790] netlink: 'syz.5.2135': attribute type 1 has an invalid length. [ 1301.828271][T15793] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1301.916078][T15796] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2135'. [ 1301.995088][T12184] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1302.010976][T15796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.047003][T15797] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2135'. [ 1302.241590][T12184] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1302.671490][T15804] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2501057344/2501057346 [ 1302.680979][T15804] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2501057344/2501057346 [ 1311.320842][ T4431] Bluetooth: hci4: Frame reassembly failed (-84) [ 1313.001244][T15859] No such timeout policy "syz1" [ 1313.455658][T14452] Bluetooth: hci4: command 0x1003 tx timeout [ 1313.490053][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1322.262469][T15904] loop8: detected capacity change from 0 to 256 [ 1322.346288][T15904] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1323.707936][T15922] loop5: detected capacity change from 0 to 512 [ 1323.866667][T15922] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1326.310238][T15929] loop8: detected capacity change from 0 to 512 [ 1326.441482][T15929] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1326.550694][T15929] EXT4-fs (loop8): 1 truncate cleaned up [ 1326.557862][T15929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1327.428282][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2167'. [ 1327.437434][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2167'. [ 1327.738626][T11843] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.216335][T15990] loop5: detected capacity change from 0 to 512 [ 1333.242429][T15990] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1333.270014][T15990] EXT4-fs (loop5): 1 truncate cleaned up [ 1333.309507][T15990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1334.294635][T16005] netlink: 'syz.9.2180': attribute type 21 has an invalid length. [ 1334.660388][ T7433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.729702][T16011] loop8: detected capacity change from 0 to 256 [ 1335.017114][T16011] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1338.667617][T16038] loop5: detected capacity change from 0 to 1024 [ 1342.055695][T16058] loop9: detected capacity change from 0 to 40427 [ 1342.124703][T16058] F2FS-fs (loop9): invalid crc value [ 1342.135279][T16058] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1342.391744][T16069] No such timeout policy "syz1" [ 1342.612304][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2196'. [ 1342.621722][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2196'. [ 1342.786752][T16058] F2FS-fs (loop9): Start checkpoint disabled! [ 1342.820496][T16058] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1343.224346][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 1343.224362][ T28] audit: type=1800 audit(2000002460.799:424): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2195" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1344.763518][ T28] audit: type=1800 audit(2000002462.240:425): pid=16075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2195" name="bus" dev="loop9" ino=10 res=0 errno=0 [ 1344.871958][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1348.665075][T12184] kworker/u4:19: attempt to access beyond end of device [ 1348.665075][T12184] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1348.772528][T12184] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1348.800608][T12184] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1350.268131][T16125] loop5: detected capacity change from 0 to 32768 [ 1350.596178][T16130] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 1350.596178][T16130] [ 1350.631726][T16130] ERROR: (device loop5): remounting filesystem as read-only [ 1350.657477][T16130] syz.5.2206: attempt to access beyond end of device [ 1350.657477][T16130] loop5: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 1350.971768][T16133] loop9: detected capacity change from 0 to 1024 [ 1351.128767][ T113] blkno = 1580, nblocks = 1 [ 1351.228022][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 1351.228022][ T113] [ 1351.764251][ T5785] Bluetooth: hci0: unexpected event for opcode 0x0c7d [ 1354.564131][T16145] syzkaller0: entered promiscuous mode [ 1354.571595][T16145] syzkaller0: entered allmulticast mode [ 1361.494171][T16215] loop8: detected capacity change from 0 to 2048 [ 1361.641177][T16215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1361.955024][T16222] tipc: Enabling of bearer rejected, already enabled [ 1362.676807][ T28] audit: type=1800 audit(2000002479.002:426): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2231" name="bus" dev="loop8" ino=1436 res=0 errno=0 [ 1363.129079][T16230] loop9: detected capacity change from 0 to 512 [ 1363.206108][T16230] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.2230: bg 0: block 393: padding at end of block bitmap is not set [ 1363.469862][T16230] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1363.554185][T16230] EXT4-fs (loop9): 2 truncates cleaned up [ 1363.573114][T16230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1365.024537][T13377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.567559][T16277] loop9: detected capacity change from 0 to 256 [ 1369.665973][T16277] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1373.784070][T16316] netlink: 'syz.9.2254': attribute type 10 has an invalid length. [ 1374.134432][T16316] hsr0: entered promiscuous mode [ 1374.204063][T16320] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1374.230973][T16320] CIFS: Unable to determine destination address [ 1374.916242][T16316] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1374.982035][T16316] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1375.028480][T16316] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1375.041595][T16316] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1378.147287][T16333] Cannot find add_set index 0 as target [ 1381.486237][T16348] netlink: 'syz.8.2264': attribute type 6 has an invalid length. [ 1390.858940][T13878] IPVS: starting estimator thread 0... [ 1391.132051][T16410] IPVS: using max 19 ests per chain, 45600 per kthread [ 1396.374418][T16441] loop9: detected capacity change from 0 to 512 [ 1396.418515][T16441] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1396.482852][T16441] EXT4-fs (loop9): 1 truncate cleaned up [ 1396.516774][T16441] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1397.612581][T13377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.711953][T16452] loop8: detected capacity change from 0 to 1024 [ 1398.826329][T12184] hfsplus: b-tree write err: -5, ino 4 [ 1404.472962][T16487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2297'. [ 1412.189683][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1416.510918][T16533] xt_limit: Overflow, try lower: 687865856/40 [ 1424.256144][T16593] geneve3: entered promiscuous mode [ 1424.261407][T16593] geneve3: entered allmulticast mode [ 1444.980739][T16682] sctp: [Deprecated]: syz.5.2343 (pid 16682) Use of int in maxseg socket option. [ 1444.980739][T16682] Use struct sctp_assoc_value instead [ 1446.003312][T16682] loop5: detected capacity change from 0 to 256 [ 1467.091700][T16841] loop5: detected capacity change from 0 to 32768 [ 1467.114441][T16841] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.2381 (16841) [ 1467.167782][T16841] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1467.178962][T16841] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 1467.188509][T16841] BTRFS info (device loop5): force zlib compression, level 3 [ 1467.195998][T16841] BTRFS info (device loop5): force clearing of disk cache [ 1467.203450][T16841] BTRFS info (device loop5): setting nodatasum [ 1467.209848][T16841] BTRFS info (device loop5): use zlib compression, level 3 [ 1467.217875][T16841] BTRFS info (device loop5): enabling disk space caching [ 1467.225032][T16841] BTRFS info (device loop5): disk space caching is enabled [ 1467.500459][T16841] BTRFS info (device loop5): enabling ssd optimizations [ 1467.507563][T16841] BTRFS info (device loop5): auto enabling async discard [ 1467.537985][T16841] BTRFS info (device loop5): rebuilding free space tree [ 1467.872289][T16841] BTRFS info (device loop5): disabling free space tree [ 1467.879540][T16841] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1467.889997][T16841] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1468.342038][T14452] Bluetooth: hci0: command 0x0406 tx timeout [ 1469.052646][ T7433] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1476.214261][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.737966][T16977] kvm: kvm [16976]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xb [ 1490.871289][T16996] xt_SECMARK: invalid mode: 2 [ 1492.954623][T17017] (null): rxe_set_mtu: Set mtu to 1024 [ 1492.965493][T17017] wg2 speed is unknown, defaulting to 1000 [ 1492.994646][T17017] wg2 speed is unknown, defaulting to 1000 [ 1493.014416][T17017] wg2 speed is unknown, defaulting to 1000 [ 1493.668541][T17017] infiniband syz2: set active [ 1493.673747][T17017] infiniband syz2: added wg2 [ 1493.679087][T17017] syz2: rxe_create_cq: returned err = -12 [ 1493.685374][T17017] infiniband syz2: Couldn't create ib_mad CQ [ 1493.693702][T17017] infiniband syz2: Couldn't open port 1 [ 1493.703218][T11887] wg2 speed is unknown, defaulting to 1000 [ 1493.722293][T17017] RDS/IB: syz2: added [ 1493.726456][T17017] smc: adding ib device syz2 with port count 1 [ 1493.732770][T17017] smc: ib device syz2 port 1 has pnetid [ 1493.741822][T17017] wg2 speed is unknown, defaulting to 1000 [ 1493.864260][T17017] wg2 speed is unknown, defaulting to 1000 [ 1493.983259][T17017] wg2 speed is unknown, defaulting to 1000 [ 1494.092971][T11887] wg2 speed is unknown, defaulting to 1000 [ 1494.171641][T17017] wg2 speed is unknown, defaulting to 1000 [ 1494.294804][T17017] wg2 speed is unknown, defaulting to 1000 [ 1503.922488][T17083] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2434'. [ 1504.960279][T17091] loop5: detected capacity change from 0 to 512 [ 1504.968029][T17091] EXT4-fs: Ignoring removed bh option [ 1504.976872][T17091] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1505.062849][T17091] EXT4-fs (loop5): 1 truncate cleaned up [ 1505.070025][T17091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1506.050300][T17100] loop9: detected capacity change from 0 to 1024 [ 1506.059814][T17100] EXT4-fs: Ignoring removed nobh option [ 1506.134766][T17100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1506.438715][ T7433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.973424][T14452] Bluetooth: hci3: unexpected event for opcode 0x041b [ 1507.464946][T13377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.824910][T17125] loop9: detected capacity change from 0 to 1024 [ 1509.864921][T17125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1510.922796][T17130] loop5: detected capacity change from 0 to 256 [ 1511.063804][T17130] FAT-fs (loop5): Directory bread(block 64) failed [ 1511.071004][T17130] FAT-fs (loop5): Directory bread(block 65) failed [ 1511.078220][T17130] FAT-fs (loop5): Directory bread(block 66) failed [ 1511.085262][T17130] FAT-fs (loop5): Directory bread(block 67) failed [ 1511.092544][T17130] FAT-fs (loop5): Directory bread(block 68) failed [ 1511.099231][T17130] FAT-fs (loop5): Directory bread(block 69) failed [ 1511.106627][T17130] FAT-fs (loop5): Directory bread(block 70) failed [ 1511.113981][T17130] FAT-fs (loop5): Directory bread(block 71) failed [ 1511.123372][T17130] FAT-fs (loop5): Directory bread(block 72) failed [ 1511.130116][T17130] FAT-fs (loop5): Directory bread(block 73) failed [ 1513.259553][T17138] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2447'. [ 1513.287052][T17138] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2447'. [ 1513.342064][T17140] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2447'. [ 1524.100951][T17206] tipc: Enabled bearer , priority 0 [ 1524.130896][T17206] syzkaller0: entered promiscuous mode [ 1524.154963][T17206] syzkaller0: entered allmulticast mode [ 1524.518003][T17211] tipc: Resetting bearer [ 1524.805579][T17203] tipc: Resetting bearer [ 1525.205865][T17203] tipc: Disabling bearer [ 1529.648773][T17253] netlink: 6 bytes leftover after parsing attributes in process `syz.8.2474'. [ 1529.659435][T17253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1530.154059][T17261] loop8: detected capacity change from 0 to 512 [ 1530.250578][T17260] loop5: detected capacity change from 0 to 16 [ 1530.326375][T17261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1530.357174][T17260] erofs: (device loop5): mounted with root inode @ nid 36. [ 1530.457685][T17261] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1531.490773][T11843] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.584930][T17301] loop5: detected capacity change from 0 to 128 [ 1536.592869][T17301] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1537.910897][T17301] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1538.427187][T12184] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1541.912605][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1543.785215][T17337] loop8: detected capacity change from 0 to 128 [ 1551.910378][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2507'. [ 1551.962021][T17381] dummy0: entered promiscuous mode [ 1551.968493][T17381] macvtap1: entered promiscuous mode [ 1551.993641][T17381] macvtap1: entered allmulticast mode [ 1552.010115][T17381] dummy0: entered allmulticast mode [ 1552.054340][T17382] dummy0: left allmulticast mode [ 1552.135018][T17382] dummy0: left promiscuous mode [ 1553.049804][T17387] loop6: detected capacity change from 0 to 7 [ 1553.065281][T17387] Dev loop6: unable to read RDB block 7 [ 1553.073167][T17387] loop6: unable to read partition table [ 1553.104118][T17387] loop6: partition table beyond EOD, truncated [ 1553.155984][T17387] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1553.583202][T17401] overlayfs: failed to clone upperpath [ 1555.729434][T17422] loop8: detected capacity change from 0 to 1024 [ 1561.489169][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2519'. [ 1561.570709][T17454] vlan2: entered promiscuous mode [ 1561.591470][T17454] batadv0: entered promiscuous mode [ 1562.926063][T17476] loop9: detected capacity change from 0 to 256 [ 1563.168216][T17476] FAT-fs (loop9): Directory bread(block 64) failed [ 1563.189083][T17476] FAT-fs (loop9): Directory bread(block 65) failed [ 1563.195809][T17476] FAT-fs (loop9): Directory bread(block 66) failed [ 1563.240246][T17476] FAT-fs (loop9): Directory bread(block 67) failed [ 1563.266676][T17476] FAT-fs (loop9): Directory bread(block 68) failed [ 1563.294025][T17476] FAT-fs (loop9): Directory bread(block 69) failed [ 1563.315077][T17476] FAT-fs (loop9): Directory bread(block 70) failed [ 1563.332201][T17476] FAT-fs (loop9): Directory bread(block 71) failed [ 1563.339455][T17476] FAT-fs (loop9): Directory bread(block 72) failed [ 1563.347066][T17476] FAT-fs (loop9): Directory bread(block 73) failed [ 1564.412819][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2520'. [ 1566.306120][T13878] libceph: connect (1)[c::]:6789 error -101 [ 1566.318846][T13878] libceph: mon0 (1)[c::]:6789 connect error [ 1566.332932][T13878] libceph: connect (1)[c::]:6789 error -101 [ 1566.339186][T13878] libceph: mon0 (1)[c::]:6789 connect error [ 1566.464359][T17497] ceph: No mds server is up or the cluster is laggy [ 1566.735003][T17507] hub 8-0:1.0: USB hub found [ 1566.747898][T17507] hub 8-0:1.0: 1 port detected [ 1567.506458][T13878] libceph: connect (1)[c::]:6789 error -101 [ 1567.528399][T13878] libceph: mon0 (1)[c::]:6789 connect error [ 1570.082022][T17520] syzkaller0: entered promiscuous mode [ 1570.113759][T17520] syzkaller0: entered allmulticast mode [ 1570.139025][T17520] 0: reclassify loop, rule prio 0, protocol 800 [ 1574.041324][T17554] loop9: detected capacity change from 0 to 1024 [ 1575.037894][ T28] audit: type=1800 audit(2000002677.531:427): pid=17558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2542" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 1577.447436][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2547'. [ 1579.288838][ T9] IPVS: starting estimator thread 0... [ 1579.393682][T17597] IPVS: using max 19 ests per chain, 45600 per kthread [ 1580.826292][T17608] loop5: detected capacity change from 0 to 1024 [ 1581.298051][T17614] overlayfs: failed to clone lowerpath [ 1582.111455][T17618] hfsplus: request for non-existent node 16777216 in B*Tree [ 1582.119531][T17618] hfsplus: request for non-existent node 16777216 in B*Tree [ 1582.142795][ T28] audit: type=1800 audit(2000002684.247:428): pid=17618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2554" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1585.858901][T17635] loop6: detected capacity change from 0 to 7 [ 1585.885477][T17635] Dev loop6: unable to read RDB block 7 [ 1585.891452][T17635] loop6: unable to read partition table [ 1585.898385][T17635] loop6: partition table beyond EOD, truncated [ 1585.904789][T17635] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1588.028278][T17656] loop5: detected capacity change from 0 to 64 [ 1588.296755][T17665] Bluetooth: MGMT ver 1.22 [ 1590.596230][ T28] audit: type=1800 audit(2000002692.189:429): pid=17656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2565" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 1592.637198][T17670] syz.5.2565: attempt to access beyond end of device [ 1592.637198][T17670] loop5: rw=34817, sector=57, nr_sectors = 8 limit=64 [ 1597.273259][T17698] kvm: kvm [17696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfffd00000572 [ 1597.381143][T17698] kvm: kvm [17696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xea00000000 [ 1597.391768][T17698] kvm: kvm [17696]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1601.257579][T17736] geneve2: entered promiscuous mode [ 1601.263020][T17736] geneve2: entered allmulticast mode [ 1601.564878][T17746] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2590'. [ 1606.906315][T17774] loop8: detected capacity change from 0 to 1024 [ 1606.931019][T17774] EXT4-fs: Ignoring removed nobh option [ 1607.117899][T17774] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1607.495250][T17784] loop5: detected capacity change from 0 to 1024 [ 1607.519794][T17784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1607.628592][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.725461][T14452] Bluetooth: hci0: unexpected event for opcode 0x041b [ 1608.187416][T17790] tipc: Enabling of bearer rejected, already enabled [ 1608.265556][T11843] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.387225][T17798] kvm: kvm [17797]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfffd00000572 [ 1610.424995][T17798] kvm: kvm [17797]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xea00000000 [ 1610.435068][T17798] kvm: kvm [17797]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1617.825106][T17869] loop5: detected capacity change from 0 to 256 [ 1623.698957][T17922] (null): rxe_set_mtu: Set mtu to 1024 [ 1623.709149][T17922] rdma_rxe: rxe_newlink: failed to add wg2 [ 1633.142593][T17982] loop8: detected capacity change from 0 to 4096 [ 1633.191557][T17982] NILFS (loop8): invalid segment: Inconsistency found [ 1633.268452][T17982] NILFS (loop8): trying rollback from an earlier position [ 1633.301192][T17982] NILFS (loop8): recovery complete [ 1633.327797][T17983] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1635.942234][T18003] loop8: detected capacity change from 0 to 1024 [ 1636.027090][T18003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1650.550692][T18087] geneve2: entered promiscuous mode [ 1650.555973][T18087] geneve2: entered allmulticast mode [ 1657.756302][T18138] sctp: [Deprecated]: syz.8.2680 (pid 18138) Use of int in maxseg socket option. [ 1657.756302][T18138] Use struct sctp_assoc_value instead [ 1658.036263][T18138] loop8: detected capacity change from 0 to 256 [ 1667.229403][T18179] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1673.267864][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1680.657797][T18288] ALSA: mixer_oss: invalid OSS volume '' [ 1689.352944][T13878] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1689.569692][T13878] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.616296][T13878] usb 9-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1689.656670][T13878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.687655][T13878] usb 9-1: Product: syz [ 1689.732610][T13878] usb 9-1: Manufacturer: syz [ 1689.737488][T13878] usb 9-1: SerialNumber: syz [ 1690.005521][T13878] usb 9-1: config 0 descriptor?? [ 1690.332144][T13878] keyspan 9-1:0.0: Keyspan 1 port adapter converter detected [ 1690.339972][T13878] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87 [ 1690.597739][T18358] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1690.606702][T18358] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1690.692555][T13878] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7 [ 1690.717964][T13878] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81 [ 1690.736115][T13878] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1 [ 1690.744681][T13878] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2 [ 1690.779198][T13878] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85 [ 1690.787267][T13878] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5 [ 1691.593557][T13878] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1693.324761][ T9] usb 9-1: USB disconnect, device number 7 [ 1693.342789][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1693.355627][ T9] keyspan 9-1:0.0: device disconnected [ 1699.070090][T13601] libceph: connect (1)[c::]:6789 error -101 [ 1699.078925][T13601] libceph: mon0 (1)[c::]:6789 connect error [ 1699.153156][T18409] ceph: No mds server is up or the cluster is laggy [ 1704.472091][T18433] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2744'. [ 1704.492108][T18433] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1717.626230][T18500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1718.886320][T18507] ip6gretap1: entered promiscuous mode [ 1718.893764][T18507] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1718.915871][T18507] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1719.057891][ T1125] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1720.737412][ T1125] bond1: (slave macvlan2): link status up again after 0 ms [ 1720.822792][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1720.865452][ T1125] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1720.971807][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1721.109434][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1721.900233][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1722.070172][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1722.209164][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1722.354762][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1722.519531][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1722.834869][T18530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2770'. [ 1722.844041][T18530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2770'. [ 1725.321618][ T35] net_ratelimit: 4 callbacks suppressed [ 1725.321638][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1725.461358][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1727.354924][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1727.503420][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1727.688285][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1727.854783][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1727.993304][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1728.121143][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1728.260892][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1728.433342][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1728.971197][T18560] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1731.376217][ T1125] net_ratelimit: 10 callbacks suppressed [ 1731.376236][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1731.543166][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1731.782684][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1732.953788][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1734.745538][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1734.965716][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1735.363128][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1735.498730][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1735.626233][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1735.755189][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1735.830675][T18589] loop9: detected capacity change from 0 to 764 [ 1736.802202][T12170] net_ratelimit: 7 callbacks suppressed [ 1736.802223][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1737.422132][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1737.547352][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1737.743109][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1739.889750][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1739.904543][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1739.971248][T18603] loop8: detected capacity change from 0 to 256 [ 1740.010887][T18603] exfat: Deprecated parameter 'namecase' [ 1740.020207][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1740.046310][T18603] exfat: Deprecated parameter 'namecase' [ 1740.090384][T18603] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1740.138140][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1740.308555][ T28] audit: type=1800 audit(2000002832.237:430): pid=18603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2784" name="file1" dev="loop8" ino=1048719 res=0 errno=0 [ 1740.506289][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1742.721766][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1742.875828][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1743.078331][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1743.270755][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1743.520697][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1743.764778][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1744.002795][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1744.140896][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1744.289783][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1744.434892][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1747.881453][T18644] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 1748.109726][T18648] loop8: detected capacity change from 0 to 764 [ 1748.208815][T12184] net_ratelimit: 16 callbacks suppressed [ 1748.208834][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1748.337839][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1749.141338][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1749.256625][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1749.438014][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1749.566395][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1750.347996][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1750.550252][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1750.682173][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1750.822278][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1753.476595][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2802'. [ 1753.921951][ T3502] net_ratelimit: 3 callbacks suppressed [ 1753.921990][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1754.238204][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1754.434457][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1754.570274][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1754.710190][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1754.827570][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1754.954726][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1755.072429][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1755.200652][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1755.319074][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1759.348835][ T3502] net_ratelimit: 19 callbacks suppressed [ 1759.348856][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1759.551708][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1760.165462][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1760.378096][T18720] loop8: detected capacity change from 0 to 32768 [ 1760.394016][T18720] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.2812 (18720) [ 1760.452387][T18720] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1760.462712][T18720] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1760.471604][T18720] BTRFS info (device loop8): using free space tree [ 1760.638841][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1761.686260][T18720] BTRFS info (device loop8): enabling ssd optimizations [ 1761.693349][T18720] BTRFS info (device loop8): auto enabling async discard [ 1761.725050][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1761.978390][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1762.133311][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1762.448840][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1763.966876][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1763.985338][T18718] Process accounting resumed [ 1764.140144][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1765.211685][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1765.356432][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1765.476862][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1765.828525][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1766.043065][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1766.275410][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1766.291514][T18774] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 1766.312897][T11843] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1767.128614][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1767.373028][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1767.603413][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1768.381984][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1768.402527][T18784] loop9: detected capacity change from 0 to 128 [ 1768.635019][T18784] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1768.715965][T18784] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1770.832370][T12184] net_ratelimit: 7 callbacks suppressed [ 1770.832390][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1771.111815][T13377] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1771.281125][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1771.549701][T18813] loop9: detected capacity change from 0 to 256 [ 1771.573176][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1771.635163][T18813] exfat: Deprecated parameter 'namecase' [ 1771.640975][T18813] exfat: Deprecated parameter 'namecase' [ 1771.760122][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1771.816389][T18813] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1772.167722][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1772.365812][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1773.118778][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1773.727250][ T28] audit: type=1800 audit(2000002862.076:431): pid=18813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2828" name="file1" dev="loop9" ino=1048720 res=0 errno=0 [ 1773.770377][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1773.984065][ T28] audit: type=1326 audit(2000002863.732:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1774.007997][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1774.193078][ T28] audit: type=1326 audit(2000002863.741:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1774.251337][ T28] audit: type=1326 audit(2000002863.741:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1774.289336][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1775.992626][ T28] audit: type=1326 audit(2000002863.769:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1777.919151][ T28] audit: type=1326 audit(2000002863.779:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1777.974079][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1778.089364][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1778.131640][ T28] audit: type=1326 audit(2000002863.779:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1778.206758][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1778.885211][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1778.894185][ T28] audit: type=1326 audit(2000002863.779:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1779.173263][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1779.267873][ T28] audit: type=1326 audit(2000002863.779:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1779.372353][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1779.420733][ T28] audit: type=1326 audit(2000002863.779:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1779.489489][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1779.574943][ T28] audit: type=1326 audit(2000002863.779:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1779.630037][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1779.719135][ T28] audit: type=1326 audit(2000002863.779:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1779.798520][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1779.874285][ T28] audit: type=1326 audit(2000002863.779:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1779.960727][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1780.013564][ T28] audit: type=1326 audit(2000002863.779:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1780.152997][ T28] audit: type=1326 audit(2000002863.779:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1780.452513][ T28] audit: type=1326 audit(2000002863.779:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1781.232519][ T28] audit: type=1326 audit(2000002863.779:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1781.259590][ T28] audit: type=1326 audit(2000002863.779:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.8.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4de79bf79 code=0x7ffc0000 [ 1783.470875][T12180] net_ratelimit: 19 callbacks suppressed [ 1783.470891][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1783.724312][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1783.842346][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1784.973154][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1786.903738][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1788.899264][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1789.036709][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1789.250082][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1789.385973][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1789.574655][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1789.709678][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1789.848827][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1789.967338][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1790.089981][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1790.388278][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1794.474842][ T1125] net_ratelimit: 8 callbacks suppressed [ 1794.474859][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1797.688877][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1797.960202][T12178] bond1: (slave macvlan2): failed to get link speed/duplex [ 1798.080462][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1798.406023][T18917] loop9: detected capacity change from 0 to 4096 [ 1798.632496][T18917] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1798.896492][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1799.064383][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1799.198116][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1800.519965][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1800.731844][ T5773] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1800.771732][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1801.053599][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1801.149420][ T5773] usb 6-1: Using ep0 maxpacket: 16 [ 1801.165788][ T5773] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1801.174632][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1801.207070][ T5773] usb 6-1: config 0 has no interface number 0 [ 1801.228938][ T5773] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1801.250095][ T5773] usb 6-1: config 0 interface 251 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1801.448772][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1801.460686][ T5773] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1801.497177][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.507660][ T5773] usb 6-1: Product: syz [ 1801.523658][ T5773] usb 6-1: Manufacturer: syz [ 1801.530137][ T5773] usb 6-1: SerialNumber: syz [ 1801.544970][ T5773] usb 6-1: config 0 descriptor?? [ 1801.565874][T18923] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1801.577632][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1801.591777][ T5773] asix: probe of 6-1:0.251 failed with error -22 [ 1801.696012][T16095] bond1: (slave macvlan2): failed to get link speed/duplex [ 1801.814535][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1801.970695][T11887] usb 6-1: USB disconnect, device number 11 [ 1801.980793][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1802.197209][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1802.450399][T18939] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 1803.953985][T18950] overlay: Unknown parameter '/' [ 1805.126673][T18953] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1805.164078][T18953] overlayfs: failed to look up (tracing) for ino (-66) [ 1809.137669][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1809.639715][T12180] net_ratelimit: 3 callbacks suppressed [ 1809.639741][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1809.849036][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1809.993555][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1810.142323][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1810.578156][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1810.850756][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1811.102602][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1811.505029][T12184] bond1: (slave macvlan2): failed to get link speed/duplex [ 1812.720240][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1813.123154][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1815.089095][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1815.089115][ T28] audit: type=1326 audit(2000002900.409:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1815.124249][ T1125] net_ratelimit: 1 callbacks suppressed [ 1815.124267][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1815.232128][ T28] audit: type=1326 audit(2000002900.409:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1815.279574][T19007] netlink: 'syz.9.2876': attribute type 10 has an invalid length. [ 1815.322170][ T28] audit: type=1326 audit(2000002900.428:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1815.433683][ T28] audit: type=1326 audit(2000002900.428:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1815.512464][ T28] audit: type=1326 audit(2000002900.428:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1815.706704][ T28] audit: type=1326 audit(2000002900.437:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1815.730323][ T28] audit: type=1326 audit(2000002900.437:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1816.988120][T19007] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1817.020523][ T28] audit: type=1326 audit(2000002900.437:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1817.102186][ T28] audit: type=1326 audit(2000002900.446:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1817.293915][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1817.301471][ T28] audit: type=1326 audit(2000002900.446:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.7.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e8b9bf79 code=0x7ffc0000 [ 1817.453595][T19016] [ 1817.456071][T19016] ============================= [ 1817.461008][T19016] WARNING: suspicious RCU usage [ 1817.466439][T19016] syzkaller #0 Not tainted [ 1817.470908][T19016] ----------------------------- [ 1817.476354][T19016] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 1817.485154][T19016] [ 1817.485154][T19016] other info that might help us debug this: [ 1817.485154][T19016] [ 1817.495816][T19016] [ 1817.495816][T19016] rcu_scheduler_active = 2, debug_locks = 1 [ 1817.503927][T19016] 1 lock held by syz.9.2876/19016: [ 1817.509630][T19016] #0: ffffffff8e3c0208 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40 [ 1817.519493][T19016] [ 1817.519493][T19016] stack backtrace: [ 1817.525475][T19016] CPU: 1 PID: 19016 Comm: syz.9.2876 Not tainted syzkaller #0 [ 1817.532996][T19016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1817.543115][T19016] Call Trace: [ 1817.546446][T19016] [ 1817.549443][T19016] dump_stack_lvl+0x18c/0x250 [ 1817.554199][T19016] ? show_regs_print_info+0x20/0x20 [ 1817.559462][T19016] ? load_image+0x400/0x400 [ 1817.564042][T19016] lockdep_rcu_suspicious+0x1e1/0x300 [ 1817.569493][T19016] ieee80211_check_concurrent_iface+0x475/0x950 [ 1817.575806][T19016] ieee80211_open+0xc1/0x200 [ 1817.580547][T19016] __dev_open+0x2cb/0x430 [ 1817.584938][T19016] ? dev_open+0x190/0x190 [ 1817.589337][T19016] __dev_change_flags+0x211/0x6a0 [ 1817.594440][T19016] ? dev_get_flags+0x1c0/0x1c0 [ 1817.599269][T19016] ? mutex_lock_nested+0x20/0x20 [ 1817.604270][T19016] ? apparmor_capable+0x137/0x1a0 [ 1817.609358][T19016] dev_change_flags+0x88/0x1a0 [ 1817.614199][T19016] devinet_ioctl+0x95c/0x1c40 [ 1817.619048][T19016] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 1817.624237][T19016] ? _copy_from_user+0xa5/0xe0 [ 1817.629078][T19016] ? get_user_ifreq+0x12b/0x180 [ 1817.634020][T19016] inet_ioctl+0x42b/0x560 [ 1817.638413][T19016] ? tomoyo_path_number_perm+0x217/0x620 [ 1817.644111][T19016] ? inet_shutdown+0x370/0x370 [ 1817.648932][T19016] ? slab_free_freelist_hook+0x130/0x1a0 [ 1817.654640][T19016] ? tomoyo_path_number_perm+0x500/0x620 [ 1817.660323][T19016] ? __kmem_cache_free+0xba/0x1e0 [ 1817.665399][T19016] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1817.670909][T19016] sock_do_ioctl+0xfc/0x310 [ 1817.675443][T19016] ? sock_show_fdinfo+0xb0/0xb0 [ 1817.680337][T19016] sock_ioctl+0x5ba/0x7e0 [ 1817.684702][T19016] ? sock_poll+0x3e0/0x3e0 [ 1817.689155][T19016] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1817.694139][T19016] ? security_file_ioctl+0x80/0xa0 [ 1817.699293][T19016] ? sock_poll+0x3e0/0x3e0 [ 1817.703740][T19016] __se_sys_ioctl+0xfd/0x170 [ 1817.708384][T19016] do_syscall_64+0x55/0xa0 [ 1817.712843][T19016] ? clear_bhb_loop+0x40/0x90 [ 1817.717549][T19016] ? clear_bhb_loop+0x40/0x90 [ 1817.722260][T19016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1817.728183][T19016] RIP: 0033:0x7fddde79bf79 [ 1817.732634][T19016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.752281][T19016] RSP: 002b:00007fdddf60c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1817.760734][T19016] RAX: ffffffffffffffda RBX: 00007fdddea16270 RCX: 00007fddde79bf79 [ 1817.768739][T19016] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 1817.776735][T19016] RBP: 00007fddde8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1817.784752][T19016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1817.792751][T19016] R13: 00007fdddea16308 R14: 00007fdddea16270 R15: 00007ffc5e39f2e8 [ 1817.800859][T19016] [ 1817.836635][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1817.966137][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1818.083266][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1818.200258][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1818.317842][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1818.451477][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1818.574466][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1818.702908][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1820.509495][ T1125] net_ratelimit: 14 callbacks suppressed [ 1820.509517][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1820.640145][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1820.755605][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1820.874969][T12180] bond1: (slave macvlan2): failed to get link speed/duplex [ 1820.991531][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1821.120118][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1821.237939][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1821.356267][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1821.490822][ T3502] bond1: (slave macvlan2): failed to get link speed/duplex [ 1821.621165][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1825.929486][T12170] net_ratelimit: 35 callbacks suppressed [ 1825.929507][T12170] bond1: (slave macvlan2): failed to get link speed/duplex [ 1826.057882][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1826.176193][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1826.293833][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1826.411725][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1826.530430][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1826.645770][ T35] bond1: (slave macvlan2): failed to get link speed/duplex [ 1826.764448][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 1826.880887][ T1125] bond1: (slave macvlan2): failed to get link speed/duplex [ 1827.009345][ T35] bond1: (slave macvlan2): failed to get link speed/duplex